
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa
File: 8b8a85b0-e152-340d-9552-d571b618a288.roa (raw, json)
Hash identifier: W98dfzS+K8FWQ6YCca0LDtPhI8oLs6hDMxDkTT+1P+w=
Subject key identifier: CB:53:B1:CE:37:E2:CC:89:BF:D4:63:4E:80:24:24:09:97:21:A1:70
Certificate issuer: /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
Certificate serial: 010D0C9F4328584E0E12298AF3F9E5B66C04FC00
Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa
Signing time: Thu 04 Jun 2026 01:46:25 +0000
ROA not before: Thu 04 Jun 2026 01:46:25 +0000
ROA not after: Sat 11 Jul 2026 13:00:30 +0000
asID: 30158
IP address blocks: 199.189.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:0e:12:29:8a:f3:f9:e5:b6:6c:04:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
Validity
Not Before: Jun 4 01:46:25 2026 GMT
Not After : Jul 11 13:00:30 2026 GMT
Subject: CN=015f28d4-8fcb-4c5c-b4b4-b9d1f53491dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:31:fe:89:66:13:16:9c:7c:e8:6c:de:42:ab:
1a:66:42:df:f6:a1:c8:43:0c:5f:e1:9d:78:89:6c:
ab:d4:3e:53:3e:19:49:cd:cd:be:08:e7:ab:83:aa:
a4:03:cc:30:9a:70:65:b1:8a:65:91:3e:34:b9:75:
be:6f:cf:e0:b8:66:90:0e:f6:a9:70:44:c8:bb:21:
0b:ab:76:bc:85:69:d6:cb:a2:23:f2:eb:20:2f:78:
95:de:1a:8f:39:30:ff:05:14:2b:0b:4b:76:bd:b0:
9e:d7:fe:cc:57:dd:75:1e:e1:a9:9c:2d:45:27:53:
4a:40:12:e6:3b:6e:0b:79:01:e9:dc:fd:69:cb:53:
6e:f6:16:88:76:95:3d:cf:f6:a7:cd:0a:8c:4c:19:
f6:dd:2b:9d:92:bb:20:88:35:e9:81:49:96:3c:69:
d6:6a:58:9e:37:73:55:00:7a:d7:d3:02:15:8b:cb:
e3:41:46:4b:2a:e3:54:7b:40:d1:5d:31:81:8b:08:
87:46:db:3f:43:65:3f:8e:41:68:b4:2c:eb:14:15:
79:a9:a1:50:4c:95:1e:da:73:ea:2b:9f:d8:56:d2:
32:3c:a2:ab:c4:9c:40:84:d9:2e:67:7d:2c:57:e2:
4d:b9:ae:d7:a6:85:28:22:ab:5a:f5:f3:3e:d4:27:
54:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:53:B1:CE:37:E2:CC:89:BF:D4:63:4E:80:24:24:09:97:21:A1:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl
X509v3 Authority Key Identifier:
keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
sbgp-ipAddrBlock: critical
IPv4:
199.189.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:d4:74:f7:f6:52:c9:de:d9:6e:81:51:db:9a:1d:8e:a5:a4:
04:a9:d6:ca:41:60:03:70:a4:bc:25:f4:8f:e9:1e:d1:fd:4a:
82:d5:bb:77:e4:21:56:08:62:43:2a:b9:86:59:c9:a7:b3:69:
f3:33:c6:c7:a7:7f:4e:47:b0:27:40:07:09:e0:3f:f0:91:a4:
39:16:22:26:13:98:c9:45:1d:c8:55:92:e3:a0:fb:da:87:d4:
67:45:b5:90:13:81:35:2f:43:c8:d3:4c:62:fe:36:f3:05:53:
e5:2e:28:99:11:9b:95:02:a8:80:ef:b8:dd:3a:cc:47:93:d6:
72:ca:7f:ea:41:ed:d9:c0:93:f8:d2:3a:b2:c7:44:db:5a:e4:
89:0f:fc:b2:31:e5:ec:e1:3c:7e:11:17:42:29:cc:9f:0e:09:
8c:0b:cb:47:d5:cd:d8:39:a1:96:a1:29:6f:43:5d:56:f8:c9:
e0:dd:a2:c4:7b:fe:ae:24:64:82:7a:31:07:16:06:f0:91:9e:
b9:02:fc:a9:24:75:70:0e:a4:b3:7f:ba:36:64:1d:53:f1:f8:
c1:dc:e1:60:93:3c:47:60:15:25:da:e5:c0:8e:36:91:7c:8d:
30:4b:7a:27:29:64:52:7f:11:56:41:20:bc:95:45:62:4f:f4:
7b:09:1c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:03:59 2026 by rpki-client