
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/170236aa-4aa5-367c-a414-53089aa4784e.roa
File: 170236aa-4aa5-367c-a414-53089aa4784e.roa (raw, json)
Hash identifier: LIMWRmIuNSS6M7LZq98BP7OQGYJM2JdeDhHyq2KmgVM=
Subject key identifier: 3E:BC:D2:F5:B8:5A:D4:52:BF:23:78:EF:DC:51:05:93:92:63:1E:6F
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584F5A330249E6EACA6FEF50BC80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/170236aa-4aa5-367c-a414-53089aa4784e.roa
Signing time: Thu 01 Oct 2026 01:00:12 +0000
ROA not before: Thu 01 Oct 2026 01:00:12 +0000
ROA not after: Wed 30 Dec 2026 02:00:12 +0000
asID: 33287
IP address blocks: 158.62.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5a:33:02:49:e6:ea:ca:6f:ef:50:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Oct 1 01:00:12 2026 GMT
Not After : Dec 30 02:00:12 2026 GMT
Subject: CN=23ad0e88-12e5-46b2-9b06-7ec982e6575c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:78:58:1f:0e:db:b3:03:9d:05:95:8c:60:
92:49:59:3d:08:c7:8f:fa:d0:f4:51:fb:bb:68:51:
81:dd:8f:fc:3d:b8:a6:a8:83:27:b8:b6:03:20:ae:
52:a7:02:bf:6f:85:28:44:83:eb:c9:08:ec:f3:d5:
dd:13:ed:48:c3:1a:34:86:d7:59:2b:57:63:7b:dd:
8a:a8:76:f0:51:a2:96:49:06:71:10:56:c5:41:51:
fe:9b:c6:57:93:d0:77:32:6d:30:be:69:96:a7:2d:
87:9a:c0:00:7e:68:16:0c:bd:fa:dc:a6:3a:45:3a:
25:64:48:c1:75:9b:15:f5:63:45:70:3b:b7:59:c1:
a0:ac:7b:19:0d:ff:56:f3:e9:d6:1b:00:5b:12:56:
2b:de:1a:1f:3b:66:2d:49:96:c7:d0:e5:ac:84:8c:
e5:46:9d:27:ff:9f:99:16:50:6e:2a:c0:27:1a:d6:
64:bc:1a:80:a7:08:6e:35:15:45:6b:7d:f1:d5:78:
4b:8a:58:65:c8:30:ee:aa:d9:10:28:cb:0a:55:2b:
e9:52:bc:23:a7:fc:ab:64:fe:d7:91:0a:d5:71:bd:
1d:30:7b:ef:09:a7:71:ca:5a:1b:d7:2b:da:90:74:
a8:fa:3c:4b:87:16:2e:95:a3:b7:cc:e8:82:99:a8:
17:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BC:D2:F5:B8:5A:D4:52:BF:23:78:EF:DC:51:05:93:92:63:1E:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/170236aa-4aa5-367c-a414-53089aa4784e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
158.62.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:5f:e0:88:86:3c:b4:e5:e0:89:7d:89:8e:17:67:ee:55:00:
d8:ea:4b:b7:15:f7:fc:bb:6a:e3:d1:94:7e:cf:95:5d:07:17:
fc:62:c1:ef:87:59:7a:f3:50:12:b3:cc:7d:28:24:c8:85:00:
7e:3f:66:ff:55:3a:a6:64:51:1d:98:7d:d4:80:13:7b:45:2e:
88:b4:20:41:f8:ac:44:99:65:70:35:0d:13:04:39:f7:32:07:
38:ae:76:bb:02:04:42:49:c2:c5:26:40:31:72:a1:2a:2c:bf:
0f:11:4a:41:84:94:df:59:c1:c7:ca:e7:62:7f:c5:d9:15:fc:
1e:4d:5a:ca:26:82:2a:cb:ac:ad:51:00:73:30:7c:b7:b7:0d:
dc:76:c0:97:99:e8:de:61:53:91:b9:9a:ba:2a:c3:81:e5:b2:
78:b7:6e:22:a7:44:dc:eb:16:fa:b6:35:df:30:8d:df:90:96:
38:e4:a5:ae:6a:1c:6f:ff:f2:df:cc:1e:41:cb:20:c4:ab:52:
cd:a1:c2:bf:be:7d:1b:1c:a0:e4:fb:a9:09:84:0e:d8:91:f2:
0a:24:a5:29:9c:52:d8:f3:d9:99:8a:57:f8:b9:13:19:a9:63:
6c:d5:e0:8e:1a:c0:32:3e:d0:a4:26:02:8d:5c:8a:1d:3b:e6:
c8:cc:fe:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:25:06 2026 by rpki-client