
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/c571a411-c09a-39a2-bbcf-c326d00332b2.roa
File: c571a411-c09a-39a2-bbcf-c326d00332b2.roa (raw, json)
Hash identifier: 2xR8f9+zO/UiOLkkRW1Sdmu3K18Vee6mxxTduIBQ9II=
Subject key identifier: 5B:55:14:5F:DC:5B:CE:F1:C3:79:F4:BB:8C:A3:21:55:44:50:E0:3F
Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial: 010D0C9F4328584F07D778B43C7A150DBAA50080
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/c571a411-c09a-39a2-bbcf-c326d00332b2.roa
Signing time: Tue 01 Sep 2026 13:00:12 +0000
ROA not before: Tue 01 Sep 2026 13:00:12 +0000
ROA not after: Mon 30 Nov 2026 14:00:12 +0000
asID: 16532
IP address blocks: 72.10.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:07:d7:78:b4:3c:7a:15:0d:ba:a5:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
Validity
Not Before: Sep 1 13:00:12 2026 GMT
Not After : Nov 30 14:00:12 2026 GMT
Subject: CN=4fe79411-d0a2-41a2-982c-433fdfcd21e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d4:ac:21:fa:f9:3d:14:1e:05:df:32:9a:f0:
a5:e2:10:86:e7:38:3c:f6:2f:1b:a4:f7:c7:62:87:
d0:44:16:ba:a1:8a:52:ec:3b:01:76:c4:fc:9b:fe:
50:b7:54:24:ba:b9:84:ad:f2:4d:29:fb:ea:23:d5:
62:4b:41:d8:af:48:d3:ac:19:6f:44:31:e2:84:cf:
c5:26:65:ab:37:7d:c0:2e:ed:ee:48:b7:c2:67:e6:
f5:cd:4d:27:ee:7c:0b:02:bb:8e:c2:7d:88:53:d4:
da:81:f9:49:eb:96:81:e0:c1:6b:e8:3b:b1:7b:5b:
75:83:f2:63:71:ab:2b:ae:19:2a:4f:89:cf:fe:7c:
d0:21:79:0f:b0:39:8a:68:29:f3:31:05:bd:51:75:
43:86:d0:e4:e1:cd:8b:19:7b:16:e2:fe:db:7a:43:
8c:bd:77:18:67:53:23:f0:40:bd:f8:93:f5:31:79:
8d:29:a5:37:6b:d1:65:94:0f:5d:ba:07:a1:ff:bb:
86:38:37:fe:8e:4a:99:f8:8e:ba:e1:dc:13:04:53:
cb:34:fc:80:4c:18:17:bf:f0:58:ce:1a:c9:89:d3:
8b:d3:3e:c4:65:99:5a:52:5c:74:30:d4:8f:32:db:
04:0d:44:24:2a:7c:7f:58:b5:58:06:53:ce:41:53:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:55:14:5F:DC:5B:CE:F1:C3:79:F4:BB:8C:A3:21:55:44:50:E0:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/c571a411-c09a-39a2-bbcf-c326d00332b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
X509v3 Authority Key Identifier:
keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
sbgp-ipAddrBlock: critical
IPv4:
72.10.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:e4:c5:00:4a:d1:6e:1f:5a:ed:8c:c9:ad:72:87:5a:0d:6a:
70:f9:68:aa:d9:80:8e:e5:ac:4b:2b:37:ea:c2:b8:54:cc:6f:
f8:e6:b8:cb:c9:ef:5e:cf:a0:8c:5e:66:6b:50:a4:f2:2f:ec:
64:78:c3:d5:01:84:08:fc:00:78:ae:1b:6a:02:d5:82:5e:d8:
a7:2e:0e:d7:e0:78:94:8e:84:76:bd:32:0a:60:75:c7:13:bd:
5e:03:dd:0b:7e:2c:a7:2f:c9:25:45:fa:45:3f:65:fa:77:d6:
1e:11:ca:e3:f0:80:92:f3:da:e5:42:f1:f0:0b:71:17:c1:dc:
a4:51:eb:8e:57:84:1e:57:a9:6c:a4:b0:50:64:27:14:71:92:
b0:61:ca:0a:b5:c1:b2:cf:23:e7:5c:e6:41:2e:9d:8a:4f:74:
d5:52:c4:2d:cc:1f:7f:63:5e:cb:6b:1d:c1:a5:5d:5e:67:08:
89:7f:a6:0f:48:79:40:ac:69:ce:15:b2:d8:1d:06:0b:a3:e3:
71:0a:c3:13:20:39:16:14:c4:99:0e:01:b4:34:9a:6d:5c:aa:
89:88:23:fa:a2:f6:41:c6:31:eb:2e:c4:1f:0f:5c:59:d7:5c:
ce:d4:c0:ed:08:43:4d:fe:00:07:a9:3d:cc:9f:bf:a8:a1:73:
66:81:6b:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H13i0PHoVDbqlAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5
MTY5MB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk
NGZlNzk0MTEtZDBhMi00MWEyLTk4MmMtNDMzZmRmY2QyMWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntSsIfr5PRQeBd8ymvCl4hCG5zg89i8bpPfH
YofQRBa6oYpS7DsBdsT8m/5Qt1QkurmErfJNKfvqI9ViS0HYr0jTrBlvRDHihM/F
JmWrN33ALu3uSLfCZ+b1zU0n7nwLAruOwn2IU9TagflJ65aB4MFr6Duxe1t1g/Jj
casrrhkqT4nP/nzQIXkPsDmKaCnzMQW9UXVDhtDk4c2LGXsW4v7bekOMvXcYZ1Mj
8EC9+JP1MXmNKaU3a9FllA9dugeh/7uGODf+jkqZ+I664dwTBFPLNPyATBgXv/BY
zhrJidOL0z7EZZlaUlx0MNSPMtsEDUQkKnx/WLVYBlPOQVPBIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFtVFF/cW87xw3n0u4yjIVVEUOA/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy
OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvYzU3MWE0MTEtYzA5YS0z
OWEyLWJiY2YtYzMyNmQwMDMzMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0
NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3
OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj
NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSAqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJrkxQBK0W4fWu2Mya1yh1oNanD5aKrZgI7lrEsrN+rCuFTMb/jmuMvJ
717PoIxeZmtQpPIv7GR4w9UBhAj8AHiuG2oC1YJe2KcuDtfgeJSOhHa9MgpgdccT
vV4D3Qt+LKcvySVF+kU/Zfp31h4RyuPwgJLz2uVC8fALcRfB3KRR645XhB5XqWyk
sFBkJxRxkrBhygq1wbLPI+dc5kEunYpPdNVSxC3MH39jXstrHcGlXV5nCIl/pg9I
eUCsac4VstgdBguj43EKwxMgORYUxJkOAbQ0mm1cqomII/qi9kHGMesuxB8PXFnX
XM7UwO0IQ03+AAepPcyfv6ihc2aBazM=
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:54:45 2026 by rpki-client