
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aedb689f-30e1-3b3f-870d-c4ac6a515706.roa
File: aedb689f-30e1-3b3f-870d-c4ac6a515706.roa (raw, json)
Hash identifier: qvTuncebRV6YzxjPPT3+kg8Yt7oLenp2oRW5SZx7gos=
Subject key identifier: 7A:30:E5:8F:2F:48:93:B9:98:19:A7:51:E4:CF:59:A7:9D:1C:4A:51
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584E15E4A2CFF50E3E996B063400
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aedb689f-30e1-3b3f-870d-c4ac6a515706.roa
Signing time: Sat 06 Jun 2026 21:00:13 +0000
ROA not before: Sat 06 Jun 2026 21:00:13 +0000
ROA not after: Fri 04 Sep 2026 21:00:13 +0000
asID: 20001
IP address blocks: 149.20.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:15:e4:a2:cf:f5:0e:3e:99:6b:06:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Jun 6 21:00:13 2026 GMT
Not After : Sep 4 21:00:13 2026 GMT
Subject: CN=60921fa3-daf3-4be2-a707-166f41ce696c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:e2:63:95:28:b5:65:57:6f:97:3e:02:60:
b7:4c:1b:84:b7:2d:aa:37:a5:54:94:ba:54:55:f2:
9c:8d:04:39:0b:52:7e:4a:76:b7:4f:fc:69:bb:85:
f9:25:dd:76:18:b3:23:87:53:38:bf:31:ea:46:9e:
79:b8:91:c2:ab:75:94:d6:84:12:aa:09:46:7c:61:
7c:6d:6d:b9:d2:27:27:58:fd:56:0d:06:f6:19:00:
7f:3d:c7:a9:0b:78:be:1f:0d:26:4f:58:d9:69:07:
c2:1f:52:ce:a4:a8:dd:b1:21:0a:9d:09:ca:25:37:
4f:9d:23:93:68:05:dc:86:57:02:27:a9:da:dc:10:
12:e7:82:9e:d8:68:fc:26:69:00:34:22:bc:29:e5:
3c:a5:f3:b3:1d:0b:80:b9:00:c2:83:f2:13:73:c4:
12:0c:a1:de:44:1b:77:6e:bd:0d:33:0d:ce:fe:48:
59:3f:d2:76:c5:d9:90:6c:12:66:67:55:18:83:e9:
0e:0d:40:aa:2d:47:09:84:a7:d3:1d:45:bc:17:42:
e6:76:09:42:07:cc:74:b2:04:b6:8e:83:e0:5f:00:
b3:d7:c6:67:4a:32:7e:8b:c2:b1:38:ff:0c:94:e1:
0a:40:fa:84:f6:ce:ae:5c:23:b6:9e:9c:05:65:2a:
30:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:30:E5:8F:2F:48:93:B9:98:19:A7:51:E4:CF:59:A7:9D:1C:4A:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aedb689f-30e1-3b3f-870d-c4ac6a515706.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:d5:28:82:32:c1:32:b3:42:29:29:ca:33:b9:94:eb:94:c7:
bf:dc:26:e3:9d:d6:01:6e:10:8f:28:a3:42:a3:cf:dc:df:3d:
ee:e8:0c:ea:03:f5:5b:ab:5e:17:62:06:77:0b:e7:4a:87:36:
c6:24:6f:2b:c0:34:4c:75:61:05:83:e3:14:9e:25:aa:de:ad:
04:82:a9:4e:53:f2:a9:bd:31:4b:5e:94:0c:25:07:58:91:28:
b8:28:6b:d8:f3:ad:ec:6c:50:65:1b:2a:30:2a:fd:2c:aa:76:
5d:b8:34:dc:13:22:43:ab:ff:4d:67:25:a4:e4:d7:df:1e:9a:
b5:a5:17:bb:33:d5:0c:e8:2d:b3:50:f7:c9:86:c4:02:a0:f3:
3b:3c:c4:4f:04:25:73:56:29:02:c7:6a:c4:1c:26:20:8a:c8:
29:c4:54:86:8e:9e:bb:8a:30:60:99:05:a6:e6:cf:94:9b:0d:
2c:19:39:f1:8d:08:5b:85:cc:0b:8b:23:6c:f2:a1:d1:ac:2b:
73:19:1d:bf:bf:47:7d:e2:52:f7:0e:bc:6d:dd:1c:d0:de:82:
82:73:ec:d8:03:b6:7b:bb:6b:56:7c:5b:86:ff:b2:ba:4c:a8:
b9:19:3e:cc:32:aa:63:66:b0:26:e4:3d:97:6c:70:0d:bf:76:
4e:1b:b3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:40:38 2026 by rpki-client