
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/28a6c6d2-d528-305c-a5ba-273808d1dbe4.roa
File: 28a6c6d2-d528-305c-a5ba-273808d1dbe4.roa (raw, json)
Hash identifier: zXWCcr7eiaKtgw5rIVzVq8OSBES/OjY9vr92OFEjQRk=
Subject key identifier: 6B:7F:B0:CB:C0:E3:06:1A:C0:A4:77:79:03:5F:DD:A8:BD:80:66:B2
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F4328584F6C5830F8EB7E26FB9D8C6C40
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/28a6c6d2-d528-305c-a5ba-273808d1dbe4.roa
Signing time: Wed 07 Oct 2026 13:00:13 +0000
ROA not before: Wed 07 Oct 2026 13:00:13 +0000
ROA not after: Tue 05 Jan 2027 14:00:13 +0000
asID: 11761
IP address blocks: 198.44.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6c:58:30:f8:eb:7e:26:fb:9d:8c:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Oct 7 13:00:13 2026 GMT
Not After : Jan 5 14:00:13 2027 GMT
Subject: CN=a2c7a0ef-e762-41f8-b4dd-76f03766cce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f6:7b:29:0c:63:db:ad:58:b0:02:60:e2:4a:
06:8a:17:6e:13:b6:19:1a:58:ed:93:0b:72:42:21:
57:66:5e:05:cb:7e:3b:47:ee:dc:c3:71:5d:ef:12:
82:6f:fe:df:64:34:a6:db:f7:02:c1:8e:fc:e5:35:
ea:4b:6e:e3:78:ec:56:cd:8e:9b:1a:4e:50:f2:b9:
35:f0:16:b2:2d:b1:1b:23:09:79:cf:30:43:9c:ea:
10:47:1f:38:f3:83:a7:cf:33:eb:70:61:86:b8:b1:
b7:de:b6:68:65:3f:d3:61:91:af:71:e6:47:89:2b:
63:ae:6a:63:e5:f1:71:bc:64:98:32:cf:17:f2:97:
54:28:6c:0b:01:01:76:1c:6d:66:97:8d:76:04:7b:
4e:80:e5:95:bb:c3:cf:f2:a1:fd:7d:0f:78:83:d0:
ed:be:96:41:64:3d:76:09:c3:c2:cb:32:d1:b7:23:
2b:0b:bc:15:e9:a5:3e:b0:f8:6c:3f:81:da:d9:8a:
32:bc:9c:04:28:87:44:69:0b:12:c2:c2:40:a2:e3:
be:3f:ee:39:51:83:cb:fc:28:4e:ce:22:cf:b3:bb:
92:91:f1:d7:2d:6e:24:52:59:2c:60:33:96:a3:02:
48:58:e8:18:4d:05:69:6d:7f:47:e1:03:ce:33:c6:
d9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7F:B0:CB:C0:E3:06:1A:C0:A4:77:79:03:5F:DD:A8:BD:80:66:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/28a6c6d2-d528-305c-a5ba-273808d1dbe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
198.44.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:d9:13:0c:9f:15:7c:0e:dc:2c:42:a0:4c:84:42:ec:5a:ac:
2b:31:5e:64:d5:83:5d:6f:be:06:5b:34:20:60:d0:06:47:fa:
bd:86:cc:c7:36:bf:2f:21:e6:4f:b9:01:b1:7a:aa:32:75:90:
c4:5f:17:74:9c:08:90:ad:ff:08:e8:11:20:63:af:14:56:45:
a5:db:c7:c9:0b:86:43:c3:b6:e9:72:ab:14:a2:99:ef:bb:ae:
50:45:ec:71:8b:e4:b8:23:04:8d:5b:12:1b:75:e7:62:3f:ad:
2c:d9:c5:e6:5d:9b:4e:b0:28:04:d3:7e:2e:17:93:b0:a5:ac:
6f:b3:fc:e2:2d:30:32:1c:ca:d3:1f:2e:eb:64:c4:4e:e6:77:
6a:d0:34:4c:f8:1a:f6:10:0c:be:68:5c:7b:d9:63:08:77:15:
11:4b:ae:23:90:d9:14:3f:9e:38:e1:56:58:58:9d:74:5e:96:
25:86:93:ba:a1:d0:ed:39:4c:f6:43:87:75:42:9f:fc:67:13:
bb:d4:ee:08:7a:d6:9c:67:04:6c:58:8a:e0:3a:34:c7:e4:d7:
60:76:f0:6b:10:e1:22:70:b8:00:e9:71:c8:6f:9a:90:10:76:
ed:c9:8d:c9:63:fb:b4:bc:46:b1:eb:81:d6:b5:19:e6:ea:c4:
c8:0b:3a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:32:54 2026 by rpki-client