
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1db69722-a6c0-373b-b0be-92aa14b7cd16.roa
File: 1db69722-a6c0-373b-b0be-92aa14b7cd16.roa (raw, json)
Hash identifier: XpRTzaClo0SEuBI/2qCtQuHzcoiZlGAN5Kgy/0spF7s=
Subject key identifier: CE:48:96:89:48:8B:77:CC:63:0F:42:95:9B:6B:E0:C0:66:15:67:48
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584DCAFB023696DC109255F7B220
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1db69722-a6c0-373b-b0be-92aa14b7cd16.roa
Signing time: Mon 11 May 2026 01:00:24 +0000
ROA not before: Mon 11 May 2026 01:00:24 +0000
ROA not after: Sun 09 Aug 2026 01:00:24 +0000
asID: 20001
IP address blocks: 216.213.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ca:fb:02:36:96:dc:10:92:55:f7:b2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: May 11 01:00:24 2026 GMT
Not After : Aug 9 01:00:24 2026 GMT
Subject: CN=1dd458ef-548e-4586-a9ae-c4bc597c4da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:e8:3a:9a:fd:8c:b6:4a:74:a6:83:f3:2b:
e7:88:be:33:71:57:1e:76:51:b2:de:ca:90:1e:49:
ac:a6:c6:76:d1:1e:dc:73:84:3c:0f:00:01:ac:0c:
67:4d:98:c0:7a:b2:38:8a:e3:a0:53:22:40:ea:45:
bb:7d:d4:54:8b:03:aa:dd:d3:fb:89:40:9e:38:cd:
2e:70:df:18:c7:3e:13:b4:3c:9f:97:ab:85:96:cc:
bf:ca:44:06:b2:4c:da:2b:65:a6:90:b4:18:eb:e1:
8c:80:5a:11:a1:88:e0:22:86:da:86:f1:07:17:d5:
d5:00:63:08:b1:60:e6:1d:10:d8:b2:35:27:ba:2b:
04:cf:98:18:71:7a:eb:81:76:83:5f:1b:d8:db:1e:
c7:96:db:ce:52:63:a5:f0:cc:88:0b:dd:68:76:2c:
4d:4d:ba:7e:7c:27:a1:40:b7:12:02:ef:b1:6f:35:
1b:e2:fb:c1:47:39:f5:bf:e9:a6:22:35:68:e0:9e:
1b:ec:e9:8c:94:52:55:16:83:cc:23:53:ee:f4:c1:
10:6a:1c:29:8c:0d:61:67:5b:bd:5d:13:7e:5e:34:
33:0e:76:81:74:40:35:32:e5:7c:5d:dc:57:36:1b:
35:1e:f8:a5:fa:91:45:65:4b:6f:bc:71:68:e6:00:
ab:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:48:96:89:48:8B:77:CC:63:0F:42:95:9B:6B:E0:C0:66:15:67:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1db69722-a6c0-373b-b0be-92aa14b7cd16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
216.213.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e3:50:1f:1e:78:9f:a5:4e:c2:07:c9:73:80:53:39:27:19:d2:
71:de:3f:ed:a5:36:57:cf:e3:da:a9:a5:67:13:5a:61:78:fc:
4f:ec:bf:89:c4:08:82:60:6c:8c:21:33:e1:65:19:73:3d:95:
54:ed:a7:1b:02:ec:18:53:a9:de:7e:e9:c2:0f:84:13:c2:36:
fc:8c:d5:63:34:68:cc:73:b3:0f:d9:5b:25:46:ab:05:14:43:
04:8b:46:9e:71:88:2e:d8:40:ee:dd:b2:e6:6c:16:84:85:ff:
1d:98:6c:64:47:89:5f:c3:6a:ea:f4:ed:43:22:bf:bc:2c:45:
ac:af:58:25:d2:0b:7e:a2:b5:7b:59:00:a6:67:4b:96:1c:e8:
e6:08:45:10:1e:41:e0:42:82:a6:19:a5:d0:59:6c:94:ff:67:
e1:8f:bb:4a:e5:b8:2d:51:8d:be:b0:1d:33:51:c3:a5:5e:d9:
2e:58:d8:f4:e4:8e:69:b4:25:71:0f:9d:5c:9b:a5:c8:72:ce:
d8:12:bf:19:7e:01:df:e1:d2:c6:cf:42:d6:ef:25:7f:48:77:
99:c6:e3:e1:bd:84:9c:d9:54:1e:86:8d:c0:48:f3:de:18:ad:
67:8e:17:10:c7:36:28:77:d5:27:e8:f9:b1:b9:4a:a7:35:cb:
5d:72:39:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:24:10 2026 by rpki-client