
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/daa4fef1-8408-30c9-a731-41665d183354.roa
File: daa4fef1-8408-30c9-a731-41665d183354.roa (raw, json)
Hash identifier: s6KKmmRTqFbCQp+awSfFzAg/al9z1bPk/Z19wAEfPoQ=
Subject key identifier: 87:F4:2E:CA:C5:65:E0:88:8B:D4:B9:67:EA:23:D6:4C:C1:5E:4F:4A
Certificate issuer: /CN=0f9ce8be-7bbe-418b-b78e-42de894133a5
Certificate serial: 010D0C9F4328584DD8F082E07D90A1B246C7C500
Authority key identifier: CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/daa4fef1-8408-30c9-a731-41665d183354.roa
Signing time: Sat 16 May 2026 01:00:26 +0000
ROA not before: Sat 16 May 2026 01:00:26 +0000
ROA not after: Fri 14 Aug 2026 01:00:26 +0000
asID: 14618
IP address blocks: 72.57.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d8:f0:82:e0:7d:90:a1:b2:46:c7:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ce8be-7bbe-418b-b78e-42de894133a5
Validity
Not Before: May 16 01:00:26 2026 GMT
Not After : Aug 14 01:00:26 2026 GMT
Subject: CN=ec73efc9-cf21-4d19-a243-008bce7f1bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:d9:23:15:2f:6f:ee:07:be:5e:fe:10:2a:
8c:7f:d7:c2:dc:87:dc:e1:d6:ee:d6:d4:37:61:c3:
a8:66:a3:50:79:f0:ff:a7:38:e3:21:9a:94:d2:1f:
ce:98:0d:40:34:9a:b3:b9:07:d1:80:c1:27:fa:d6:
ce:24:1c:a7:1f:f0:f3:e8:cb:7c:7c:4c:dc:da:4f:
5e:72:6f:98:99:68:86:45:c8:55:0b:0e:80:27:a8:
5c:d8:59:f2:5e:8c:f5:72:fc:e0:44:5d:ee:73:41:
60:3f:a1:32:7b:6e:09:a8:f3:b6:89:09:b8:1c:c5:
d5:9c:62:79:24:a1:ce:fe:c8:2f:19:8a:5a:25:1b:
95:bc:a2:cd:21:e5:08:cb:ff:8a:b4:12:97:db:94:
52:bc:23:be:3a:e4:3e:51:b9:93:68:5a:48:f9:2d:
e1:9e:39:92:1a:cb:bb:ec:18:e6:f5:7b:c2:e2:93:
54:ca:f1:3d:71:08:84:1f:59:03:93:63:7a:74:3a:
0e:2a:ac:69:1a:fe:29:62:ff:44:74:e0:0c:d5:2d:
56:72:d6:05:f8:ec:44:94:fa:f6:f0:cf:ec:e4:3c:
79:94:bb:76:a8:5c:65:3a:a8:d7:94:11:76:be:14:
a6:7a:47:b8:06:a1:29:fb:b7:f4:ca:65:45:35:18:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F4:2E:CA:C5:65:E0:88:8B:D4:B9:67:EA:23:D6:4C:C1:5E:4F:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/daa4fef1-8408-30c9-a731-41665d183354.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl
X509v3 Authority Key Identifier:
keyid:CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer
sbgp-ipAddrBlock: critical
IPv4:
72.57.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:a8:f0:b9:58:eb:b3:11:6c:e2:fe:ab:97:0e:c2:93:41:00:
40:e6:20:4b:5f:6c:46:fd:ed:b8:ac:88:55:69:32:3f:17:d2:
0a:5d:2b:ba:6e:f5:9f:37:f5:b9:aa:56:de:dc:86:5b:22:47:
5a:80:c3:51:a8:d2:4b:ac:ee:b0:9a:43:4e:63:5f:77:99:b5:
3d:c9:c3:31:8e:c9:b7:c0:0f:02:af:1e:75:b8:9a:11:6e:e3:
c2:65:6e:0d:ab:19:e1:da:d8:75:8d:b3:49:f4:ae:fc:1e:27:
2a:ac:d1:fe:9c:9d:46:5a:93:ca:4b:77:05:23:6a:60:90:7c:
bb:57:f0:f0:ea:72:07:94:b0:a3:54:9b:b7:ed:eb:3b:9c:99:
e9:85:ae:8a:74:66:3c:16:e7:d1:d9:02:a4:5d:4d:d5:74:4f:
ea:4a:79:5a:e2:43:27:1d:ff:d0:96:92:25:94:24:4b:3f:6a:
e2:72:23:d6:26:b0:25:0b:5c:c9:5c:e4:96:2e:c1:e8:b8:fc:
f7:9b:92:ef:44:98:3d:76:d5:eb:86:5a:18:c3:d7:e3:9b:92:
65:49:4a:da:77:ed:33:ff:ff:64:98:5b:e3:7e:13:1a:73:ea:
9e:e7:1b:7d:54:55:10:2a:83:62:2c:5e:de:78:eb:84:1d:8d:
97:19:1a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:08:36 2026 by rpki-client