
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/df479898-67d4-3ee5-ab7e-b9a811a3a140.roa
File: df479898-67d4-3ee5-ab7e-b9a811a3a140.roa (raw, json)
Hash identifier: lcMpXZhxSrD+8z3q1yyJ5MblIRi6Mkla/3il2I0jKf4=
Subject key identifier: 37:44:5B:60:31:16:DC:57:7F:39:4B:84:E2:43:BE:6D:52:51:2A:8D
Certificate issuer: /CN=28bc3af1-87e7-4ad5-ba9c-7eebdbd820db
Certificate serial: 010D0C9F4328584EA445184A6E5BBC1CD5C8D350
Authority key identifier: 78:BD:2E:9E:0F:6D:71:DF:A1:7A:6B:F4:02:24:03:50:B3:19:7C:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/df479898-67d4-3ee5-ab7e-b9a811a3a140.roa
Signing time: Mon 27 Jul 2026 21:00:11 +0000
ROA not before: Mon 27 Jul 2026 21:00:11 +0000
ROA not after: Sun 25 Oct 2026 21:00:11 +0000
asID: 33228
IP address blocks: 208.92.236.0/22 maxlen: 24
2602:f85e::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a4:45:18:4a:6e:5b:bc:1c:d5:c8:d3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bc3af1-87e7-4ad5-ba9c-7eebdbd820db
Validity
Not Before: Jul 27 21:00:11 2026 GMT
Not After : Oct 25 21:00:11 2026 GMT
Subject: CN=da5b4c71-efea-403f-bc0b-05660d2706ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6f:25:d1:b7:cb:09:d2:10:d2:e4:a0:55:92:
cb:a5:5f:0b:10:ab:4b:4e:9d:9c:8e:0a:ac:24:b4:
af:a1:df:4d:4c:16:9b:5a:e2:44:58:26:a1:2d:ce:
27:03:f5:87:d3:1b:9c:e6:62:e5:08:b3:a8:d6:9b:
41:a9:4f:6d:4e:85:f9:20:4a:f1:f9:8d:c5:09:4d:
b1:24:3b:d7:c4:76:4f:30:1e:26:28:df:fe:57:4e:
f4:db:da:03:cf:4d:59:47:a3:44:34:0e:f3:9c:79:
46:a8:cf:11:a3:af:c8:e4:1f:86:c3:4b:11:7e:ea:
86:d0:8b:df:9e:4f:5d:c7:6e:66:42:d0:20:98:8c:
87:06:00:84:79:33:c3:05:4f:96:3a:45:cb:85:55:
79:8d:bc:ec:15:22:e1:b3:0e:d0:71:41:d2:b7:2a:
47:2f:57:0f:3a:c1:ae:eb:64:68:35:e8:69:b5:cd:
8d:05:c2:7d:7d:be:9a:0b:72:1e:dc:79:51:c7:ea:
21:0f:28:53:6b:2d:e0:4d:1f:bc:47:73:98:95:1b:
48:0e:c1:bf:af:65:58:7f:ca:30:82:f8:d5:4e:b6:
dd:be:1d:4f:e6:2f:71:68:54:8c:e8:5c:d0:94:68:
47:ae:f0:7d:87:2d:d4:5a:42:cf:38:fe:1d:5c:7d:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:44:5B:60:31:16:DC:57:7F:39:4B:84:E2:43:BE:6D:52:51:2A:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/df479898-67d4-3ee5-ab7e-b9a811a3a140.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.crl
X509v3 Authority Key Identifier:
keyid:78:BD:2E:9E:0F:6D:71:DF:A1:7A:6B:F4:02:24:03:50:B3:19:7C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer
sbgp-ipAddrBlock: critical
IPv4:
208.92.236.0/22
IPv6:
2602:f85e::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:89:68:3e:d2:9e:88:34:1d:ee:6f:1c:d8:27:2c:c9:dc:64:
a1:6d:43:7f:11:8e:77:4e:bf:4b:03:63:ed:6d:d0:79:11:e8:
dc:20:59:ff:1d:1e:a6:9b:c7:76:e5:7e:15:d9:9b:c7:03:4f:
3d:2d:62:4d:58:23:da:0c:db:70:01:4d:81:27:31:39:e1:54:
8f:ce:eb:a8:ff:36:75:6d:8a:29:e6:b4:1c:58:06:f3:0d:7c:
1c:ac:43:06:b3:5d:91:2d:30:62:dd:dc:c3:34:b7:5b:7e:6b:
21:82:19:97:13:ea:49:76:ad:77:81:95:2b:e9:5c:85:fa:c1:
14:15:ac:d4:8a:16:64:40:e2:a6:d1:2a:bf:41:62:ac:7b:ea:
81:1d:a1:87:6b:6f:27:5c:c6:bb:38:9e:cb:e1:c3:c3:3c:d0:
81:d2:42:91:bb:d1:b0:96:b3:af:4f:29:86:8c:4b:c8:f9:5f:
94:d0:f0:b6:f2:01:49:89:78:09:2f:fe:b2:ff:6e:4d:af:8b:
e9:95:de:e2:0b:14:c6:20:6d:1c:54:de:90:35:d2:d7:c2:33:
3a:c2:20:37:37:1a:58:9f:72:b4:e3:6e:82:69:d6:6d:16:01:
5e:9e:3b:4f:10:8b:51:03:22:3e:b7:15:53:89:f3:a8:f2:eb:
ca:cc:66:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:10:59 2026 by rpki-client