
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a5cc1b71-c2e1-3375-810a-5993aeb3f6fb.roa
File: a5cc1b71-c2e1-3375-810a-5993aeb3f6fb.roa (raw, json)
Hash identifier: 4x1F2ofX12iVYGnrVBEZG0VtQssbywA2E7pyCPbRX5Q=
Subject key identifier: 91:13:DF:46:06:17:DA:98:F3:1C:98:43:98:9C:4B:F9:AE:65:AC:AB
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584E9A7FDC2AD4A76E39DE526480
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a5cc1b71-c2e1-3375-810a-5993aeb3f6fb.roa
Signing time: Fri 24 Jul 2026 09:00:12 +0000
ROA not before: Fri 24 Jul 2026 09:00:12 +0000
ROA not after: Thu 22 Oct 2026 09:00:12 +0000
asID: 7029
IP address blocks: 158.62.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9a:7f:dc:2a:d4:a7:6e:39:de:52:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Jul 24 09:00:12 2026 GMT
Not After : Oct 22 09:00:12 2026 GMT
Subject: CN=585241e0-9c29-4411-8db8-85ac1b05b55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:17:7c:f7:79:e1:03:0c:2e:d8:96:e5:b2:
e0:e7:3d:84:25:9f:7b:07:19:8e:1a:3f:59:7a:d7:
85:6d:64:1a:11:bb:49:d0:8a:bc:ad:24:4b:49:76:
c7:9f:bc:fd:87:fb:d1:f7:5c:76:75:cf:17:2e:10:
06:a7:f2:da:b7:88:93:87:2a:d0:77:13:07:3a:75:
f9:29:df:eb:74:d3:85:96:cc:dc:3b:db:5b:cf:62:
70:84:b4:7e:53:a4:0f:f6:89:d0:84:73:7d:63:d3:
54:96:52:3f:0b:e0:6f:6f:82:2d:6a:65:61:4b:2a:
8f:2f:7c:66:ad:9e:90:60:ab:e4:34:97:da:8b:ee:
2f:1f:50:8f:15:9a:39:04:e9:20:05:e0:2d:f1:1c:
62:a7:d0:da:17:0c:84:70:0d:19:3e:8f:3a:c2:02:
b6:11:10:30:e8:34:8f:d5:b2:fb:bf:04:dd:57:c0:
1c:07:91:e2:52:f8:64:1e:1e:e4:f9:23:1e:cd:76:
67:78:d8:27:4d:0c:91:60:18:bd:8d:ec:9c:ce:c3:
ed:bc:53:48:cb:08:5a:c6:73:a4:23:9e:e7:f1:46:
d4:f3:1e:d4:39:32:f5:e1:c7:86:c9:b6:be:6b:3a:
91:d3:68:3c:f6:3f:19:2a:6e:20:39:6e:11:29:d6:
bb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:13:DF:46:06:17:DA:98:F3:1C:98:43:98:9C:4B:F9:AE:65:AC:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a5cc1b71-c2e1-3375-810a-5993aeb3f6fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
158.62.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:b1:f3:86:42:9e:62:3a:ca:94:3e:ef:bb:a6:35:fd:1e:a1:
ee:65:9e:9d:f1:33:3b:48:83:43:4f:6f:4b:56:52:3d:0d:6b:
08:c5:a8:b1:27:b2:4d:b8:e4:b1:70:a7:b9:86:60:05:ae:77:
46:57:05:4b:58:44:cf:7e:0f:ae:54:c1:e1:c5:31:0b:9c:16:
f4:53:cc:d2:d3:b9:06:5b:0d:c2:6f:50:ed:6e:f5:60:d6:4f:
44:60:5f:20:b3:10:7b:c6:48:43:4c:c9:cc:c2:11:f3:ce:c2:
0e:82:ca:2a:32:da:79:0f:94:e6:67:7c:d7:71:0b:40:e7:23:
77:46:fd:d2:e8:d6:7b:af:41:c0:2b:d5:6c:6e:22:03:66:af:
05:b6:7d:94:a0:d0:fb:be:eb:8f:26:a3:eb:ce:b8:88:db:38:
fb:a0:e3:5b:c7:c5:dc:4a:8d:00:63:35:30:0e:80:b9:6a:61:
14:49:3b:33:c0:a7:e0:8e:f3:8a:c6:68:09:37:db:16:f3:14:
b0:f3:fb:6e:2d:86:7f:8c:02:c1:b3:a1:2b:9d:00:ec:39:0b:
60:0d:97:2e:85:4d:78:86:a5:58:2c:b8:1c:39:70:a6:26:72:
0a:d7:0b:cf:6a:56:c1:b3:f8:33:0c:44:b3:c6:2a:5c:bb:af:
c1:4f:07:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:33 2026 by rpki-client