
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7bdac249-8997-3979-82ce-44551943a4ea.roa
File: 7bdac249-8997-3979-82ce-44551943a4ea.roa (raw, json)
Hash identifier: ewR/+YLVsjGt3Ne4DJGATFeZmsA9kfoz2U4GDkJovs4=
Subject key identifier: 0D:E8:67:75:FE:C7:09:9D:23:A1:71:D0:38:20:7A:BD:98:2A:DE:54
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584D359FDA6742288BBE8CA98340
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7bdac249-8997-3979-82ce-44551943a4ea.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 64267
IP address blocks: 168.91.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:9f:da:67:42:28:8b:be:8c:a9:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=32f5da54-1332-4a94-aa2f-f473e73152c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d4:41:c4:74:85:63:25:96:c1:fc:40:e0:f2:
ed:51:5d:9d:65:98:c6:15:8e:4f:16:a8:ff:18:ba:
45:e7:22:80:bc:51:36:ce:37:9a:b4:e4:ed:53:5f:
65:3d:eb:58:3d:70:53:46:09:3a:2c:bd:de:47:48:
fd:70:c2:7f:f7:f4:e9:c9:2d:47:0e:ef:4f:00:88:
d8:0f:0f:b6:f9:e0:28:4a:83:f7:58:67:db:87:a2:
a8:a0:97:58:87:09:b6:e1:86:27:1e:20:29:9f:51:
6e:1c:c4:43:09:ea:cf:2f:d6:ff:20:75:dd:ee:40:
b7:68:2a:ba:27:e5:65:fb:af:e9:2f:3a:a2:49:63:
b9:ad:63:f4:01:bd:d2:37:1f:bb:8b:7e:a9:e9:49:
f8:a4:3e:55:59:4e:89:b5:42:1a:c6:91:d2:7d:1e:
f4:1b:73:e1:77:4e:7c:66:a7:6b:a0:bd:90:30:cb:
78:0f:51:00:7d:1a:e9:7c:e4:c3:21:c7:2c:4e:8d:
cb:58:3b:8b:8e:05:27:a4:31:5e:07:7d:bb:44:1b:
f2:b6:55:e3:b9:3c:e2:77:df:bf:fc:e5:ed:3e:8b:
ad:97:3a:a8:d5:cb:f0:8f:e3:c3:a8:ef:69:4b:85:
1e:45:66:44:79:a1:32:e1:2b:67:e4:20:ce:b6:97:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E8:67:75:FE:C7:09:9D:23:A1:71:D0:38:20:7A:BD:98:2A:DE:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7bdac249-8997-3979-82ce-44551943a4ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
168.91.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:d0:32:1b:24:0d:c4:89:51:48:01:ba:ba:74:ff:0c:ba:7b:
a4:50:7e:d1:3a:c0:fb:c1:d8:70:fc:4f:49:79:51:76:96:d1:
cb:d6:84:bc:c0:2b:06:4e:b9:41:34:87:ce:ef:86:d6:fb:09:
0d:a6:a7:71:05:fa:0f:dc:fb:24:c0:87:48:3e:81:8a:e8:35:
f3:29:bd:b3:4a:d9:6e:81:fd:38:87:75:8a:14:32:e8:d3:a5:
85:8e:86:ff:3e:b6:5e:09:d8:22:c3:20:0e:6a:8d:64:73:bc:
02:60:fd:23:8d:e0:6b:e3:05:e2:b8:ae:3a:f8:03:8a:33:e2:
e6:2e:f3:03:a4:15:32:15:af:8e:4f:8c:d4:f1:0b:9d:c6:d3:
3c:2e:b1:e4:9e:e4:25:f1:cd:b0:d1:bd:67:26:21:23:03:6e:
e8:39:45:43:d0:7f:61:34:af:a4:08:8a:86:c8:da:f0:69:20:
e8:48:c7:9f:54:d7:a2:71:e6:cb:f6:62:f9:ed:3a:d4:b4:d9:
7d:87:cc:21:62:90:46:82:e5:a3:81:ca:a2:5e:f0:56:af:4e:
62:9b:b1:2e:30:f8:b3:be:25:48:e7:3e:4b:57:21:26:21:a8:
10:91:ec:10:ab:e0:50:9c:71:d4:96:e7:92:35:db:04:49:e9:
73:44:b5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:01:22 2026 by rpki-client