
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b08b44ce-5f21-336a-ac00-0a3f47805892.roa
File: b08b44ce-5f21-336a-ac00-0a3f47805892.roa (raw, json)
Hash identifier: oweiR8dj0npdDz9tcRd9j9uljbJTAyr2L7xah3IrhLI=
Subject key identifier: E3:62:F2:44:90:69:BB:C1:37:A4:EF:F8:1B:24:E2:45:54:C4:07:EB
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584DBA3AE2D3D2285482BAD5A4C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b08b44ce-5f21-336a-ac00-0a3f47805892.roa
Signing time: Tue 05 May 2026 01:00:23 +0000
ROA not before: Tue 05 May 2026 01:00:23 +0000
ROA not after: Mon 03 Aug 2026 01:00:23 +0000
asID: 22516
IP address blocks: 172.96.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ba:3a:e2:d3:d2:28:54:82:ba:d5:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: May 5 01:00:23 2026 GMT
Not After : Aug 3 01:00:23 2026 GMT
Subject: CN=d6045044-b7c1-4d65-85e7-b5f46f1479b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:f9:99:d8:18:39:79:41:fc:7c:49:c7:7a:
ad:33:5f:e4:4e:ab:4d:e4:73:bf:d2:1f:ee:93:a7:
64:48:62:c5:a1:a8:6e:d2:03:6d:2e:d9:48:5e:95:
9d:22:12:f8:5b:ef:2b:4e:65:5c:9b:c8:a7:59:8c:
49:a7:8c:e0:98:af:9c:a2:46:15:c7:5e:1d:ed:c9:
34:d2:94:73:a1:ea:07:e7:c8:6e:9e:b4:76:e0:70:
91:f9:7c:d3:18:8b:a1:27:00:ac:0a:61:4f:67:f3:
37:83:1b:1a:34:b1:75:fc:3d:4f:cc:e7:9d:3d:d7:
07:c3:36:30:22:54:63:da:dc:0e:e9:8b:53:41:86:
fb:75:70:69:64:ce:6c:c3:0d:e3:b1:66:c1:33:ce:
46:71:d2:cd:54:56:05:68:34:24:20:bc:8a:b6:6e:
83:b2:1b:8b:a1:3d:6a:6b:9d:19:33:de:4b:f5:c8:
15:2e:6c:bd:ba:27:3b:5b:cd:0f:8c:bd:51:02:1c:
3b:d7:d8:02:40:b2:04:c1:02:55:00:6e:53:93:ec:
73:5c:cb:88:c0:91:97:a0:82:8a:ae:1f:64:9d:36:
75:bc:00:75:78:a1:37:0d:ae:bd:2e:6a:65:2f:43:
b9:3b:ba:9c:10:a4:65:81:ec:47:3b:f5:54:3b:37:
fd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:62:F2:44:90:69:BB:C1:37:A4:EF:F8:1B:24:E2:45:54:C4:07:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b08b44ce-5f21-336a-ac00-0a3f47805892.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:2c:5f:3c:9d:c7:fa:51:76:03:4b:fc:05:50:a5:5d:a5:22:
66:bb:c8:a8:bb:32:25:35:3d:1f:06:65:a8:26:03:22:19:e2:
1b:0e:4e:45:76:16:99:4a:23:e5:c4:6c:77:74:42:7f:9d:df:
47:68:70:d7:05:9f:1d:8b:d8:25:d6:2f:50:52:0d:23:9b:ff:
50:99:1f:db:b1:42:95:2d:8f:77:3d:f6:66:dd:41:b1:4a:06:
f6:59:f4:62:bc:9d:13:8c:79:26:7b:79:f0:6a:9d:b8:31:39:
7b:75:1e:76:e8:74:da:67:a6:7f:cd:b5:1d:62:62:1e:f5:ed:
d9:86:f6:10:94:d4:5e:7b:f3:50:3e:97:cd:4d:0d:75:82:2b:
17:c3:c5:ab:f4:99:ae:a5:44:76:54:81:8b:e0:13:33:bf:a3:
8b:48:c9:41:44:d4:c8:b8:d2:bd:84:bf:0f:8a:ab:9e:3c:00:
58:db:68:55:25:c4:3c:85:40:1a:ec:10:ed:a4:da:0c:1c:e8:
05:25:c3:e7:2a:e6:8a:e3:83:40:44:49:db:86:99:7d:59:14:
5e:ac:9a:2a:e8:23:fa:7b:9f:2e:09:2c:18:6c:0d:a1:67:4f:
59:b4:3e:5b:71:e3:cd:5d:89:47:8a:91:49:f3:7c:26:11:01:
5b:90:8d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:49:26 2026 by rpki-client