
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/c571a411-c09a-39a2-bbcf-c326d00332b2.roa
File: c571a411-c09a-39a2-bbcf-c326d00332b2.roa (raw, json)
Hash identifier: TsNiqTLmrc519LHUCY+FidHLO22ZbJfOj1m2qFjy+hw=
Subject key identifier: AA:E5:E2:EE:06:1F:AF:6E:1F:1C:09:14:8C:C8:74:16:7F:DF:62:A4
Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial: 010D0C9F4328584D852FD25C28AF5F9BD67FD400
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/c571a411-c09a-39a2-bbcf-c326d00332b2.roa
Signing time: Thu 16 Apr 2026 01:00:23 +0000
ROA not before: Thu 16 Apr 2026 01:00:23 +0000
ROA not after: Wed 15 Jul 2026 01:00:23 +0000
asID: 16532
IP address blocks: 72.10.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:85:2f:d2:5c:28:af:5f:9b:d6:7f:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
Validity
Not Before: Apr 16 01:00:23 2026 GMT
Not After : Jul 15 01:00:23 2026 GMT
Subject: CN=89b70f2b-5420-449b-a30c-dd52eadebae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:08:f9:7b:ab:ec:00:30:33:9f:f5:c0:63:38:
10:04:a0:c2:fe:97:c6:13:44:31:25:21:ca:6e:56:
28:bd:aa:bf:72:09:d7:00:4a:24:cc:49:99:2b:74:
32:8d:72:51:bb:a7:8e:8d:ca:be:6b:c6:51:86:64:
f1:e3:1f:bb:17:fd:b4:b6:0b:bc:4a:06:1e:58:7c:
33:fe:09:53:ed:2d:9a:c7:ea:54:c0:4a:2e:9e:cd:
02:3b:57:d4:62:d7:e4:70:04:26:de:e0:2b:88:54:
6e:ed:cd:99:d6:99:85:a8:a5:03:e2:bd:ec:51:ee:
47:1b:49:02:2f:ea:4b:cf:25:6c:7f:1a:2d:1e:09:
fd:b4:bd:6c:88:0b:be:29:90:ff:64:8b:28:5f:be:
f2:a6:07:e0:08:c1:cc:18:2a:f9:a5:c3:b3:de:45:
4d:29:d4:71:4a:12:6f:f5:75:27:78:38:e4:16:87:
a3:98:99:ac:8c:b0:ab:35:d8:70:ac:85:c0:5b:a9:
a6:17:68:04:f5:38:b6:e0:53:3a:3d:b9:a5:af:19:
51:36:0c:c7:04:b2:ba:7b:2e:4d:93:cf:df:c0:8d:
67:80:ce:eb:7c:aa:1e:1c:ce:0c:a7:65:9f:30:f8:
63:0d:c9:47:fb:ba:ea:80:49:90:16:b3:20:54:48:
ad:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E5:E2:EE:06:1F:AF:6E:1F:1C:09:14:8C:C8:74:16:7F:DF:62:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/c571a411-c09a-39a2-bbcf-c326d00332b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
X509v3 Authority Key Identifier:
keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
sbgp-ipAddrBlock: critical
IPv4:
72.10.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:fa:69:21:5a:50:ac:0f:f3:b3:4a:d8:68:ec:c4:f9:66:27:
96:85:20:7b:62:3b:d0:96:e7:36:b6:f6:61:5c:1e:72:4e:a3:
e0:3b:f5:92:f8:f7:89:c4:ec:43:b9:8f:da:e8:e2:2b:21:64:
7f:1d:d1:70:68:cc:d6:5c:5b:53:cd:c5:52:4b:10:5b:0c:be:
63:e1:a1:19:3b:fe:62:4e:26:f1:ad:ec:52:19:2d:04:2d:cd:
63:84:5f:ea:8a:74:47:ce:2b:6f:f5:ae:9f:5c:56:89:c0:18:
b3:b4:4e:93:82:e4:4f:8a:69:3d:8e:59:d2:92:6b:87:11:8c:
c7:6a:1e:71:27:5c:05:bb:6d:76:a5:10:77:49:1a:e9:bf:e7:
8e:c2:db:1e:b2:b3:b6:09:b4:58:4c:c1:34:6c:22:5e:5b:ee:
e5:28:4c:96:2a:73:03:d6:a8:17:27:c5:22:42:8b:8b:56:e3:
ba:64:47:23:52:72:5c:82:f8:38:1c:a5:4c:7f:ee:d2:a5:41:
ff:2e:74:f8:2b:4c:6b:37:95:db:ed:6a:6b:f2:32:c0:26:8d:
60:d4:f1:fe:8e:a1:ac:0c:8b:f1:84:16:96:44:23:aa:5e:68:
e9:7b:db:df:a8:bc:30:a0:8e:cb:18:4e:e4:b9:c6:d6:b0:a8:
64:43:66:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:57:21 2026 by rpki-client