
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ba601bf4-733a-32c6-8978-4561e48688a5.roa
File: ba601bf4-733a-32c6-8978-4561e48688a5.roa (raw, json)
Hash identifier: vO08wWMRS8OMrT/wN2ZUhVddsLNzKokEicoPJ3zrqCw=
Subject key identifier: A6:0C:C6:FF:69:40:1E:D1:54:0B:09:4D:2F:64:28:C9:8E:63:AF:85
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584DBA3AF7853DA3462DE95668C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ba601bf4-733a-32c6-8978-4561e48688a5.roa
Signing time: Tue 05 May 2026 01:00:23 +0000
ROA not before: Tue 05 May 2026 01:00:23 +0000
ROA not after: Mon 03 Aug 2026 01:00:23 +0000
asID: 22516
IP address blocks: 208.89.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ba:3a:f7:85:3d:a3:46:2d:e9:56:68:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: May 5 01:00:23 2026 GMT
Not After : Aug 3 01:00:23 2026 GMT
Subject: CN=be5dca64-9f1d-444c-9294-79b612aeddef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:50:22:d6:3c:41:26:a4:06:08:41:b5:01:77:
a9:b1:33:9a:0a:ed:80:cb:e7:d4:71:3a:96:ac:20:
fd:e3:61:6b:b2:72:db:0e:52:51:ab:25:d1:0d:5c:
3b:55:9b:1b:be:1c:d0:b2:59:c4:f9:d8:96:67:9e:
80:ec:b4:0a:b9:70:19:f4:1d:0a:0b:60:71:4f:04:
9c:d4:8c:4c:f8:d1:e2:ca:2c:6b:88:ed:15:2e:11:
81:9f:3e:c7:45:38:63:eb:5b:6d:95:55:31:85:b3:
58:fe:53:93:76:09:72:27:f2:3a:5d:cd:81:84:11:
c3:2f:3c:b6:97:15:f8:76:a6:9e:a2:3a:70:17:a6:
0e:08:68:7c:21:1e:0f:55:61:c6:23:b7:0c:74:f1:
2a:a9:72:bf:d1:f7:d2:23:fa:52:f2:e5:89:59:db:
51:a3:84:0e:73:e1:2f:83:f7:18:9c:66:65:fd:7f:
e3:3e:94:1b:28:13:95:f0:46:7b:33:d2:39:fb:8c:
cf:7a:61:c3:05:93:f6:1b:c0:fd:ac:85:a4:da:9d:
76:e5:18:ab:1e:6f:69:e9:7f:07:47:1b:15:f2:1b:
ef:66:c3:88:c7:cd:ce:4f:e5:76:20:95:50:2e:bc:
79:21:ec:7d:2d:b1:10:2e:4e:48:be:6f:75:30:f8:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0C:C6:FF:69:40:1E:D1:54:0B:09:4D:2F:64:28:C9:8E:63:AF:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ba601bf4-733a-32c6-8978-4561e48688a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
208.89.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:aa:7f:c9:0f:51:8d:c2:c3:af:0c:3c:87:d9:60:c7:bc:ba:
8a:dd:57:09:d9:39:dc:d4:ed:a3:a3:34:ae:4d:d1:70:78:4f:
7e:21:17:63:f0:f7:37:ab:6c:ae:cb:14:a4:73:5f:59:35:02:
85:2d:96:a4:c6:fc:20:3c:e3:9c:fb:6c:01:5d:f4:36:31:3a:
d5:f5:59:f9:ef:8d:79:62:e9:1f:e7:42:05:9a:c5:28:61:10:
cf:19:31:c3:e2:52:d7:78:c6:a1:0d:96:99:f4:a0:aa:28:31:
ea:a7:33:01:d9:56:4c:f1:69:4a:f9:2f:f5:e9:26:da:56:58:
0e:53:76:32:8a:74:f7:53:5d:03:49:16:2e:c8:9b:11:a6:22:
91:30:2b:97:c4:5f:f0:3d:e5:b7:cf:57:c5:d9:1b:43:ae:79:
14:c0:b8:78:cb:f6:d6:9e:8d:43:a5:08:1a:61:0b:fe:1b:ef:
38:b7:51:df:ac:72:b0:b5:1a:8f:29:52:46:49:bc:6c:b4:82:
5c:c4:01:c9:7f:5e:8d:2b:7e:6d:18:08:d1:79:e1:47:78:02:
5f:e7:f8:cd:a8:d8:ce:26:aa:42:89:ab:ac:5c:87:8c:91:e3:
1c:47:d6:59:1d:5c:1a:7f:25:47:01:2a:76:e3:35:41:f0:6c:
ab:7c:8a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:26:30 2026 by rpki-client