
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/28914dd1-0593-3a05-8bae-dc7ef054b587.roa
File: 28914dd1-0593-3a05-8bae-dc7ef054b587.roa (raw, json)
Hash identifier: L/XTVPBLy6QNVQRErgPoOZn9SiyeMRV5Cn/iEF23svY=
Subject key identifier: CC:F9:6B:8A:69:B0:61:AF:7F:3C:AB:42:F5:19:3B:2E:02:F3:AD:9C
Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial: 010D0C9F4328584D83CAB15B5DAFD03AC07B0860
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/28914dd1-0593-3a05-8bae-dc7ef054b587.roa
Signing time: Wed 15 Apr 2026 13:00:30 +0000
ROA not before: Wed 15 Apr 2026 13:00:30 +0000
ROA not after: Tue 14 Jul 2026 13:00:30 +0000
asID: 26744
IP address blocks: 68.170.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:83:ca:b1:5b:5d:af:d0:3a:c0:7b:08:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Validity
Not Before: Apr 15 13:00:30 2026 GMT
Not After : Jul 14 13:00:30 2026 GMT
Subject: CN=118e3c17-ca83-4e89-816c-41e44d6e0583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:a8:94:ff:48:b0:62:a4:7f:49:4c:66:02:
05:92:63:e8:47:a7:e1:dc:87:8e:a8:32:14:39:f4:
4f:81:27:45:cb:a2:d6:94:15:12:43:a4:ae:66:e4:
b8:af:ff:a0:25:a0:90:a5:20:8b:b7:c9:f5:17:45:
47:50:40:d9:34:13:98:c4:72:19:0a:40:b8:fa:53:
4e:13:8c:0d:b1:50:2b:93:17:57:d7:03:8b:9d:fb:
1b:2a:bc:df:8d:d2:b1:cb:38:dd:9a:cb:56:1a:60:
df:e5:5a:3c:ab:20:a7:e0:b5:c3:23:91:6a:4d:8f:
e1:94:fd:91:5f:ad:c7:71:4d:dd:bc:e6:5f:87:4c:
8a:aa:04:f9:29:f6:72:7a:f2:5f:67:a0:f1:30:fa:
5f:28:aa:2b:c3:cf:d8:1b:3a:78:63:47:25:9f:c9:
f2:d7:e7:24:2a:fc:29:61:a9:04:2a:8a:08:b2:28:
41:ac:5e:75:68:ea:d7:3b:6d:ef:1a:b4:30:35:e9:
37:62:79:cb:6c:db:f4:0d:14:60:f3:b3:53:d6:89:
d9:c0:a2:49:15:1c:d1:f7:6b:8d:db:91:67:8b:f3:
c9:80:8c:24:fc:d5:0c:25:72:b4:45:69:d6:38:3e:
57:25:3f:42:1c:c3:87:50:f4:60:81:f4:da:2f:d4:
49:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F9:6B:8A:69:B0:61:AF:7F:3C:AB:42:F5:19:3B:2E:02:F3:AD:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/28914dd1-0593-3a05-8bae-dc7ef054b587.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
X509v3 Authority Key Identifier:
keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
sbgp-ipAddrBlock: critical
IPv4:
68.170.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:5f:cb:cf:22:6b:93:fa:f0:aa:38:1c:e3:d9:52:38:fd:e8:
51:b2:7e:a5:f7:00:54:fd:94:0d:64:91:51:b0:9b:8f:c8:c3:
6d:c9:60:fb:d1:cc:02:70:45:f2:ae:8e:ca:00:db:ed:1e:dd:
05:9a:3f:b9:f4:3b:e7:c3:c6:65:d0:91:60:1d:4c:94:8b:51:
22:61:11:b2:b3:d4:28:ba:f2:09:ad:80:d4:56:38:04:ef:b3:
cf:72:fc:88:bb:ce:59:49:f3:42:32:fb:73:c1:57:a5:ae:60:
f8:bc:31:5d:8c:00:6f:4e:43:db:66:4e:3b:ad:9c:cf:e2:d9:
cd:05:0e:87:f7:1a:d4:37:d9:ff:2d:22:73:51:a1:ab:56:77:
38:4d:08:d8:22:ce:3f:7e:5e:27:c6:53:12:21:70:4c:ba:9a:
8b:f1:8a:02:d5:83:f3:75:5a:85:41:64:2f:90:d1:56:f7:c5:
39:aa:a0:cf:f3:3e:f8:3a:d3:fa:db:70:0d:00:f0:c9:d9:65:
e2:4f:81:26:98:d5:39:f1:94:a0:43:b7:26:60:4b:6f:c3:c0:
22:c5:51:a6:c3:f0:fe:2c:d0:3b:66:83:3b:32:4e:7f:40:a6:
55:27:91:b5:aa:64:e9:1d:df:65:ea:e6:26:92:f7:ac:90:14:
b8:da:a1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:58:45 2026 by rpki-client