
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dfa8b6ce-1680-38f8-a585-90d820aa228f.roa
File: dfa8b6ce-1680-38f8-a585-90d820aa228f.roa (raw, json)
Hash identifier: 0G2ZfCGNKeu8WXYS9aVrglWEyvbHitwqMF6PnhJtWno=
Subject key identifier: CE:92:91:5D:32:4D:24:F5:8B:CC:32:A0:63:A6:8D:99:49:48:DA:9C
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584E9A7FE3A36214867A22EE3B00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dfa8b6ce-1680-38f8-a585-90d820aa228f.roa
Signing time: Fri 24 Jul 2026 09:00:12 +0000
ROA not before: Fri 24 Jul 2026 09:00:12 +0000
ROA not after: Thu 22 Oct 2026 09:00:12 +0000
asID: 7029
IP address blocks: 192.171.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9a:7f:e3:a3:62:14:86:7a:22:ee:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Jul 24 09:00:12 2026 GMT
Not After : Oct 22 09:00:12 2026 GMT
Subject: CN=cf3e50d7-546c-4b53-a2fa-ee49cfbfb8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:52:53:33:fa:6b:7a:17:20:7d:56:9f:12:
d7:b4:33:5f:8f:0b:56:d4:9f:0c:55:01:f3:7c:ae:
76:47:b5:4f:88:2a:c6:3e:13:b9:da:ec:3f:a0:73:
1c:a2:48:aa:06:88:97:8e:b3:ef:7c:4a:75:6c:f1:
17:f2:5e:ec:d3:42:54:fa:d4:ac:be:fd:b6:a9:7d:
3b:e0:23:86:ce:61:e3:79:e0:a2:c8:40:d9:3c:20:
c3:b7:5a:27:69:dc:54:9b:ac:0f:10:7b:86:63:04:
d9:c5:12:4b:bf:b5:e1:bc:ff:87:b6:6b:3d:e1:8d:
28:33:d9:23:2b:dd:be:f4:1c:8e:4d:cd:8d:ed:0e:
c6:aa:43:48:44:70:4e:7a:0d:40:4e:62:35:f8:4b:
90:d8:37:d5:52:70:95:c5:28:d1:96:05:3e:66:81:
a9:03:cb:09:01:ed:0f:18:64:6a:64:2b:73:93:49:
10:86:d4:47:00:48:9e:c5:0e:e3:75:ef:c6:72:16:
ce:42:c5:07:74:1a:fe:f7:4f:65:9a:6c:4c:f0:66:
cd:e2:48:11:9c:eb:a1:cf:d0:2b:e6:b3:57:ea:1a:
a3:eb:f3:4b:4d:cc:51:c8:4e:03:ca:a2:85:df:87:
46:bc:de:8c:94:78:ab:83:1c:93:de:42:f9:a9:56:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:92:91:5D:32:4D:24:F5:8B:CC:32:A0:63:A6:8D:99:49:48:DA:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dfa8b6ce-1680-38f8-a585-90d820aa228f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
192.171.82.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:81:82:d3:07:7b:e8:13:22:5a:db:d5:83:df:ae:ef:d8:fd:
a0:6d:c4:8b:3f:b1:cc:f9:e7:24:d5:eb:a3:32:99:76:bd:0a:
56:19:e4:47:09:fa:3c:d2:db:25:2f:ec:32:f4:3a:b7:4f:ba:
f3:9d:66:c8:f4:78:43:8a:95:3c:8e:54:85:79:70:3c:3c:d1:
9b:2c:11:9d:8b:0e:96:5a:84:69:b7:8f:69:cb:2b:68:04:93:
51:bb:d7:e1:ec:33:1b:44:84:c8:29:74:56:c0:f5:92:f7:88:
68:4a:0d:c5:71:29:e5:38:42:52:5e:1a:d4:d2:e9:e4:08:11:
ff:19:8a:87:b3:ec:67:10:23:7d:50:06:f8:a4:05:5f:46:76:
e2:15:7a:a5:66:c9:e6:f3:80:8b:b1:73:0e:52:99:b1:47:07:
5b:e9:9f:cf:6c:84:c2:5a:2e:6a:3b:ff:ab:e4:54:e3:4b:0f:
80:41:5d:58:81:5e:5b:05:98:35:b9:af:ba:86:9c:05:e1:fb:
a5:41:03:46:0a:72:88:70:3e:6a:08:27:3e:f9:3c:e2:d0:4b:
89:7d:f0:96:58:34:1d:0d:57:3c:e5:cd:7b:d9:ad:bd:f5:57:
7c:4d:6e:e6:6c:26:3e:bd:1a:98:ed:d3:4b:6f:0a:99:d9:a1:
20:9e:df:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:11:39 2026 by rpki-client