
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02b4b5be-576c-320c-8c47-29c2b07fdd0f.roa
File: 02b4b5be-576c-320c-8c47-29c2b07fdd0f.roa (raw, json)
Hash identifier: iOzzBEWtQdfZdEML8MdJaO/Iz+jTsSGpMANkHfdWpos=
Subject key identifier: CC:90:7D:1A:DC:2F:E6:BF:52:81:C3:93:A1:90:DA:07:9A:4F:62:C3
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584D386A44A914B049A43837E980
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02b4b5be-576c-320c-8c47-29c2b07fdd0f.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 64267
IP address blocks: 168.91.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:44:a9:14:b0:49:a4:38:37:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=bfa2f8b9-d346-472d-8c10-139c37bbe0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:5c:cf:d9:de:df:31:34:b3:8b:4b:5a:34:
2f:72:fb:88:3d:b4:53:cc:a7:4b:a4:6c:ff:ed:58:
0b:ec:67:33:06:15:da:77:30:b8:c1:3b:73:33:df:
d8:30:bf:c6:bf:d0:9d:d5:e1:de:e9:ff:de:e4:42:
86:4c:85:2d:48:78:b8:98:31:09:6c:e8:02:3b:f3:
ee:29:c5:5e:f1:e0:9b:31:93:d2:1a:24:56:82:f6:
45:89:21:81:7d:dc:21:53:53:a7:a6:f6:d6:72:b9:
ca:dc:6a:ad:ec:e3:da:8a:74:0c:a6:74:f8:ca:cf:
02:f4:49:eb:84:fc:71:94:51:21:0c:b3:cb:2d:59:
5f:e6:76:cf:21:38:9e:2f:6d:b3:db:61:c1:78:dc:
3d:c7:1d:2a:b7:99:12:aa:23:fd:ca:df:c0:f1:b2:
22:9b:6e:13:2b:d3:90:e6:75:6b:56:63:e0:a2:12:
dc:51:b0:8e:0c:ab:fd:16:67:84:19:3b:43:4c:7c:
3e:57:60:db:a9:6b:7c:a2:39:e7:56:27:77:e2:31:
af:d9:cb:1d:5c:b3:77:61:49:ee:8f:19:86:2a:0a:
c9:62:53:98:dc:db:43:12:cd:bf:07:4e:2a:95:fd:
20:b0:de:e1:fa:c2:32:31:aa:99:63:c0:52:f2:ee:
ea:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:90:7D:1A:DC:2F:E6:BF:52:81:C3:93:A1:90:DA:07:9A:4F:62:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02b4b5be-576c-320c-8c47-29c2b07fdd0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
168.91.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:a6:11:59:0f:63:69:4d:5d:94:b3:03:ee:cb:9a:cb:9f:bd:
c6:4c:d7:87:21:c6:32:3b:38:1d:5b:11:67:93:9b:26:d2:52:
a9:9e:05:f3:cc:85:93:97:54:41:cd:38:fb:4a:d7:d7:03:f0:
af:55:16:02:2a:bb:c6:56:1a:f0:3c:0c:fd:1b:cf:c2:c4:9b:
f2:d2:87:11:15:83:ba:f9:b9:79:54:fc:14:8f:48:14:f6:d7:
e4:31:c9:60:ba:ca:72:ec:c2:70:36:9e:f7:0e:25:ef:fa:9c:
1e:6a:9a:d4:71:bc:4b:0e:cf:0f:5d:c0:27:03:46:3e:de:12:
9d:39:f3:d2:c8:24:57:2b:65:79:c0:69:0e:a3:8d:93:17:ad:
dc:1a:30:aa:9c:9f:31:6c:2d:c0:a9:5b:89:1d:0d:0b:d1:a7:
03:5b:3b:eb:80:51:6e:56:7a:83:86:13:f4:cf:87:7f:68:7c:
c9:ab:6c:c4:33:8f:b5:6e:25:48:97:0f:e8:2a:48:11:80:f1:
d0:ff:a6:45:52:c0:7d:36:fe:bd:f8:17:fd:9d:97:30:5b:be:
c5:c6:b2:db:52:b7:0a:8b:6e:01:d9:25:e9:a9:fa:26:c6:9f:
8f:e5:7e:57:c6:27:12:57:c4:f8:96:cc:69:75:8b:92:94:9b:
47:3f:ce:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:32:54 2026 by rpki-client