
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/efdc03e2-d7b9-3498-a943-2f1f0dbda2ad.roa
File: efdc03e2-d7b9-3498-a943-2f1f0dbda2ad.roa (raw, json)
Hash identifier: KbvmYnh6l7G+nbiLsv6FpWJQj0ub3qrqVZkNGNQm/pQ=
Subject key identifier: EB:71:BF:68:CF:50:2E:5E:ED:8F:9F:F1:C5:73:10:93:97:FB:58:06
Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial: 010D0C9F4328584EA788190EB6B42DB6EACD44E0
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/efdc03e2-d7b9-3498-a943-2f1f0dbda2ad.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 14230
IP address blocks: 207.70.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:19:0e:b6:b4:2d:b6:ea:cd:44:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=1bb6c054-e5d9-41ec-8e96-9a6fb038f036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0b:4f:d8:ba:64:9c:3b:e0:80:68:59:80:38:
90:46:8f:e0:ee:4d:b9:60:5b:b0:6b:99:70:79:e6:
74:a2:30:36:ae:c3:19:fd:b6:9e:92:a7:a7:bb:80:
2c:9b:05:00:be:3a:ea:eb:66:66:cd:54:75:d1:2d:
41:cc:72:8a:5a:1f:c2:c4:fa:3d:20:e0:82:53:9c:
78:5c:57:53:d8:48:55:cf:32:69:ba:2b:ae:b3:d5:
56:04:1c:26:0b:3d:79:c3:05:e2:66:a3:e0:ce:72:
45:f4:74:1c:46:16:c1:c3:52:d9:e7:9f:dc:aa:0b:
b5:df:bc:41:9d:45:d9:67:10:a1:fd:88:22:e5:d8:
11:9e:71:00:2d:19:b9:f5:b9:56:ae:9d:95:11:72:
c7:12:2f:93:8a:4b:75:4e:50:6f:21:aa:2d:68:d7:
3e:aa:1a:03:a2:80:04:e4:ec:69:61:21:1e:da:4c:
70:21:b4:ee:5a:e8:09:42:b7:f2:3a:9b:88:0d:a1:
37:cf:4b:15:b8:42:26:7a:2e:eb:50:03:a7:8b:3e:
ea:4b:b3:17:a7:7b:68:dd:03:cb:c4:2d:a5:82:24:
64:06:8d:4c:9f:46:e1:53:2c:5b:d0:d0:01:db:1f:
95:fe:6f:4c:6c:5b:ff:7f:e4:ce:d4:7c:96:68:2c:
b9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:71:BF:68:CF:50:2E:5E:ED:8F:9F:F1:C5:73:10:93:97:FB:58:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/efdc03e2-d7b9-3498-a943-2f1f0dbda2ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
X509v3 Authority Key Identifier:
keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
sbgp-ipAddrBlock: critical
IPv4:
207.70.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:92:15:9e:a9:ac:bd:46:8f:23:1f:6d:5f:1c:d0:42:5c:77:
9d:b6:0e:51:57:2d:54:70:23:3a:ae:06:55:10:4c:eb:cb:49:
de:e5:b5:65:28:43:3d:15:37:ee:ff:75:5b:ca:31:40:e6:d3:
c8:25:87:a5:8b:f1:78:00:cf:26:5b:83:38:87:8b:4f:fc:a6:
64:0b:cb:45:23:51:1c:d0:84:91:f8:16:a6:c0:de:47:f8:d0:
aa:4f:d8:b2:28:4c:cf:15:03:36:62:f4:09:d0:e7:40:65:42:
fb:4a:c3:de:95:9b:8e:e5:a7:ac:b9:58:af:c9:af:26:f5:cd:
f2:e3:0b:c5:47:d8:90:54:2a:5b:4b:99:26:6c:29:08:87:63:
25:cc:48:c3:d8:24:bf:1a:70:29:3c:c2:5b:87:94:50:32:43:
07:82:8f:78:7e:cf:a2:24:92:71:68:cb:93:e7:52:e0:bc:7a:
43:84:26:f8:b5:c6:f2:bb:a0:32:83:ce:3c:42:5d:88:c6:24:
0b:0a:b3:6b:57:98:05:05:9a:a0:cd:8f:0f:29:b2:15:49:ea:
72:f5:f9:98:6a:32:a4:0f:97:34:a8:d0:4a:36:94:cc:25:2f:
af:ba:d7:4c:ee:fe:29:c1:76:a0:46:4a:81:4e:8c:34:21:1a:
0d:88:85:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:39:51 2026 by rpki-client