
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/40a03e32-5251-3da2-b2fa-a2e789263d7b.roa
File: 40a03e32-5251-3da2-b2fa-a2e789263d7b.roa (raw, json)
Hash identifier: 3gkkQS48hbgbTIF5WLAcioQUxVtIXBjURSUkBH+iPoA=
Subject key identifier: D7:65:D6:2A:E9:3C:CE:90:C0:3A:8A:84:EA:69:51:9F:6A:3C:F0:53
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584D2BDA1A954F476E401E21D900
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/40a03e32-5251-3da2-b2fa-a2e789263d7b.roa
Signing time: Sun 15 Mar 2026 01:00:32 +0000
ROA not before: Sun 15 Mar 2026 01:00:32 +0000
ROA not after: Sat 13 Jun 2026 01:00:32 +0000
asID: 64267
IP address blocks: 152.44.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2b:da:1a:95:4f:47:6e:40:1e:21:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Mar 15 01:00:32 2026 GMT
Not After : Jun 13 01:00:32 2026 GMT
Subject: CN=e8947b95-0287-4329-821a-9f28f20de4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:f3:b1:c7:8b:0e:1d:a8:f9:cb:8c:e1:93:
e2:33:a3:94:d0:70:b2:09:7f:ec:ce:35:6c:82:e3:
04:b7:9f:36:5c:44:7e:0b:50:74:8d:fc:92:f0:ac:
52:1c:10:b9:6e:ad:a6:67:a2:17:74:53:5a:dd:73:
ce:d0:9d:e0:d5:2a:7d:73:b2:62:bc:04:84:c1:dd:
99:b7:69:08:3e:c2:51:d7:46:27:8e:f0:a4:c3:17:
a8:b1:c4:bc:f3:64:28:96:2e:6a:7d:6d:e9:de:15:
ec:6a:6a:f0:83:ff:44:ca:35:47:8c:88:ea:c2:30:
e9:b2:43:7f:43:16:0a:98:2f:eb:15:0f:8a:ab:77:
6e:b3:31:c7:fe:37:5c:cd:d0:c1:7a:ea:c4:73:bd:
de:30:25:40:7d:21:a6:78:de:73:fd:fa:90:0a:5d:
9d:24:ce:74:4e:b7:83:cf:b4:a6:64:2f:44:e0:27:
82:ab:e6:72:61:17:3b:ff:87:f6:c3:d0:fa:e3:2e:
e7:50:68:01:cf:d3:f7:21:8b:53:f6:85:51:03:cd:
83:d4:ca:e0:a3:d9:2f:f5:c1:12:9e:b9:98:67:db:
cb:c4:33:7e:59:98:10:78:68:85:16:8f:47:1f:3b:
de:e0:32:1c:0c:0b:7e:54:3e:28:eb:64:07:e9:b9:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:65:D6:2A:E9:3C:CE:90:C0:3A:8A:84:EA:69:51:9F:6A:3C:F0:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/40a03e32-5251-3da2-b2fa-a2e789263d7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
152.44.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:0d:5e:5d:91:94:e0:71:e9:74:a1:43:dd:1e:60:32:0a:05:
11:14:12:74:cb:c9:5e:b2:ee:50:ec:3f:33:c9:8c:c2:78:ee:
3c:e5:50:23:29:48:b4:49:38:68:f1:2e:b8:d3:35:8f:15:0d:
9b:8d:2b:77:db:7f:49:a3:a6:9a:47:ce:21:00:b3:8f:af:5d:
46:41:47:11:e9:26:b1:1d:d4:d0:7a:bf:9c:8e:65:98:03:50:
ac:39:92:4d:cf:15:96:10:49:84:e8:ec:3e:26:ce:d0:16:92:
d6:10:f5:d7:18:18:99:ee:4a:26:8f:7a:82:34:c5:5a:7e:9e:
3d:d4:a1:55:97:d5:a3:68:88:37:66:3c:12:73:e7:31:21:85:
69:27:b3:14:20:28:aa:a2:cd:29:8b:a2:4b:cc:a0:9a:7a:01:
11:a5:e3:20:fe:08:a3:24:57:1e:b4:14:9c:56:b1:94:ae:e0:
bd:ed:82:e6:f4:7a:20:a9:3e:e9:db:b6:95:17:91:d0:b4:d6:
31:ad:04:b2:5f:b1:71:0f:4a:ed:83:33:5b:62:8d:ab:d3:8f:
17:30:d1:b3:68:b0:82:d3:cf:a2:1b:d9:0e:a2:32:2e:77:de:
b1:c8:2c:25:5c:71:e1:12:d0:1a:a3:7b:9e:b4:17:48:91:f3:
a5:e1:74:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:57:33 2026 by rpki-client