
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a528e40a-979b-3aec-bc9a-e2097f2d86de.roa
File: a528e40a-979b-3aec-bc9a-e2097f2d86de.roa (raw, json)
Hash identifier: XOZ/Z1cO98Rw8Uj4QxFAuMhns+85x97E2YG3le8Cg7Q=
Subject key identifier: ED:2A:AE:F1:0C:A9:35:65:A7:3F:36:16:C7:DC:36:15:1A:CE:90:42
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584CC612050458D74BF3CF340D00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a528e40a-979b-3aec-bc9a-e2097f2d86de.roa
Signing time: Fri 06 Feb 2026 14:00:40 +0000
ROA not before: Fri 06 Feb 2026 14:00:40 +0000
ROA not after: Thu 07 May 2026 13:00:40 +0000
asID: 64267
IP address blocks: 147.53.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c6:12:05:04:58:d7:4b:f3:cf:34:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 6 14:00:40 2026 GMT
Not After : May 7 13:00:40 2026 GMT
Subject: CN=3c1fd33e-e39f-4efd-baf5-2328e64dd268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:31:6f:15:5a:ad:4d:9e:8e:52:99:b2:dd:
f0:9c:00:74:f5:40:ad:77:18:58:6a:71:f6:c1:bf:
cc:d1:b2:cb:dd:7d:da:b2:85:74:2d:6a:f6:54:27:
46:a5:fe:e0:e3:cc:ef:7d:cb:5b:9c:eb:2d:fb:5c:
29:c6:d2:db:3a:39:8b:aa:0c:aa:f4:57:31:76:c5:
69:89:67:81:c2:ae:4e:c7:06:0b:3a:86:cf:39:7c:
ff:78:88:e9:c0:bf:47:32:27:7e:b2:9f:81:21:f9:
dd:85:80:e3:7f:22:b0:c7:4f:ca:bf:29:87:2b:9c:
bd:e4:3e:44:73:e9:45:b4:c6:8d:08:78:f8:8d:d7:
b2:6f:17:20:19:67:ab:ac:d9:9b:d4:ab:64:fb:02:
81:ce:1f:c8:c7:1d:0a:90:6a:cd:25:65:56:a1:7c:
03:4f:d3:f6:29:af:be:bd:23:e4:bf:89:be:fd:d6:
39:a5:7c:f1:73:69:87:a9:0c:11:ea:ea:23:70:3a:
ac:b0:38:c5:bd:ae:67:39:ef:af:d4:c1:f4:8b:bb:
be:b6:19:9b:71:95:66:28:71:c8:2b:88:98:05:c0:
22:24:f0:7c:32:7a:bc:c2:c6:5e:56:e5:36:8b:21:
d9:04:dd:2f:f1:94:7f:9a:92:a1:7c:45:a3:b7:72:
51:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2A:AE:F1:0C:A9:35:65:A7:3F:36:16:C7:DC:36:15:1A:CE:90:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a528e40a-979b-3aec-bc9a-e2097f2d86de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
147.53.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:63:1c:4e:f3:22:ae:9d:b9:8a:a4:db:5f:e2:9f:2b:d6:1c:
78:1e:52:36:ee:ee:f9:e3:cd:73:a3:43:e6:d1:2c:f7:87:a3:
6b:39:99:b2:01:ab:65:b5:9b:4a:3a:53:ee:09:5d:05:00:e1:
2b:21:ea:aa:fb:c5:eb:60:c4:43:c9:2f:19:5e:1c:c5:a0:08:
de:a6:6f:84:fa:69:05:50:03:95:f3:27:3c:b2:ce:62:18:ab:
b9:43:6e:99:79:30:95:29:e6:ae:c6:fb:b4:72:62:e1:96:6d:
bd:3d:0d:f1:f9:c0:ad:75:55:71:92:dc:2f:4a:4a:35:9e:1b:
7f:bb:af:a9:bd:94:67:a3:d0:08:56:0b:4f:e3:18:63:99:78:
85:3a:fb:43:b8:fc:dc:d4:be:51:03:69:47:f5:20:50:6a:09:
37:94:c6:0f:65:d8:fe:06:ef:7d:b8:c2:b2:06:18:f4:0d:e7:
dd:07:4d:25:fd:9d:cc:14:4a:3c:c4:81:a8:be:1a:92:96:c2:
3a:fe:6e:91:8b:d9:ed:ff:18:60:c9:4c:28:a4:66:8d:40:85:
8e:56:15:86:f9:88:1f:07:64:ba:78:6b:4f:71:22:e0:b5:03:
c4:9b:bc:93:b8:46:0e:a0:3f:19:a5:9d:38:04:a4:21:db:7a:
5f:e5:c5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:37:56 2026 by rpki-client