
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/28575f9c-570b-3118-a718-2754ac5ad8a1.roa
File: 28575f9c-570b-3118-a718-2754ac5ad8a1.roa (raw, json)
Hash identifier: Tvwz0VSZj9BARS5ocbcbsRNqKITTLiufvxIdeJ+uySw=
Subject key identifier: 49:EE:46:80:AE:7F:42:ED:84:FA:EC:70:1B:7E:72:E2:34:F4:C2:A3
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F4328584EA79A6E651EDBEF7F343C0058
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/28575f9c-570b-3118-a718-2754ac5ad8a1.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 36040
IP address blocks: 104.237.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9a:6e:65:1e:db:ef:7f:34:3c:00:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=b831acd6-ce0c-4e60-b75e-3328e2b6cd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:da:f8:4f:da:10:92:ac:49:12:1a:71:fd:ba:
b0:55:c1:bc:fa:5b:40:86:0f:4c:4e:38:b7:d9:fe:
f7:b4:a2:ec:32:ed:56:b3:21:3d:18:b0:f7:7e:c2:
3f:42:e2:d7:3c:a6:a0:6b:29:97:4a:24:52:70:66:
f6:e6:7a:2e:cf:e9:39:70:0f:bf:c6:69:f7:8b:42:
1c:cd:2d:4a:8a:bd:33:b8:9a:57:fe:8e:f2:59:c4:
d5:e8:3b:fb:8b:df:86:37:5f:0d:0c:da:0a:3c:b9:
16:44:6c:90:3c:06:ad:37:94:4b:17:f4:16:f7:af:
3b:87:4e:e9:1e:33:b0:12:7d:9e:d7:af:25:d8:29:
24:25:ca:f8:c8:43:6e:32:58:75:03:ff:b2:06:df:
bf:28:d9:ac:35:69:d7:20:49:07:3a:6e:9b:14:47:
b6:bd:bb:88:8f:32:10:1e:5f:c7:fd:58:16:e1:1c:
5d:1c:62:11:43:ba:dc:7d:74:aa:ef:82:99:b7:8b:
09:65:67:e7:71:2b:b2:48:fd:8c:9f:43:e9:35:82:
5b:8b:fc:95:b4:17:b2:d6:ed:80:4d:1d:b3:93:d9:
57:e1:26:8b:13:5b:37:f4:ea:7d:86:1e:a1:61:73:
75:77:59:b7:4b:97:39:f5:bf:48:4a:15:70:f1:f3:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EE:46:80:AE:7F:42:ED:84:FA:EC:70:1B:7E:72:E2:34:F4:C2:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/28575f9c-570b-3118-a718-2754ac5ad8a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.237.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:cb:2d:4a:a3:93:88:44:89:54:f1:e1:1f:26:6d:0b:b1:a0:
14:d2:f9:ef:0c:39:4f:d7:cc:51:dc:2a:7b:e3:6d:7d:80:ab:
70:e7:c4:57:8d:f1:9d:92:bc:61:c7:63:93:19:31:ad:ef:6a:
e2:c9:74:6e:de:b7:e9:cf:7d:fd:8d:00:d0:c4:fd:2e:c4:02:
44:4b:a3:10:d1:cf:0e:df:54:fe:3d:55:86:27:cc:d3:eb:c6:
b0:e7:e3:c5:fc:7a:22:8e:c3:66:9d:02:12:cb:29:48:ad:9e:
a0:36:f8:40:9f:57:30:82:48:c6:00:cf:04:2b:ea:0c:57:dd:
ce:4e:bd:f9:b9:24:1e:4a:4f:5e:e1:27:62:ff:07:1e:b9:28:
5f:7c:a9:a5:e0:ba:88:1a:c4:71:a2:02:f7:3d:fe:b1:84:91:
c0:fc:86:29:00:fb:e6:80:d2:37:43:f4:95:81:d0:da:01:dc:
82:55:19:91:60:4c:8e:fa:bf:a4:05:7b:d2:3e:d3:c3:b5:35:
56:dc:fe:dd:af:74:02:fe:0d:f8:f9:ed:c1:7e:15:75:23:65:
f0:ee:6b:97:ef:e1:9d:27:68:26:04:4d:80:bf:df:f5:57:7e:
73:44:7c:16:f4:3e:3f:5a:3c:17:83:0d:b2:ca:2b:17:85:83:
90:ad:d4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:17:45 2026 by rpki-client