
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/2af97142-16a8-3306-a3ea-f2aabb3e2a3d.roa
File: 2af97142-16a8-3306-a3ea-f2aabb3e2a3d.roa (raw, json)
Hash identifier: mibZdQGizj79q6K5FA0IZ2cW08j/vKAaIbGhOQODB+Y=
Subject key identifier: 18:1F:9F:E4:E2:36:16:1F:C7:F6:FC:C5:61:67:12:E9:06:66:77:53
Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial: 010D0C9F4328584EF87CDF3355BD36444E21FC00
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/2af97142-16a8-3306-a3ea-f2aabb3e2a3d.roa
Signing time: Thu 27 Aug 2026 01:00:12 +0000
ROA not before: Thu 27 Aug 2026 01:00:12 +0000
ROA not after: Wed 25 Nov 2026 02:00:12 +0000
asID: 1403
IP address blocks: 72.10.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f8:7c:df:33:55:bd:36:44:4e:21:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
Validity
Not Before: Aug 27 01:00:12 2026 GMT
Not After : Nov 25 02:00:12 2026 GMT
Subject: CN=4a87dabe-689d-4c35-ab3e-87f3d332856f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:96:73:db:74:57:95:46:a9:2f:53:e9:bd:
1d:8d:4e:6c:11:f1:0b:56:1c:b2:7f:c9:5e:86:04:
d7:1b:d9:8d:81:0d:8b:8e:00:06:71:11:21:a2:72:
86:eb:a1:e7:db:e6:fc:06:3a:dc:7b:84:79:69:26:
4c:16:f0:8b:05:02:00:4c:e4:61:79:67:b3:9b:3b:
cc:cd:53:d3:79:90:4b:96:d9:dc:6c:b1:6b:90:3b:
01:95:b7:ba:eb:20:f4:72:06:e4:3a:5e:54:b9:29:
15:49:e0:94:9b:c2:00:1a:b2:35:7a:6b:a0:40:73:
aa:e2:b6:95:56:8d:4b:ea:44:06:0d:13:b4:36:fc:
7f:30:45:6a:9e:a1:76:bc:83:30:fa:b5:4e:06:b7:
8e:41:2b:79:56:a9:d7:a5:74:a9:03:d1:ea:54:2c:
64:cc:4c:27:ec:06:2c:52:67:98:f2:c3:06:83:3b:
f1:e4:00:75:ec:28:e2:9e:e3:aa:86:6c:06:00:f1:
35:af:e8:76:54:0a:87:ba:3f:42:fc:23:87:89:3d:
c2:28:b7:f3:44:3c:23:4f:94:f2:8b:cd:59:74:8a:
af:87:2e:e3:e3:cb:77:6e:cb:d4:a1:92:8d:67:aa:
06:67:9e:e1:01:23:4c:bf:62:72:6c:a8:41:60:db:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1F:9F:E4:E2:36:16:1F:C7:F6:FC:C5:61:67:12:E9:06:66:77:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/2af97142-16a8-3306-a3ea-f2aabb3e2a3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
X509v3 Authority Key Identifier:
keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
sbgp-ipAddrBlock: critical
IPv4:
72.10.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:f4:c4:f7:31:40:80:9b:a6:d6:78:84:35:c9:54:6d:2a:95:
a5:44:50:68:a1:a3:20:26:ce:6f:f4:3c:6b:0c:42:d1:6f:db:
7e:c5:a3:a4:5f:87:02:f7:34:fe:4d:44:06:b0:05:73:98:f9:
7b:4c:fc:35:c0:e7:26:36:52:0b:cd:7d:06:32:56:f5:48:95:
dd:42:9d:8f:83:b9:38:6d:12:f6:dd:45:24:bd:82:8d:73:ee:
23:68:f7:e5:54:56:c2:af:d6:21:c6:14:18:9b:b6:30:a9:6e:
a8:02:b4:ad:78:12:27:38:4d:11:fe:7b:db:44:68:2d:ec:73:
ee:2c:a1:45:f3:91:aa:ee:39:35:cb:27:b2:6e:71:64:78:9f:
1e:07:dd:e3:09:f2:b7:f4:ed:7b:c0:1c:60:9b:c9:51:87:e0:
60:05:12:5c:a3:8a:35:30:3b:c6:b3:d6:6f:8a:6c:9e:c2:49:
6f:27:ad:c6:02:7b:34:25:22:dd:a5:dd:b6:db:89:4c:cb:36:
f6:5a:cf:12:5a:01:09:a3:03:b0:8a:9d:d7:8c:cc:80:43:02:
20:ae:18:fa:4a:d3:2c:0f:d8:39:34:0e:37:ba:d8:db:c0:c4:
12:1f:bf:37:eb:c6:92:8b:fe:4a:14:5c:6d:7a:f9:33:d7:ef:
a0:e6:ee:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:56:59 2026 by rpki-client