
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/ceb5516a-db40-3368-bfbe-4a775e3dd00d.roa
File: ceb5516a-db40-3368-bfbe-4a775e3dd00d.roa (raw, json)
Hash identifier: 2Q6bwOSNrc8lKIInGZsJYe4cxz2NofKAjSib+OLG6IA=
Subject key identifier: 7F:E2:54:6D:13:5C:71:DD:5B:95:D4:3C:01:35:AA:67:68:2D:4C:DB
Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial: 010D0C9F4328584D5CB4F541E335A5C5EE78D6B0
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/ceb5516a-db40-3368-bfbe-4a775e3dd00d.roa
Signing time: Wed 01 Apr 2026 13:00:30 +0000
ROA not before: Wed 01 Apr 2026 13:00:30 +0000
ROA not after: Tue 30 Jun 2026 13:00:30 +0000
asID: 394000
IP address blocks: 74.112.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5c:b4:f5:41:e3:35:a5:c5:ee:78:d6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Validity
Not Before: Apr 1 13:00:30 2026 GMT
Not After : Jun 30 13:00:30 2026 GMT
Subject: CN=3d52a89a-6ad0-4e1f-98e4-035b34fb0ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:58:d5:8a:3e:1c:d3:c6:90:ad:ea:3c:04:
87:f6:b2:70:2b:45:d0:32:06:31:6e:29:70:cc:58:
26:ef:8a:e3:77:94:d9:40:92:86:8d:0d:94:e3:fb:
01:a6:46:a2:f3:75:f0:01:0b:c9:ad:03:e9:d5:7a:
42:dc:d7:81:03:a9:8a:7a:87:49:40:5b:4c:d5:94:
f7:ba:73:4d:e8:0b:fb:63:59:b2:53:78:bf:3b:0c:
9c:ca:2f:b3:3b:ec:f8:d6:69:7f:74:6e:7b:d1:78:
de:40:8d:13:be:86:0d:f6:ed:cf:73:2a:cd:9d:54:
c1:f2:61:92:07:50:84:e0:c8:50:22:dd:fc:fc:03:
f1:85:43:fd:44:57:a9:69:32:ff:27:0b:57:a3:7c:
98:4c:5e:d2:4e:f8:01:72:98:b5:dc:b1:9c:00:fe:
d3:93:94:7a:a1:09:15:b1:87:30:60:3b:96:63:9d:
39:f1:0d:7e:df:93:13:27:98:0a:24:0e:66:af:08:
be:c9:f1:d8:d7:cc:29:27:57:e5:1a:e3:ca:3f:4c:
fa:85:b0:b7:91:cd:ce:84:92:84:38:23:cf:33:81:
41:41:9c:3e:cf:a7:d2:4c:3a:d0:09:7f:1f:6b:e2:
cd:a8:0a:c7:6e:4f:5c:79:a5:72:ad:cb:2c:fa:9b:
f9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E2:54:6D:13:5C:71:DD:5B:95:D4:3C:01:35:AA:67:68:2D:4C:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/ceb5516a-db40-3368-bfbe-4a775e3dd00d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
X509v3 Authority Key Identifier:
keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
sbgp-ipAddrBlock: critical
IPv4:
74.112.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:e8:c0:31:8e:ca:16:35:7f:68:d8:d6:44:67:7a:fc:9a:7d:
07:55:52:d9:b5:9b:69:49:72:29:77:b1:5e:34:ae:c3:ee:85:
df:04:9c:28:39:b3:c7:d0:ee:29:23:8d:f4:d2:75:54:2e:57:
f7:59:d5:f3:5a:3a:9e:87:79:20:51:05:9a:45:af:ce:87:c4:
57:e3:03:93:9a:f6:13:45:6d:5b:e6:e3:41:4c:5a:e2:c2:84:
61:84:d2:5b:4f:d7:31:8b:40:e8:b8:70:1b:4a:71:79:19:22:
3e:7f:b4:07:8f:a8:33:74:50:e3:12:97:df:83:24:b3:0f:57:
68:72:42:8f:7c:61:83:9d:80:2f:bb:d9:ba:13:5f:20:d7:f1:
b7:a3:af:81:9c:89:8d:94:80:5d:13:d0:7e:1a:4a:b6:d4:4d:
aa:f9:fa:68:42:87:d1:ad:71:c5:f9:1e:81:52:5e:55:8b:37:
83:ae:24:30:bb:c1:46:a3:58:f2:fa:a8:2e:a1:3d:45:01:a7:
21:04:3d:70:cc:eb:52:cf:18:8d:88:7e:bb:32:8f:37:38:4b:
8a:ed:bf:e0:3e:8c:65:fc:4f:9a:c7:c1:fe:2b:d0:cc:69:a6:
1b:bf:cc:6b:65:8a:6d:04:73:e0:c4:2a:79:a4:3a:00:31:85:
d0:b8:46:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:44:59 2026 by rpki-client