
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aad996ae-f5a1-3f15-86e0-00a6135d1c79.roa
File: aad996ae-f5a1-3f15-86e0-00a6135d1c79.roa (raw, json)
Hash identifier: mIj6bVIDrOdnAqRxkRZqRr4bF9dcJIGBxzcE8UZELwI=
Subject key identifier: 41:48:A3:6D:D9:6D:BC:2D:11:0A:50:CF:B0:61:6A:21:1D:9C:F8:36
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584D2644C5915F586B3617149F80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aad996ae-f5a1-3f15-86e0-00a6135d1c79.roa
Signing time: Fri 13 Mar 2026 01:00:31 +0000
ROA not before: Fri 13 Mar 2026 01:00:31 +0000
ROA not after: Thu 11 Jun 2026 01:00:31 +0000
asID: 64267
IP address blocks: 68.234.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:26:44:c5:91:5f:58:6b:36:17:14:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Mar 13 01:00:31 2026 GMT
Not After : Jun 11 01:00:31 2026 GMT
Subject: CN=353e108a-2e04-4dc3-92ac-4d6ea7fec32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:4b:a3:88:91:54:d6:10:2c:98:02:12:dd:
ec:54:28:a5:9c:ce:2e:78:c5:ea:47:09:93:14:2e:
25:98:69:d7:33:62:b9:7f:a7:31:2a:f2:4e:7e:24:
60:01:9b:83:f3:78:c0:bc:16:3c:20:02:a7:15:95:
a3:17:cd:08:6a:44:60:23:ca:6c:0b:aa:01:98:b6:
d1:9d:72:69:87:22:5a:7a:84:b8:49:af:52:01:71:
79:da:e3:45:aa:0a:45:4f:8c:3a:45:5a:3e:1f:89:
d2:53:cd:bd:e2:47:dd:2c:ae:14:1c:60:53:31:89:
cf:60:b0:14:c2:58:21:24:25:12:4a:0e:a8:6d:5f:
fa:71:44:47:3f:1c:f1:1d:98:1d:5e:f4:cf:cc:7d:
ad:b7:b6:c9:bc:bb:8a:64:7b:4d:53:ce:3b:79:73:
00:f3:48:54:0f:61:fb:4c:61:4c:7f:e0:99:a3:cd:
d7:51:34:2d:25:60:0a:25:7a:6d:6e:35:2d:28:a9:
52:ed:e2:1a:84:1f:1c:1c:f2:0c:ec:66:11:5e:9e:
2d:dd:e7:8b:39:86:6b:5e:47:d9:85:eb:1a:fd:66:
ba:fe:d5:bf:80:8b:f5:12:6e:aa:f3:a3:73:ca:04:
09:d6:2f:ad:ec:25:fa:ea:b0:b8:4b:98:a0:00:69:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:48:A3:6D:D9:6D:BC:2D:11:0A:50:CF:B0:61:6A:21:1D:9C:F8:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aad996ae-f5a1-3f15-86e0-00a6135d1c79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
68.234.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:de:ab:bc:97:7b:3e:cb:b4:b4:d4:d2:d3:5c:c9:85:c2:81:
08:dc:53:f5:c4:d6:63:c4:6d:b7:e5:ff:5c:73:a0:2c:1f:0f:
83:51:8e:eb:ab:f5:2f:7b:e2:71:47:63:64:cf:46:ea:6f:6e:
5a:69:5f:4a:d6:b7:e3:d7:a5:76:7a:7a:91:0e:94:8e:a0:63:
4c:f7:38:85:58:ae:1a:0c:2f:41:35:f8:b1:3f:eb:70:55:54:
53:33:32:2b:63:61:2d:0a:3c:a8:20:44:0f:78:10:c2:3a:fc:
13:59:37:87:2a:6d:01:a6:5f:34:8a:d8:7f:5d:72:b2:a0:53:
3c:6c:d6:5c:0f:72:1e:fc:bb:35:f1:d6:21:8c:fa:c0:e5:c4:
42:7d:46:1d:e2:eb:c6:c5:fb:eb:83:20:10:48:e3:eb:34:9b:
c0:6d:47:23:d5:82:8c:95:70:b7:2d:5d:46:e8:0d:92:9d:63:
25:e4:f8:e3:9a:c0:6f:46:76:bb:c2:c1:f7:06:8d:4a:62:a9:
27:be:ab:72:80:97:66:c9:d6:d4:5b:a0:61:5b:9e:2f:aa:79:
39:aa:ef:96:14:9a:5e:09:96:a2:50:5d:36:e5:db:3b:76:9b:
9b:c6:7c:a0:84:aa:67:f1:33:b0:c6:4d:b5:a1:60:fe:ad:96:
03:8d:23:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:06:57 2026 by rpki-client