
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/c571a411-c09a-39a2-bbcf-c326d00332b2.roa
File: c571a411-c09a-39a2-bbcf-c326d00332b2.roa (raw, json)
Hash identifier: 29co0HwS54gePATS40hOkJoyp2FkPM9BrsMbimttIvc=
Subject key identifier: 24:65:BF:98:B5:53:78:40:F1:F0:B9:A1:56:F4:D6:B4:5D:17:1F:C5
Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial: 010D0C9F4328584FAB28803BC5BA6B358C305478
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/c571a411-c09a-39a2-bbcf-c326d00332b2.roa
Signing time: Fri 30 Oct 2026 01:00:13 +0000
ROA not before: Fri 30 Oct 2026 01:00:13 +0000
ROA not after: Thu 28 Jan 2027 02:00:13 +0000
asID: 16532
IP address blocks: 72.10.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:ab:28:80:3b:c5:ba:6b:35:8c:30:54:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
Validity
Not Before: Oct 30 01:00:13 2026 GMT
Not After : Jan 28 02:00:13 2027 GMT
Subject: CN=16c65650-c223-4288-9dcc-a7eb9ed2e74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b6:af:c7:cd:e0:16:5c:fe:b2:ec:5f:bb:b5:
10:7f:a0:a2:f1:e4:cc:6b:3f:85:8b:82:ce:74:cb:
78:cf:bc:ee:3e:cc:fc:72:3b:59:9e:37:cb:a1:6b:
1b:62:e9:82:80:4c:ed:84:b1:be:af:02:5f:61:fb:
5e:22:46:59:c9:73:40:10:85:02:cc:15:0a:65:77:
dc:b8:19:66:a3:e5:91:7e:ce:fe:b9:f7:ae:5c:f8:
0c:52:d3:4f:52:a6:b4:41:e9:60:1d:f8:42:3c:a1:
d2:27:fd:74:f1:f0:a0:f9:8d:8d:30:37:ee:95:69:
a5:83:a3:1c:28:f2:e6:39:fc:f6:db:67:73:19:14:
8b:3e:8e:d2:57:36:d2:6d:54:30:25:03:c0:93:b5:
0b:fe:97:71:eb:fb:13:6b:46:a8:39:c8:07:de:af:
9f:70:46:dd:bb:6f:df:2e:d8:b0:c7:e8:de:56:b5:
f9:c0:83:ba:15:03:39:3e:bc:58:1d:97:25:f8:d7:
71:60:91:4e:29:91:ad:af:1d:d3:fc:3e:60:1a:79:
f4:db:66:b4:1f:5f:d7:a7:12:32:69:78:af:2b:df:
a8:8b:aa:d0:17:d1:28:39:ea:16:2d:31:bc:df:53:
b2:d4:14:28:2e:1d:42:57:14:a2:65:d3:66:29:33:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:65:BF:98:B5:53:78:40:F1:F0:B9:A1:56:F4:D6:B4:5D:17:1F:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/c571a411-c09a-39a2-bbcf-c326d00332b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
X509v3 Authority Key Identifier:
keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
sbgp-ipAddrBlock: critical
IPv4:
72.10.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:6f:aa:79:a5:35:0a:bd:85:8f:22:2a:ca:15:8c:d2:1f:fe:
62:52:e1:45:12:96:ff:cc:bc:ef:16:d7:3a:e9:bb:83:9d:98:
ef:20:7c:9a:c2:e9:25:da:4a:2d:b6:ac:60:53:e3:85:55:be:
60:68:24:c8:06:7e:7b:08:72:00:5c:df:ec:29:20:33:f5:9a:
12:ec:e9:6d:79:da:56:e6:36:ca:51:41:a2:2f:2b:f1:e5:ac:
84:80:e5:61:42:f5:3c:e0:18:41:74:f8:3c:d2:46:5e:1c:87:
00:58:e1:e4:87:dd:c1:70:1c:da:da:1d:df:22:fd:c5:a1:4f:
af:14:7b:14:41:db:fa:ef:fe:42:1f:4a:d3:97:62:a6:80:ce:
d9:6f:0c:9b:ca:67:4f:70:3b:26:7a:43:96:ab:e6:75:0b:ac:
f4:28:b9:61:03:85:a1:e6:7b:14:47:c2:80:af:14:3f:8e:ef:
95:69:c1:fc:20:2f:88:59:79:a2:65:f8:fa:f5:a0:90:26:88:
6f:60:c2:9c:7e:ea:24:81:87:99:9a:66:c9:03:38:e9:9d:3b:
ed:5e:f9:2b:25:9a:cd:1f:03:72:bb:ab:de:5b:8d:0c:a3:f6:
7e:81:44:27:44:7d:4a:ec:5e:aa:d0:23:a2:8c:34:c5:d0:fb:
a3:5d:3b:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+rKIA7xbprNYwwVHgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5
MTY5MB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk
MTZjNjU2NTAtYzIyMy00Mjg4LTlkY2MtYTdlYjllZDJlNzRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7avx83gFlz+suxfu7UQf6Ci8eTMaz+Fi4LO
dMt4z7zuPsz8cjtZnjfLoWsbYumCgEzthLG+rwJfYfteIkZZyXNAEIUCzBUKZXfc
uBlmo+WRfs7+ufeuXPgMUtNPUqa0QelgHfhCPKHSJ/108fCg+Y2NMDfulWmlg6Mc
KPLmOfz222dzGRSLPo7SVzbSbVQwJQPAk7UL/pdx6/sTa0aoOcgH3q+fcEbdu2/f
Ltiwx+jeVrX5wIO6FQM5PrxYHZcl+NdxYJFOKZGtrx3T/D5gGnn022a0H1/XpxIy
aXivK9+oi6rQF9EoOeoWLTG831Oy1BQoLh1CVxSiZdNmKTM5kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCRlv5i1U3hA8fC5oVb01rRdFx/FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy
OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvYzU3MWE0MTEtYzA5YS0z
OWEyLWJiY2YtYzMyNmQwMDMzMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0
NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3
OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj
NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSAqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFRvqnmlNQq9hY8iKsoVjNIf/mJS4UUSlv/MvO8W1zrpu4OdmO8gfJrC
6SXaSi22rGBT44VVvmBoJMgGfnsIcgBc3+wpIDP1mhLs6W152lbmNspRQaIvK/Hl
rISA5WFC9TzgGEF0+DzSRl4chwBY4eSH3cFwHNraHd8i/cWhT68UexRB2/rv/kIf
StOXYqaAztlvDJvKZ09wOyZ6Q5ar5nULrPQouWEDhaHmexRHwoCvFD+O75Vpwfwg
L4hZeaJl+Pr1oJAmiG9gwpx+6iSBh5maZskDOOmdO+1e+Sslms0fA3K7q95bjQyj
9n6BRCdEfUrsXqrQI6KMNMXQ+6NdO3E=
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:36:42 2026 by rpki-client