
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca7a5b88-c898-3224-b1d9-5657ce79e1eb.roa
File: ca7a5b88-c898-3224-b1d9-5657ce79e1eb.roa (raw, json)
Hash identifier: mU4gY8Tt8Ru9mqhw3D17EwiEojFnleRhrbNMJzig/+Q=
Subject key identifier: ED:B5:CD:18:CF:A5:0A:C1:37:8B:EF:EE:95:81:4C:9C:62:2A:34:B1
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584F49871FF8F41AB2507654AF80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca7a5b88-c898-3224-b1d9-5657ce79e1eb.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 20001
IP address blocks: 158.62.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:87:1f:f8:f4:1a:b2:50:76:54:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=fa4b26ae-f19a-4fe6-82dd-8c5d1cc8a7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:04:e5:a9:23:16:92:f7:95:ca:ca:70:30:1e:
e3:dc:80:15:97:bc:69:b3:aa:4b:96:5b:ad:a4:8a:
b8:6e:d8:b3:b4:82:51:9b:db:61:9d:8b:53:be:bc:
b7:f3:88:0d:bd:6a:ca:2e:e8:d3:7b:34:b5:47:02:
fd:2a:0e:7e:27:71:27:63:3b:84:ca:f4:d0:a4:81:
cd:09:b5:53:25:6e:f6:c4:2b:d0:13:89:81:61:c0:
f0:61:e6:5d:e7:73:e6:cb:e5:0c:a3:56:5f:06:a2:
3f:36:d4:da:c5:f0:62:d4:88:02:d8:96:f5:a0:b1:
a5:a7:36:50:05:36:82:a2:fd:5b:9c:76:75:7f:ce:
14:3a:24:a8:74:5c:cb:b9:f7:93:f2:ac:d2:77:9c:
c6:d8:63:1f:5f:bf:13:a3:ce:d4:47:9b:6f:63:5b:
84:ca:0e:b8:f6:a6:23:3d:6d:38:95:85:94:3e:44:
a1:52:a8:3f:ea:3e:72:04:6a:d3:df:34:b9:09:7d:
33:87:04:18:22:2e:1f:98:72:ce:12:68:59:6c:2c:
2f:12:47:c7:dd:ba:0f:1f:2f:86:4f:02:09:59:8c:
e2:ce:33:8a:0f:02:b6:f1:d9:72:4a:d4:64:55:94:
6e:e6:1e:3b:5b:12:b0:46:42:50:d9:df:e3:2a:7d:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B5:CD:18:CF:A5:0A:C1:37:8B:EF:EE:95:81:4C:9C:62:2A:34:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca7a5b88-c898-3224-b1d9-5657ce79e1eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
158.62.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:6d:69:0b:ad:c1:84:f2:2b:a6:16:79:49:1f:ca:50:95:a8:
6f:22:92:6c:3a:07:43:b7:34:d1:bc:2f:7b:d9:7c:60:a0:f3:
b5:00:20:2d:e4:ab:b2:d4:57:1d:17:e5:70:a5:37:08:e7:49:
41:3a:e7:90:45:62:43:fd:75:ea:f1:22:04:4a:88:2f:ad:35:
87:e1:85:2f:df:f1:2f:78:f3:7a:36:91:79:7f:39:60:2e:50:
b8:c2:d2:65:29:ff:93:2f:61:01:a8:27:15:b9:0d:73:f4:f5:
7a:9d:92:ea:77:6c:68:b7:5d:5a:d7:af:11:e7:a9:21:f9:fb:
3d:d4:d9:66:ae:c3:3b:3f:24:49:82:b4:b1:7f:a4:56:94:cb:
78:30:0b:10:b5:a5:3c:30:52:3d:f0:11:14:9c:91:df:00:6c:
e5:b1:20:c9:d7:9f:ea:d4:2f:5d:60:2f:ad:a0:bc:41:7f:b5:
4e:7c:a1:da:e1:dc:43:82:03:15:e0:c2:87:48:d7:c7:7d:8c:
1c:4a:1a:86:09:7a:7f:74:a1:d0:24:0e:e8:01:bf:1b:e1:52:
fc:03:9c:c7:d7:3c:8a:cc:e8:78:c1:92:44:f3:57:30:bf:27:
a8:fd:6a:6e:9a:bd:22:c6:39:a8:9f:da:bf:5f:54:6a:ad:88:
a0:61:b9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:36:38 2026 by rpki-client