
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa
File: d8995625-d95c-32f8-bd79-899a5fc78f47.roa (raw, json)
Hash identifier: K65FEp7/BmdQynClIVBOyiAQuLPh5SmsYFOQD3lZH2E=
Subject key identifier: 55:B3:3F:CA:4D:D8:5E:28:6D:74:FF:BB:70:94:BC:67:C6:60:08:10
Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
Certificate serial: 010D0C9F4328584F58CD5131CFE8AC42A5852170
Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa
Signing time: Wed 30 Sep 2026 13:00:13 +0000
ROA not before: Wed 30 Sep 2026 13:00:13 +0000
ROA not after: Tue 29 Dec 2026 14:00:13 +0000
asID: 21519
IP address blocks: 208.73.28.0/22 maxlen: 28
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 02 Oct 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:58:cd:51:31:cf:e8:ac:42:a5:85:21:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
Validity
Not Before: Sep 30 13:00:13 2026 GMT
Not After : Dec 29 14:00:13 2026 GMT
Subject: CN=ed096b10-fe4f-4ebe-aafe-c088908396d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:44:7d:7a:05:16:23:ef:e0:64:47:75:df:
c7:4a:55:17:6b:b2:4e:7b:dc:00:6a:df:a5:3c:e9:
64:e9:fb:5d:e5:12:07:47:48:78:e0:31:ac:13:f7:
f6:97:95:a0:2f:40:a3:bc:ac:93:43:4c:b5:e5:8f:
4f:94:c5:32:8c:4f:cf:96:ca:be:ec:d4:29:2b:c5:
e0:63:3e:74:67:5a:19:9f:e5:f5:40:52:55:db:09:
57:51:d0:cf:b3:33:d8:f3:98:61:88:23:34:2f:9f:
7a:0a:51:f5:f4:81:fc:7c:9f:b8:52:7d:3d:8d:c0:
2c:8d:22:e5:2f:bf:e7:37:ca:a1:f6:9d:47:14:18:
56:c1:a5:b4:48:d6:8d:07:86:4a:81:23:f1:a8:f8:
14:8e:4d:55:b0:a5:41:53:b2:53:0a:17:ea:97:39:
d2:75:56:92:22:7c:da:21:3e:a1:3d:9d:43:c2:d0:
04:ad:f1:2a:a5:f0:f9:df:b0:b2:9a:f7:d6:0a:0f:
5e:1e:b7:a2:a6:df:e1:47:d8:72:32:7d:34:70:05:
cd:90:da:6d:bb:36:a8:ee:69:6e:3c:c8:1e:86:31:
0b:dd:d1:84:1e:21:00:48:15:75:92:a5:af:fd:8d:
2e:4e:02:1e:d7:e8:8e:78:9e:e8:62:14:58:be:14:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B3:3F:CA:4D:D8:5E:28:6D:74:FF:BB:70:94:BC:67:C6:60:08:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl
X509v3 Authority Key Identifier:
keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
sbgp-ipAddrBlock: critical
IPv4:
208.73.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:c4:7f:ef:c2:1b:ba:85:51:9a:f9:cc:31:29:45:f4:e8:72:
88:cb:6e:b5:60:26:ae:9a:ab:90:70:57:31:c3:c5:5f:6c:93:
72:53:6d:4d:79:3e:30:93:50:2c:13:c1:5e:85:9a:2a:3b:fb:
54:0b:50:c4:90:9a:b8:fe:9c:fc:6d:77:09:e3:0d:27:01:c2:
e3:80:f6:4a:ae:5a:41:56:a3:74:8a:81:0a:4e:2d:7e:52:5a:
fd:f5:63:a9:70:45:3f:8c:57:b6:59:7e:e8:ea:59:bd:82:bf:
a7:53:d3:b7:bc:96:e4:d1:49:dc:f2:8f:09:3e:8b:50:d3:2d:
71:45:c2:56:a1:68:d6:bc:b4:0f:06:9a:16:28:24:73:ea:31:
cc:49:de:44:aa:21:c9:13:20:c6:f5:ba:3e:3b:09:85:7e:d1:
39:8f:89:61:36:c9:23:8a:43:25:15:e0:18:9c:04:8d:d9:cc:
20:dd:87:52:c0:c5:bc:34:72:8d:ba:17:1c:ed:f4:4d:3b:a8:
d7:78:d0:90:00:d7:4f:37:f2:bd:bf:f9:2e:8e:5b:5b:fc:15:
24:0d:66:3c:f2:98:8a:38:2e:14:b7:28:5e:70:b3:fb:b4:31:
83:a5:21:1e:a4:44:0c:c4:6f:39:8a:3a:05:ef:5a:97:ae:fa:
a0:fa:44:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:10:07 2026 by rpki-client