
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/c1836498-6659-3b7d-bcab-d8155977037b.roa
File: c1836498-6659-3b7d-bcab-d8155977037b.roa (raw, json)
Hash identifier: vjx7d0lfFJQPornDcyIJO5j80G9PLdNmQnTYNm13eeQ=
Subject key identifier: D2:CD:AD:4D:F0:94:FA:92:7B:58:37:0D:77:07:5C:AD:47:E1:99:08
Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial: 010D0C9F4328584DD35B014B79839F3646D7C6A0
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/c1836498-6659-3b7d-bcab-d8155977037b.roa
Signing time: Thu 14 May 2026 01:00:25 +0000
ROA not before: Thu 14 May 2026 01:00:25 +0000
ROA not after: Wed 12 Aug 2026 01:00:25 +0000
asID: 10988
IP address blocks: 207.70.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d3:5b:01:4b:79:83:9f:36:46:d7:c6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Validity
Not Before: May 14 01:00:25 2026 GMT
Not After : Aug 12 01:00:25 2026 GMT
Subject: CN=6eb2ef05-e467-47e8-9ed7-032ad1daec55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f7:2b:bb:4d:08:c6:d8:ff:54:85:c9:ed:6a:
82:25:83:20:bd:81:f9:16:fb:ff:05:05:d0:c9:1d:
73:a4:d6:7b:33:00:ae:50:96:92:c3:92:48:f7:92:
ee:24:c3:84:50:32:9d:7c:66:1e:c6:6b:e3:06:5a:
ff:62:67:9a:db:82:29:9b:1c:5e:05:94:20:8d:ff:
1d:a5:4a:38:fc:03:5a:75:55:92:6e:4b:71:30:ea:
28:cb:7b:18:54:6d:b5:75:0f:89:10:3a:f8:f0:c0:
1e:60:f2:f6:06:ec:08:e5:43:05:a5:e4:1a:53:e3:
56:75:26:4b:b2:e0:92:5e:d6:0f:ab:ce:2d:c1:c7:
f5:25:32:fa:31:d6:ce:72:6c:d4:8b:ee:1a:ad:7c:
7a:d2:10:16:64:9b:f3:b1:d7:a5:2d:46:95:77:ef:
5f:3d:fc:8c:ef:cb:82:3a:f1:c1:b1:f6:62:d0:b5:
48:ad:b5:f2:07:6e:22:79:52:bd:d9:07:57:d9:c8:
b8:da:7d:81:54:eb:fc:f3:86:01:0c:9e:66:4d:95:
1c:32:44:54:a1:a0:d4:4c:d8:90:9e:7e:30:5c:c5:
5c:b6:59:75:37:8c:ca:01:73:4b:11:dd:a0:77:04:
0a:6a:25:0a:64:a0:c0:b5:a8:32:1d:9f:4d:10:13:
b9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CD:AD:4D:F0:94:FA:92:7B:58:37:0D:77:07:5C:AD:47:E1:99:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/c1836498-6659-3b7d-bcab-d8155977037b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
X509v3 Authority Key Identifier:
keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
sbgp-ipAddrBlock: critical
IPv4:
207.70.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:b8:b7:06:5e:b1:7d:84:56:d1:e8:c1:e6:55:4b:b0:b2:ea:
ca:0c:d1:5d:82:c7:75:d5:90:34:d3:3f:af:a2:6c:a2:f3:b9:
0d:9f:1d:3b:9d:f5:be:5e:f3:90:ef:af:11:d2:ef:78:9d:86:
77:25:5c:39:3a:71:39:70:69:96:1c:af:1d:48:fc:be:ee:77:
51:68:c4:f1:8c:e8:2a:f3:57:6e:7c:3a:02:54:4c:be:63:90:
1f:22:85:d4:0d:19:8f:41:82:7c:5a:79:79:45:3f:04:69:31:
5c:29:13:49:a9:c2:bc:4e:0c:1a:84:73:27:95:9b:fb:0a:70:
fc:52:14:17:7a:78:71:01:90:0f:04:99:c4:d7:99:ac:14:8f:
35:20:d4:61:a7:db:ea:72:3b:f3:e0:56:85:53:54:db:8d:83:
b7:20:39:83:f4:d4:1c:fe:7d:71:dd:77:45:ed:67:d7:3b:21:
b7:33:4d:b1:2f:e2:30:eb:15:4e:28:af:43:23:85:e9:5c:7e:
59:92:f9:d0:1d:b8:54:cb:71:bb:40:77:60:55:d9:fb:b8:da:
27:38:f9:7a:c2:b4:71:94:84:21:0f:f7:a7:40:56:34:65:be:
5e:d3:30:8e:8b:0e:df:35:34:90:d6:7f:cb:06:95:ec:4d:fa:
50:3a:67:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:26:03 2026 by rpki-client