
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/94696d06-6af8-3706-98d9-82c6eab24315.roa
File: 94696d06-6af8-3706-98d9-82c6eab24315.roa (raw, json)
Hash identifier: vO1yBEzW6ZxfhBzgbcp/OUsoYLh2NsO83D1ENqd9ODE=
Subject key identifier: 6E:66:23:2A:ED:71:84:95:5E:82:C3:BC:64:B1:0A:71:B2:E4:33:B9
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584DBA3B09E0B76714C340D0AE80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/94696d06-6af8-3706-98d9-82c6eab24315.roa
Signing time: Tue 05 May 2026 01:00:23 +0000
ROA not before: Tue 05 May 2026 01:00:23 +0000
ROA not after: Mon 03 Aug 2026 01:00:23 +0000
asID: 7029
IP address blocks: 208.89.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ba:3b:09:e0:b7:67:14:c3:40:d0:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: May 5 01:00:23 2026 GMT
Not After : Aug 3 01:00:23 2026 GMT
Subject: CN=6a94608e-ee44-4763-925a-e7c364038c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:43:f5:44:eb:6a:ac:ea:08:fa:3b:97:f5:
8e:c4:00:ac:c5:c5:6a:0b:db:f2:f7:49:f2:d5:26:
42:96:a7:88:1c:b9:0e:07:ac:17:aa:81:f6:fa:c4:
1d:07:04:a9:71:f1:dd:c0:20:32:00:52:c0:da:c9:
c3:b6:13:2e:47:1a:f6:46:00:06:c8:4b:dd:a6:c3:
52:a9:91:ef:e4:13:3a:c6:48:41:d3:e5:bb:47:86:
3d:97:75:32:30:27:52:76:f3:20:9b:72:89:ab:6a:
84:bd:36:39:a9:55:e1:ef:9b:86:2e:62:b4:2b:2a:
c8:c6:c2:1c:42:37:26:22:bd:7b:1e:81:f3:ca:65:
be:8c:91:f4:ea:cd:34:94:4d:cc:dc:be:30:56:59:
d4:72:36:a6:f1:1d:28:9f:20:e0:45:4b:de:34:2e:
5d:49:85:eb:bc:e0:ed:11:af:cc:14:7c:70:2e:b0:
1f:0a:e7:c8:8e:9a:54:e6:f1:3b:6f:48:5b:cb:97:
14:52:4f:c5:2d:b7:da:7d:48:8b:eb:7d:31:67:ab:
2b:57:db:05:c3:23:80:db:c0:1d:5f:22:70:cf:04:
bd:24:c6:9a:1f:ae:b1:64:07:82:1c:cd:2f:28:18:
7c:c3:ca:96:8f:94:cb:ad:70:09:e8:95:de:3e:94:
12:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:66:23:2A:ED:71:84:95:5E:82:C3:BC:64:B1:0A:71:B2:E4:33:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/94696d06-6af8-3706-98d9-82c6eab24315.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
208.89.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:f6:a2:d2:dc:14:c2:08:67:29:83:dd:18:2e:f1:27:3d:c1:
e3:a8:50:1f:d8:b7:cd:7b:53:93:88:d6:36:20:28:76:d8:b8:
f4:ca:10:d7:1b:9a:9c:61:4e:b6:e2:d4:b6:c9:f5:17:a5:e5:
28:f7:01:51:90:74:c2:b7:c1:45:dc:18:90:03:a5:93:5f:58:
ea:a2:cb:a0:f4:50:5c:ff:27:dc:a5:d9:25:ac:8d:33:18:bd:
56:ff:fe:92:8e:24:0e:d7:07:f1:92:bf:5f:a7:24:76:cf:b3:
73:c4:cd:72:4b:22:06:1f:58:fe:93:6a:51:13:e3:03:04:88:
29:77:ce:ad:4f:2d:2d:0e:40:40:49:75:92:cc:c3:a8:e5:30:
53:22:f9:fb:68:68:86:8e:f2:75:8a:22:86:db:85:a1:3b:9f:
3a:4e:37:7c:70:79:0a:dc:49:91:1d:29:d3:63:9c:8a:df:69:
98:01:2d:98:ff:6f:92:85:17:b6:48:bf:d5:49:eb:09:95:95:
87:4b:47:5e:51:38:8c:ba:be:ad:a8:e8:09:37:0e:a1:69:f8:
84:29:3d:13:e9:f1:87:04:fe:70:cf:32:4d:f0:15:25:17:93:
1f:b4:e3:e0:6d:99:41:2b:36:13:b5:79:c6:8b:4d:39:67:39:
49:ff:b1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:33:19 2026 by rpki-client