
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/28f0a850-7241-3f8e-a77d-403c42300c77.roa
File: 28f0a850-7241-3f8e-a77d-403c42300c77.roa (raw, json)
Hash identifier: vBN/zXUFi9E1uEZzYbj/NkbTiHPnrSWYRiarWjjOiuc=
Subject key identifier: 1F:2C:F6:1F:11:B5:73:EB:D7:D3:53:A9:A1:D5:C5:14:82:96:4D:BD
Certificate issuer: /CN=b198f5fa-f621-42d4-a6d0-93f02eea7bb4
Certificate serial: 010D0C9F4328584D4D5A511F2A6ABF3CBBCC03C0
Authority key identifier: 12:55:4B:9D:8B:59:AC:E6:D8:55:1E:50:57:B0:DC:2E:8A:35:54:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/28f0a850-7241-3f8e-a77d-403c42300c77.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 16509
IP address blocks: 72.13.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Apr 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:51:1f:2a:6a:bf:3c:bb:cc:03:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b198f5fa-f621-42d4-a6d0-93f02eea7bb4
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=c17e4e63-cf09-4ee4-a6a9-1d479281f940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9d:1f:94:a8:ca:cd:71:86:4f:ef:3e:20:49:
1e:be:1c:bb:13:a3:c0:4d:a5:02:2b:68:6e:5f:0a:
e0:e7:b2:af:6f:5e:85:5a:8b:f0:07:08:39:aa:d0:
d0:c0:e8:99:99:e8:b0:c8:0d:dc:a8:e5:b7:16:8f:
e3:40:1a:48:af:eb:dc:14:fa:b8:7a:fd:96:b4:21:
98:89:3f:e7:74:b7:12:8b:c5:19:ae:50:b8:a5:b0:
f2:1b:1e:65:89:64:ce:f4:d1:c0:ba:a4:67:f3:1a:
07:03:ae:e6:04:cd:16:32:89:6d:c6:d0:ad:8e:bb:
e2:f9:ac:a7:ec:df:fa:ee:0b:61:b9:9b:dd:f1:76:
9f:fa:ed:c2:86:6f:f1:14:a0:99:8f:27:db:ed:87:
49:86:71:22:26:99:98:ed:85:26:a1:05:00:ec:73:
c5:40:3e:54:a1:f7:17:c5:92:18:16:a3:4d:9e:fd:
75:a1:b3:1e:02:d6:b4:df:4a:a1:06:3b:55:de:99:
2b:18:2c:7b:43:ea:26:57:45:5a:73:66:65:8f:80:
12:c8:00:f7:c5:4e:7f:93:64:da:45:b1:73:dc:38:
ba:ec:28:7c:b1:de:b3:ae:c7:cd:ef:68:02:e0:b8:
67:a4:bb:cc:4a:6b:19:15:38:22:0d:f5:ca:6b:15:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2C:F6:1F:11:B5:73:EB:D7:D3:53:A9:A1:D5:C5:14:82:96:4D:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/28f0a850-7241-3f8e-a77d-403c42300c77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.crl
X509v3 Authority Key Identifier:
keyid:12:55:4B:9D:8B:59:AC:E6:D8:55:1E:50:57:B0:DC:2E:8A:35:54:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.13.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:86:b6:53:58:80:7a:ea:48:4e:3a:25:1d:d1:10:7b:43:c7:
fa:63:1d:c5:60:84:49:a5:ed:b0:c0:4f:f5:81:37:15:8c:25:
61:2a:a2:d7:91:24:ca:c7:d7:c3:42:90:34:1e:82:e4:06:59:
a2:f8:cf:b4:66:07:0c:92:44:8d:59:9c:69:2c:7c:73:2b:c9:
a8:1d:4e:77:33:10:9b:20:41:03:ef:8f:70:2e:79:eb:e8:84:
1b:03:f4:05:06:f1:8a:7d:62:87:92:1a:33:5e:cd:95:e0:7e:
74:f5:b8:a8:65:aa:4f:00:7d:a2:bc:65:ab:dd:64:20:23:ab:
92:cb:77:32:9e:f5:7f:99:f9:89:03:76:c5:39:fc:03:c5:96:
ba:c0:03:e2:2d:6f:19:73:f1:47:9c:3e:ce:46:78:0b:00:af:
a9:2d:6a:cf:a5:8b:0e:31:39:5b:d0:ba:97:29:38:a7:e6:88:
7f:dd:96:be:de:b2:da:3a:d2:ca:5b:88:87:a2:04:9a:9c:b3:
b9:83:93:4f:78:b9:0b:6e:15:e2:8f:9f:67:3d:74:8e:1e:0c:
c1:7f:fa:72:76:7d:d8:ad:17:ad:31:99:39:4b:16:ac:00:69:
6b:7f:9b:84:da:d7:cb:7f:47:41:b5:2b:fb:46:bd:02:8b:f7:
0a:a2:fe:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 14:08:16 2026 by rpki-client