
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ba3b872b-631a-3ccd-8170-246537a90304.roa
File: ba3b872b-631a-3ccd-8170-246537a90304.roa (raw, json)
Hash identifier: aAoc7DXV3DwP+Sjvmno1Ssdr8J1T65cEBSuBIuuSOyg=
Subject key identifier: 07:28:67:F9:D9:C0:B1:36:A9:02:DD:2A:11:BB:89:32:40:7E:CD:53
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584F3CE2AA82B8912CFF0C74C1C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ba3b872b-631a-3ccd-8170-246537a90304.roa
Signing time: Sun 20 Sep 2026 13:00:12 +0000
ROA not before: Sun 20 Sep 2026 13:00:12 +0000
ROA not after: Sat 19 Dec 2026 14:00:12 +0000
asID: 22516
IP address blocks: 192.171.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3c:e2:aa:82:b8:91:2c:ff:0c:74:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Sep 20 13:00:12 2026 GMT
Not After : Dec 19 14:00:12 2026 GMT
Subject: CN=aebdc9fd-ae91-495d-b963-1c32b1a3a3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:65:8e:8c:a3:65:cb:8e:89:0e:67:71:b9:1c:
75:ce:96:66:d2:b2:c6:71:27:d2:47:22:cc:8d:78:
67:92:5e:07:87:07:ab:da:ac:2b:f7:63:82:3c:2b:
5f:83:26:5a:49:41:43:57:3b:f8:d4:a8:e9:ad:f8:
12:4c:40:c9:44:5c:ea:01:49:75:0a:15:39:9f:45:
64:d9:1c:a2:59:9c:86:5b:1c:ad:e7:29:ea:41:30:
22:f9:7e:20:5e:0a:20:8b:33:46:e0:64:94:c2:65:
27:9e:d8:96:3a:7d:d5:d7:62:57:99:1e:47:a1:a5:
35:63:af:48:81:82:b2:f1:2c:8c:de:33:6b:97:df:
74:ba:b1:7e:41:6a:2e:e8:8f:e4:9c:79:bc:3c:70:
b1:78:74:a1:95:e5:28:01:68:9f:c7:b0:05:8c:97:
a6:46:64:94:f5:75:43:f1:dc:3b:17:a5:7a:83:37:
bd:09:38:b2:35:45:3c:83:ea:c5:25:e5:bd:d5:f1:
6d:97:69:b3:2f:f1:08:fd:e0:9f:0c:05:3e:1e:c6:
c7:5f:50:2e:0a:98:79:5f:12:61:d5:ab:08:04:fb:
62:64:38:11:e9:9c:b2:17:7a:37:27:2d:3a:7b:cf:
43:bc:14:26:96:69:2a:9d:3b:66:6f:ac:f5:67:7c:
ad:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:28:67:F9:D9:C0:B1:36:A9:02:DD:2A:11:BB:89:32:40:7E:CD:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ba3b872b-631a-3ccd-8170-246537a90304.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
192.171.82.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:6f:81:01:4d:2c:b7:dd:d9:32:fa:55:a7:c6:84:a8:bd:77:
b0:01:da:67:57:09:8b:62:ec:d7:3b:3d:a5:82:9a:bb:7b:57:
a1:7e:b8:3a:ed:65:f2:fb:5e:a5:56:f3:00:ac:18:a5:3f:30:
f5:76:cc:07:52:2c:5d:8d:34:dd:73:ad:be:5e:12:af:3e:4d:
97:ee:81:c8:d3:91:fa:48:7a:67:b3:0a:62:5b:c0:f4:7b:e7:
32:ba:ab:4e:bf:6c:9c:d7:6d:61:8d:dc:38:d8:5d:19:8d:14:
dd:fa:4f:06:bb:43:e5:bf:8d:61:9e:e1:40:67:df:26:ba:f6:
d4:7d:22:e1:e4:2b:a6:de:14:fd:80:a7:b2:dd:5d:43:a0:09:
75:31:6b:8e:5b:c7:6a:ca:f0:e8:83:4b:17:e3:92:16:91:bd:
66:b7:97:2a:cd:32:7a:5d:a6:91:2b:76:cf:65:4f:8f:bd:61:
f4:c1:f1:8c:e6:f2:f4:0e:40:4e:10:15:c3:43:a0:f5:5c:10:
d5:d4:6e:d8:4a:aa:5c:94:7d:2a:5a:83:15:4b:d4:0f:ae:cb:
5e:14:60:1e:4f:44:8e:e3:6b:79:39:eb:76:59:33:4a:e4:cf:
27:f0:ec:f4:dd:ea:82:0a:c8:48:90:1d:c6:a1:39:d8:b6:d8:
f5:87:78:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884qqCuJEs/wx0wcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
YWViZGM5ZmQtYWU5MS00OTVkLWI5NjMtMWMzMmIxYTNhM2ZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2WOjKNly46JDmdxuRx1zpZm0rLGcSfSRyLM
jXhnkl4Hhwer2qwr92OCPCtfgyZaSUFDVzv41KjprfgSTEDJRFzqAUl1ChU5n0Vk
2RyiWZyGWxyt5ynqQTAi+X4gXgogizNG4GSUwmUnntiWOn3V12JXmR5HoaU1Y69I
gYKy8SyM3jNrl990urF+QWou6I/knHm8PHCxeHShleUoAWifx7AFjJemRmSU9XVD
8dw7F6V6gze9CTiyNUU8g+rFJeW91fFtl2mzL/EI/eCfDAU+HsbHX1AuCph5XxJh
1asIBPtiZDgR6ZyyF3o3Jy06e89DvBQmlmkqnTtmb6z1Z3ytYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAcoZ/nZwLE2qQLdKhG7iTJAfs1TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYmEzYjg3MmItNjMxYS0z
Y2NkLTgxNzAtMjQ2NTM3YTkwMzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKtSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNvgQFNLLfd2TL6VafGhKi9d7AB2mdXCYti7Nc7PaWCmrt7V6F+uDrt
ZfL7XqVW8wCsGKU/MPV2zAdSLF2NNN1zrb5eEq8+TZfugcjTkfpIemezCmJbwPR7
5zK6q06/bJzXbWGN3DjYXRmNFN36Twa7Q+W/jWGe4UBn3ya69tR9IuHkK6beFP2A
p7LdXUOgCXUxa45bx2rK8OiDSxfjkhaRvWa3lyrNMnpdppErds9lT4+9YfTB8Yzm
8vQOQE4QFcNDoPVcENXUbthKqlyUfSpagxVL1A+uy14UYB5PRI7ja3k563ZZM0rk
zyfw7PTd6oIKyEiQHcahOdi22PWHeFY=
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:21:07 2026 by rpki-client