
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa
File: b33f9824-1d22-3c11-b98f-82918021c09b.roa (raw, json)
Hash identifier: cMOz/iRpnIyyJUS/KH9IHHnAtKUywg9jPKersYhotDM=
Subject key identifier: 32:D0:F7:AA:CF:F5:37:97:16:30:2D:7E:4B:B9:6E:CA:4E:B7:B2:50
Certificate issuer: /CN=28635d6a-8623-4918-823a-dc1ad56ec1bd
Certificate serial: 010D0C9F4328584E1E444C99059F2AD11E0D1400
Authority key identifier: ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa
Signing time: Tue 09 Jun 2026 21:00:12 +0000
ROA not before: Tue 09 Jun 2026 21:00:12 +0000
ROA not after: Mon 07 Sep 2026 21:00:12 +0000
asID: 53429
IP address blocks: 199.68.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1e:44:4c:99:05:9f:2a:d1:1e:0d:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28635d6a-8623-4918-823a-dc1ad56ec1bd
Validity
Not Before: Jun 9 21:00:12 2026 GMT
Not After : Sep 7 21:00:12 2026 GMT
Subject: CN=afc1407a-8930-4b03-9362-51e5155968bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:8a:46:2f:f1:bb:73:a6:2c:c6:58:d9:cd:
7e:21:ab:1a:90:6e:5c:eb:be:5c:a6:d8:12:f6:b9:
94:04:1a:0f:44:a4:0e:9a:2e:f8:34:1f:4a:79:92:
41:03:d7:05:03:ae:c4:cc:8c:1e:2f:d3:11:0d:3c:
18:59:39:4c:8a:58:31:1d:08:ae:66:c7:d1:85:68:
d3:f7:ad:ad:3f:30:ca:b1:e4:b1:1c:97:51:02:53:
9b:0f:5d:3e:1f:cf:b4:68:88:06:e0:bd:55:05:fe:
77:07:64:a5:d9:af:94:89:28:43:f3:d0:73:5c:3f:
34:95:a9:bd:ff:67:6d:58:83:3e:fc:65:22:b2:c2:
94:e4:80:02:4a:b3:f5:c9:d3:fd:52:22:e9:85:ff:
54:dc:30:92:90:e7:88:0a:13:aa:e4:fd:f9:80:e6:
72:d8:67:21:c5:5c:5d:15:a3:d6:3e:33:d7:2c:ee:
4f:7c:66:64:9d:70:ff:be:e4:6c:5f:1e:f6:f3:d6:
1c:52:8a:a4:72:b9:e2:db:3b:96:ba:69:32:33:b3:
6a:c5:f6:77:52:f7:92:fe:ca:23:48:30:89:49:c0:
13:13:56:c0:8c:94:8f:38:87:03:c9:57:be:59:85:
e8:09:9e:c0:d7:84:0e:6e:ae:ce:3f:13:92:62:57:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D0:F7:AA:CF:F5:37:97:16:30:2D:7E:4B:B9:6E:CA:4E:B7:B2:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl
X509v3 Authority Key Identifier:
keyid:ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer
sbgp-ipAddrBlock: critical
IPv4:
199.68.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:a0:c1:4c:21:f1:5c:24:56:23:41:a6:95:9d:1b:79:7d:d3:
d7:ee:b5:ed:45:0d:3b:0a:98:99:8f:fb:53:b5:f1:3b:88:6b:
fd:8b:3b:ea:87:5d:1f:79:a8:0b:3a:a6:3f:19:a6:47:19:fe:
38:7f:de:72:9a:4c:78:10:e8:67:da:5e:5e:9e:68:3b:aa:88:
58:1e:87:db:92:e2:0b:30:d7:a2:96:4c:18:84:15:59:a0:7d:
a8:57:8d:74:32:2f:96:62:ee:65:46:d1:a8:d6:f5:aa:a0:b8:
05:c4:97:f5:0a:e7:6c:73:9d:26:48:65:19:e6:89:01:ce:08:
9b:c1:e9:19:a1:e4:6e:eb:5e:73:fb:76:74:1d:82:81:42:59:
d7:2c:02:7c:ef:f5:83:37:dd:16:d3:75:bb:71:5f:3a:61:28:
1d:e3:e0:58:6c:0d:a9:96:a7:5b:4b:96:8c:e9:90:b3:64:17:
27:b7:4d:8b:56:00:89:0c:31:06:8d:7b:8a:cc:e0:f9:d0:7a:
84:cd:29:9e:30:2d:1d:8e:7a:fe:99:93:c0:7c:10:fc:59:b5:
15:89:14:18:b8:bf:f8:e9:12:f2:06:26:8e:db:ff:bb:29:e9:
ed:18:79:24:9c:e4:de:3d:4d:b3:04:42:67:c4:ba:d0:84:3a:
1f:23:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:11:52 2026 by rpki-client