
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3bdfb4c2-eb37-3bef-b666-c4ac4be5eb9a.roa
File: 3bdfb4c2-eb37-3bef-b666-c4ac4be5eb9a.roa (raw, json)
Hash identifier: CSflgxfzpaFuOIUKsAF4qOkUO+Lhut4vd98biamGo68=
Subject key identifier: CE:3D:EE:38:8D:74:D7:63:E2:9B:D0:2C:76:98:82:C4:60:59:34:63
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584F5A32D18C53E4AA640EBB4F00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3bdfb4c2-eb37-3bef-b666-c4ac4be5eb9a.roa
Signing time: Thu 01 Oct 2026 01:00:12 +0000
ROA not before: Thu 01 Oct 2026 01:00:12 +0000
ROA not after: Wed 30 Dec 2026 02:00:12 +0000
asID: 20001
IP address blocks: 66.146.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5a:32:d1:8c:53:e4:aa:64:0e:bb:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Oct 1 01:00:12 2026 GMT
Not After : Dec 30 02:00:12 2026 GMT
Subject: CN=d5f37e13-e58e-447c-a970-9ab6c78ade16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:54:95:52:9a:24:8f:cf:2b:ad:6d:01:64:
30:b3:85:c5:d6:8f:12:6a:ee:2a:62:c4:dd:4c:75:
47:4a:8c:3c:17:5e:23:a4:f5:bc:a4:71:57:93:48:
e9:35:66:ed:55:eb:49:8d:fc:2c:dc:2f:3f:26:fb:
fa:46:51:09:db:d8:a2:8b:16:57:34:96:58:67:85:
ff:04:d6:bb:0a:e2:f0:23:4a:15:92:94:14:6b:1d:
d9:78:3e:41:07:47:14:80:1c:ca:51:98:b5:41:7d:
30:9b:5e:0b:b4:a5:1a:fb:94:42:76:64:bb:4e:34:
e9:00:50:02:04:ad:8c:58:f6:99:93:c8:85:05:cd:
2d:77:59:05:ce:52:ee:8c:4d:d3:42:a6:f5:1b:23:
1b:c7:42:83:71:34:97:61:24:c3:af:a7:a3:c4:dd:
87:4b:31:8d:6c:2e:6b:02:c2:56:84:f4:84:06:9f:
4e:c9:27:cf:f2:9e:cf:54:8e:1d:6b:f3:a7:36:27:
6a:4a:b9:15:40:06:c4:c7:8c:27:f2:67:65:f3:c2:
9e:04:7e:22:32:40:26:ee:67:89:46:dd:c0:16:ca:
af:15:5b:e8:ca:4a:61:bc:d3:fb:b3:3b:81:68:e2:
aa:93:49:74:df:aa:1d:aa:1c:16:dc:c0:f8:e2:7c:
7d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3D:EE:38:8D:74:D7:63:E2:9B:D0:2C:76:98:82:C4:60:59:34:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3bdfb4c2-eb37-3bef-b666-c4ac4be5eb9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
66.146.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:f4:25:9a:a9:63:4c:c3:90:8d:2e:c5:53:57:1d:53:4d:a3:
06:7c:10:f6:b1:35:0a:29:ba:e3:b9:fe:a8:e2:21:5b:05:91:
2b:10:fc:fb:a4:29:98:07:e3:bb:69:89:0c:c5:ac:1f:b8:04:
b7:d3:5b:49:c7:63:92:2b:32:bd:22:ba:12:e5:e4:67:f3:0b:
72:e8:7f:34:59:08:d2:0a:a4:8e:ad:23:01:dd:89:8a:8a:4a:
e2:56:b0:7f:8a:90:72:69:12:db:13:f2:8a:04:34:a7:de:56:
77:15:58:eb:e8:f6:c6:fd:6c:1c:38:61:3b:d9:d7:bb:4d:a9:
b0:ae:06:5d:28:0d:82:ee:76:5a:ec:2c:42:a4:51:78:f6:89:
f9:63:9f:77:ce:d3:30:1c:26:58:5a:29:b8:ae:f9:8f:7e:3b:
66:b5:a7:18:c2:a9:c5:73:53:e0:93:80:d6:63:df:8d:5d:5d:
a7:a3:e5:30:25:58:b5:1f:f0:d3:be:63:41:80:90:a2:c1:f4:
9b:52:30:ea:32:84:e7:75:99:77:34:7e:01:5b:9d:1a:48:4f:
b0:34:dc:35:3c:56:7f:af:00:d5:c8:ca:54:72:ec:c2:b5:fa:
d7:a6:2f:16:0c:f5:d7:24:90:6d:24:bb:ca:4c:82:7f:25:ca:
62:84:de:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:38:44 2026 by rpki-client