
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/399a8b3d-ac26-3e60-90e4-0572fd3229ab.roa
File: 399a8b3d-ac26-3e60-90e4-0572fd3229ab.roa (raw, json)
Hash identifier: uDbDDlZQyDrpEjLAFomMMmRQJUp0P1z2mWgTzwWYhto=
Subject key identifier: 10:86:54:3C:3C:E8:6F:06:B1:8C:CA:50:30:7C:2C:66:A2:E7:A6:A1
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584F2957C49198868F3AB6DA5A80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/399a8b3d-ac26-3e60-90e4-0572fd3229ab.roa
Signing time: Sun 13 Sep 2026 13:00:11 +0000
ROA not before: Sun 13 Sep 2026 13:00:11 +0000
ROA not after: Sat 12 Dec 2026 14:00:11 +0000
asID: 64267
IP address blocks: 208.89.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:29:57:c4:91:98:86:8f:3a:b6:da:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Sep 13 13:00:11 2026 GMT
Not After : Dec 12 14:00:11 2026 GMT
Subject: CN=70b3af4b-7bfc-4fee-828f-2a50a18f8e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:65:84:09:3a:19:5b:1e:c5:a1:1e:56:3f:
38:13:b4:9f:76:39:7b:ca:46:41:10:f4:60:b8:6e:
98:93:71:0e:3d:41:6d:3d:b6:55:28:f5:2d:5d:53:
2b:18:ab:6f:8a:a2:71:dc:70:9d:b1:40:b8:b2:d6:
e9:4b:3d:f2:b9:43:61:ec:d0:dd:01:9d:b4:7c:0f:
6b:fa:a6:ee:3d:24:03:e5:02:e5:64:e6:64:4f:56:
06:ce:84:c1:69:00:df:02:db:81:af:4c:50:2d:ac:
39:d6:c1:14:33:41:41:5a:c2:f2:1d:0c:2d:1d:8a:
75:f7:3e:ac:0e:b2:f0:7c:cd:8b:76:ef:5f:46:96:
76:45:3e:0f:b4:39:d1:49:a4:6a:f8:60:af:0f:ce:
f0:8d:c6:d0:c7:58:68:be:be:56:79:18:fb:eb:18:
61:60:8c:ca:12:ee:15:ea:b5:41:5b:81:53:90:06:
6f:4f:4f:31:60:20:12:c4:4f:a8:50:ca:00:8f:83:
58:7e:b7:ad:1c:1e:34:d7:19:9d:25:fe:b7:7d:d0:
af:36:ac:73:c1:64:ca:f2:99:39:1a:3b:1a:bb:0a:
a4:67:2e:c3:9c:9f:67:80:e8:65:c7:cf:8c:a6:6f:
6d:62:27:58:38:d2:55:84:a2:c2:14:89:78:77:04:
da:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:86:54:3C:3C:E8:6F:06:B1:8C:CA:50:30:7C:2C:66:A2:E7:A6:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/399a8b3d-ac26-3e60-90e4-0572fd3229ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
208.89.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:5e:0d:52:81:cd:a2:5b:92:9d:40:72:5a:3b:c8:9b:12:e4:
e5:df:92:26:f8:bf:5b:36:3f:5f:1b:51:9d:fd:74:e8:75:a8:
c0:8d:07:90:76:96:74:64:53:de:34:4f:18:31:dc:43:01:52:
37:d8:bd:75:1c:f8:9c:73:99:a9:d6:e4:79:70:88:fa:5a:c7:
fc:72:ca:03:ba:d7:fd:49:c3:83:77:7f:82:c7:f9:34:a1:f1:
05:8a:96:7b:9f:e9:3f:8d:83:c4:26:b5:d3:71:28:a0:b5:bf:
b1:e7:33:ca:62:b6:dd:ec:e5:1a:dc:f4:92:d0:39:32:3d:8e:
d5:ad:0a:13:df:9d:68:31:00:4b:8e:a6:3c:f5:79:19:50:42:
f1:a1:0d:9c:79:bc:d6:f9:9e:4a:c6:6e:be:fd:6a:53:b3:45:
d7:56:0b:4c:67:44:be:1e:12:32:64:06:2c:5f:0b:4d:a8:bf:
69:01:d6:4b:10:55:57:4c:3a:2e:9f:72:ef:20:5d:9c:3b:ab:
62:06:79:e8:0a:21:07:7e:a8:70:82:62:fd:a6:4c:81:6a:71:
f0:a6:b3:11:c7:a7:b8:48:d4:b2:d1:75:8c:9e:5a:c9:cd:ac:
5e:a4:5f:5d:e0:1d:e2:56:4b:a8:80:dc:b5:0f:43:f4:ad:e6:
c5:19:fb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:46:08 2026 by rpki-client