
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa
File: 28a883eb-63e2-3889-af76-c1c78c0659f0.roa (raw, json)
Hash identifier: s/ypidgnFbSPomgHnvY9SDwalpSfEPPiXB3Kmo4MO7k=
Subject key identifier: 49:D1:1E:BD:50:E3:C8:E1:25:FC:A4:FC:37:E2:57:36:98:FF:AD:36
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D2D3F98CCD72F877F93649680
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa
Signing time: Sun 15 Mar 2026 13:00:41 +0000
ROA not before: Sun 15 Mar 2026 13:00:41 +0000
ROA not after: Sat 13 Jun 2026 13:00:41 +0000
asID: 396564
IP address blocks: 216.168.228.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2d:3f:98:cc:d7:2f:87:7f:93:64:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 15 13:00:41 2026 GMT
Not After : Jun 13 13:00:41 2026 GMT
Subject: CN=81627ee5-c358-4374-b92d-c7071d938676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:20:b9:ee:ea:ea:07:b6:25:3d:f7:17:73:
22:9f:2b:ee:86:e8:9b:58:d3:9f:57:ad:c8:3b:22:
d7:96:f4:76:0c:e3:c2:8f:1c:93:57:51:c8:da:da:
90:3b:c4:3b:63:bc:22:ca:5d:91:08:a2:49:9e:8a:
30:ee:3c:3a:9f:eb:b8:09:b6:95:7d:b1:38:3e:94:
e2:79:11:dc:c5:d3:d2:93:47:d3:c2:55:c8:ac:6a:
56:06:5c:b0:ba:55:ba:4c:02:f5:27:08:5d:a8:f0:
1a:f3:3c:cd:6a:4e:8e:47:15:aa:03:db:1d:22:0d:
f6:94:1b:67:84:9a:a6:e0:81:44:ae:fb:3d:57:de:
6a:be:77:e2:e4:7c:36:f7:d7:a6:78:97:2d:7c:bf:
9f:52:b9:3c:a5:d9:0a:e5:c1:4f:51:ea:88:7d:08:
86:b0:00:9c:01:70:3b:3c:30:5a:b3:0d:9f:fa:a4:
8b:ee:7c:26:fa:3e:69:a7:cc:a6:1d:4a:74:f9:a7:
53:ce:be:16:3a:4b:1a:63:ac:7a:f5:a8:89:eb:5c:
7c:20:44:02:e7:51:e2:73:14:e7:a9:7a:f1:52:d1:
d9:ae:80:19:30:86:8a:f0:ef:a5:c3:d8:8e:af:59:
2a:93:fd:1d:c6:5d:1f:c0:f5:33:3d:a7:d6:f6:ed:
f4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D1:1E:BD:50:E3:C8:E1:25:FC:A4:FC:37:E2:57:36:98:FF:AD:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.228.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:6c:66:d4:d5:25:2a:40:0e:13:f9:8d:c9:57:8c:b8:5b:ae:
98:7c:73:ad:1a:7e:3a:12:30:46:7f:e2:15:ee:b1:81:a5:e7:
aa:35:6d:7f:08:92:c7:1d:0b:49:f4:f5:b2:c5:e0:f5:d8:47:
a0:e4:d3:34:62:37:9a:5d:2f:d8:66:46:7b:49:2a:42:0c:e4:
89:55:21:a0:d8:c2:15:46:1e:b2:83:5c:15:85:20:6f:1f:ee:
7b:7a:8b:d9:a2:4a:42:11:03:ea:14:01:fd:ee:b7:e2:9a:2e:
2a:90:f7:48:83:6b:b2:ee:74:00:9e:13:e6:ec:57:02:35:f7:
5c:0b:51:8b:b9:1c:55:b0:d5:fd:d6:cc:d9:21:3f:35:46:fe:
a8:62:80:b5:19:57:8a:0f:83:91:66:8d:d2:a2:50:ee:39:9b:
2f:77:e3:b1:94:3c:0e:58:12:11:48:aa:fc:14:cc:c4:7d:ec:
32:78:f3:90:15:9e:0f:2e:43:4c:7a:a7:29:38:62:b9:4c:ae:
9a:06:44:a5:c7:d1:c3:35:de:c6:51:55:b4:85:96:d6:32:35:
58:dd:cd:3b:89:5c:3f:ac:02:88:59:75:0d:d4:e8:6e:b7:58:
5d:6a:5a:17:59:e0:25:1e:94:21:75:5b:ed:8b:6f:5c:36:d0:
bc:58:14:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:34 2026 by rpki-client