
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/70eb5e9f-12ce-32ec-a793-f001a2116bb6.roa
File: 70eb5e9f-12ce-32ec-a793-f001a2116bb6.roa (raw, json)
Hash identifier: uUQTNquQEFiOhPkofgbap71JlE9HckCfa7YmE3GG4Do=
Subject key identifier: C7:1F:5F:04:4B:68:0D:C8:DC:FC:2A:7D:12:D1:C8:C1:BE:47:BA:86
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584DCAFB181B61CA19F2AD663CE0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/70eb5e9f-12ce-32ec-a793-f001a2116bb6.roa
Signing time: Mon 11 May 2026 01:00:24 +0000
ROA not before: Mon 11 May 2026 01:00:24 +0000
ROA not after: Sun 09 Aug 2026 01:00:24 +0000
asID: 20001
IP address blocks: 199.250.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ca:fb:18:1b:61:ca:19:f2:ad:66:3c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: May 11 01:00:24 2026 GMT
Not After : Aug 9 01:00:24 2026 GMT
Subject: CN=dd07b6f4-59ed-4752-8c83-5b52f8169539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:76:19:af:d5:a6:6b:53:8c:79:9f:64:5b:92:
3e:63:4b:84:ca:f9:ae:a9:17:60:62:79:ec:18:bd:
40:0d:22:16:c8:d5:0e:90:4e:2f:79:6b:b7:f7:6f:
4e:b5:5f:ca:ef:64:28:07:e7:35:e9:e1:86:41:0a:
3d:1c:50:ca:df:5d:14:cc:80:49:35:d4:c9:76:db:
8a:4d:dc:75:3e:7a:87:ae:ec:08:44:e0:0a:69:bf:
36:bc:43:05:d1:f2:2d:f4:f9:18:be:e7:6e:db:fe:
b7:d9:d2:52:ae:2f:b6:c5:ae:6b:82:e5:e6:82:0f:
45:40:ba:f9:f6:33:f4:95:5c:16:36:a2:3a:02:f4:
1b:34:42:09:ac:af:f2:66:23:a5:a4:8b:9e:8f:a2:
60:37:d1:18:19:de:b5:2b:15:72:b9:be:00:ea:5f:
61:8d:5f:96:1c:8e:7d:4b:c0:2b:f0:4c:47:a6:bd:
91:47:80:87:db:1e:4c:d0:70:ad:99:e9:5f:ac:e0:
bd:d7:f0:2e:ea:80:96:b3:10:56:d5:e7:91:c8:3a:
24:6e:62:5e:90:ff:a9:06:2f:3c:1b:a9:3e:74:1e:
f0:4c:3d:e1:b3:bf:51:75:13:43:bc:e0:47:40:77:
95:51:27:b0:97:d4:2a:01:36:6d:d6:f8:6d:2a:2b:
a2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1F:5F:04:4B:68:0D:C8:DC:FC:2A:7D:12:D1:C8:C1:BE:47:BA:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/70eb5e9f-12ce-32ec-a793-f001a2116bb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
199.250.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:63:fd:f8:93:42:3a:10:c2:ae:49:20:56:8e:05:87:f4:6f:
7a:db:5b:d9:9d:53:fb:34:4e:4d:85:29:2f:eb:ad:b7:8c:8d:
6b:df:61:29:3d:72:45:d0:b1:45:26:cf:94:7a:e5:92:45:42:
ef:41:52:84:95:05:50:9a:eb:2e:79:cd:2b:a5:aa:70:de:09:
96:98:cd:b5:64:b3:f2:12:b3:34:5f:25:63:ff:49:79:91:84:
b3:30:3c:f8:5b:c7:da:e6:d8:94:f7:53:07:cd:db:eb:55:e0:
eb:a8:82:40:0e:d4:37:9b:0d:00:0f:91:61:0c:b1:e0:d3:3b:
e2:2f:8d:17:c7:f6:a5:34:ef:e0:80:10:d0:7b:e1:0b:5d:0e:
3c:c1:e5:bf:77:ee:d1:6d:71:35:b0:7e:d4:08:57:64:d3:8c:
b1:c1:94:97:b9:f0:38:d8:b9:c7:ff:6a:f8:95:4a:5f:24:32:
82:d9:5d:97:86:7a:58:da:e1:26:81:8c:c7:c0:a7:61:66:4f:
cf:e7:8c:6a:79:b3:1a:88:72:8f:8e:2e:0d:bf:19:b7:63:f2:
1d:cc:15:39:53:53:89:fc:fd:7a:07:39:dc:cc:55:e2:f5:b2:
47:e3:43:9d:cb:c1:df:4f:7c:f2:67:04:17:c1:63:89:2e:4b:
d2:1f:ec:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:17:47 2026 by rpki-client