
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/90f94d3b-6a6d-3448-bb1d-e0df1a308402.roa
File: 90f94d3b-6a6d-3448-bb1d-e0df1a308402.roa (raw, json)
Hash identifier: okfpSmDATYVRy5xHfz07UOEd841C9oPBa4S0A9SuM5w=
Subject key identifier: 87:0F:DF:52:5D:73:E1:FE:65:3A:25:21:A6:66:74:53:79:59:67:B2
Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial: 010D0C9F4328584DA280106843D9A57B54E3ED80
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/90f94d3b-6a6d-3448-bb1d-e0df1a308402.roa
Signing time: Sun 26 Apr 2026 13:00:30 +0000
ROA not before: Sun 26 Apr 2026 13:00:30 +0000
ROA not after: Sat 25 Jul 2026 13:00:30 +0000
asID: 293
IP address blocks: 192.188.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a2:80:10:68:43:d9:a5:7b:54:e3:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Validity
Not Before: Apr 26 13:00:30 2026 GMT
Not After : Jul 25 13:00:30 2026 GMT
Subject: CN=59604e69-e327-4e3c-a70c-d32428041765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:f6:91:41:30:1e:7f:1c:93:87:88:19:f6:
7f:62:f5:69:82:f1:e3:cb:6b:e4:53:3e:bd:c0:80:
58:14:8c:3e:ed:83:e2:a9:f7:f8:e3:6d:ad:d6:8d:
47:3d:df:45:6a:cf:89:e6:a6:91:46:5c:ae:36:db:
45:59:48:03:d6:2e:72:51:6f:c5:d5:d2:54:75:ea:
f9:78:f0:fc:0d:2c:96:2c:a7:6e:2c:c8:7f:29:ff:
88:cc:7e:22:e9:96:6b:8e:b3:f5:c6:6c:9f:d5:bb:
16:2c:3d:ac:04:74:3f:eb:d5:b3:5f:5b:ab:9e:de:
1c:ca:f1:5f:12:f2:53:9e:6d:bf:97:1c:df:22:ce:
ad:65:92:2b:ad:70:3d:05:a9:89:9e:33:19:3b:6a:
d4:1d:7f:0d:84:31:42:b6:2f:98:a2:ce:74:47:1c:
c8:05:bb:32:fc:da:64:2b:99:0a:f4:1f:57:97:2f:
ac:3d:c4:de:8f:19:f9:90:07:60:02:80:f0:63:60:
62:10:94:94:8d:44:7f:e6:40:ad:0b:4b:4f:af:94:
0b:17:8a:07:a6:3b:7c:e8:cc:b4:85:68:78:73:cd:
27:00:b1:73:21:0f:5a:a8:c6:7b:da:53:35:13:2c:
f1:5f:bb:e2:9b:8a:a5:d9:ec:e4:ac:bc:c8:35:e2:
89:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0F:DF:52:5D:73:E1:FE:65:3A:25:21:A6:66:74:53:79:59:67:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/90f94d3b-6a6d-3448-bb1d-e0df1a308402.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
X509v3 Authority Key Identifier:
keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
sbgp-ipAddrBlock: critical
IPv4:
192.188.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:ed:71:c3:1a:09:56:28:75:98:e3:38:96:eb:36:f2:ee:d4:
bb:a6:2e:ce:d3:dc:08:23:d1:22:6b:de:bb:ff:c4:98:10:22:
6d:34:b0:57:28:d0:ea:a3:ba:db:d4:8f:c3:2b:01:fa:97:74:
eb:5f:e4:03:47:34:a9:81:d1:71:04:3f:d9:5a:ae:1d:a0:e9:
67:cc:5f:cf:7c:39:6c:61:3d:c9:33:b2:67:23:bf:a8:6b:57:
b0:01:d8:27:c5:4b:3a:a4:b8:ef:39:ba:45:b4:67:61:ae:ef:
af:85:e0:3e:dc:4d:f6:38:48:82:d2:3c:c5:67:ee:d7:3b:f8:
f0:89:42:cb:0b:00:ee:bb:0f:7a:29:4e:0a:eb:98:a6:22:2b:
92:c9:7d:b8:91:07:44:dd:41:4d:b8:5c:76:4f:07:da:f4:39:
de:7f:aa:7b:82:e5:d3:c6:98:47:eb:4a:4b:8b:de:96:a6:63:
9b:aa:e8:fd:45:9b:f9:d7:1e:45:c6:c3:b6:c1:89:b0:ec:36:
4c:f4:dc:fb:0e:bc:1a:fb:b7:a9:8a:c8:5e:b0:6b:b5:0c:53:
08:1f:f1:88:f6:ed:0c:ee:9b:12:81:f1:85:23:8e:56:15:97:
5a:9e:98:db:f4:f7:5c:26:33:7e:e4:42:83:a8:b0:f3:77:8d:
b5:71:e3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:27:52 2026 by rpki-client