
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d4adcc5-f17e-35a7-9897-13c0f25648a9.roa
File: 3d4adcc5-f17e-35a7-9897-13c0f25648a9.roa (raw, json)
Hash identifier: 1B3aF5e3nSJ6hvKyTupuuYM11tR/OXJxx6M7A+X2lEc=
Subject key identifier: CE:5D:83:7B:0A:41:B1:D5:B2:D7:22:02:7B:27:22:28:D4:12:6B:BA
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584E885A355C9114DAC6F1CC9340
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d4adcc5-f17e-35a7-9897-13c0f25648a9.roa
Signing time: Fri 17 Jul 2026 21:00:12 +0000
ROA not before: Fri 17 Jul 2026 21:00:12 +0000
ROA not after: Thu 15 Oct 2026 21:00:12 +0000
asID: 20001
IP address blocks: 68.234.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:88:5a:35:5c:91:14:da:c6:f1:cc:93:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Jul 17 21:00:12 2026 GMT
Not After : Oct 15 21:00:12 2026 GMT
Subject: CN=0a6e25f1-6260-46d8-9bdb-20023ae2d346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:da:44:bf:52:68:2e:06:41:c9:a6:02:f1:
8c:10:e2:05:99:12:23:88:83:56:53:6d:da:c1:87:
ff:d5:21:27:78:5d:67:d3:a6:cb:c4:c3:1a:ec:9e:
9f:15:d4:85:58:a7:5e:d3:cd:75:ca:90:c0:c6:58:
33:4b:c8:97:31:09:b0:14:a7:43:0d:fc:27:8c:59:
b0:7b:8e:d0:4d:9b:8b:a7:28:1b:2a:cf:a6:4e:5c:
97:13:b0:9f:73:d2:42:6f:36:6c:3d:2c:3f:f9:d6:
a8:6e:03:5c:31:f4:f5:b3:85:c6:ff:3f:20:c9:08:
5a:a7:01:bd:6b:b9:fd:83:e8:5c:a9:ed:4b:a3:e5:
9c:ab:a8:92:19:79:36:31:92:86:69:71:3e:6a:07:
bb:38:ff:88:f1:2a:88:50:b4:3f:42:72:b5:e9:72:
2c:ba:d1:c2:82:a2:4c:c1:d1:ce:a0:ee:cd:a6:7e:
eb:59:a6:ab:31:82:12:ab:34:6c:3a:55:a0:ca:ed:
bb:74:77:79:ee:8f:5f:72:e5:07:96:bf:0a:06:67:
b6:0d:83:7a:54:53:38:25:01:6f:26:8c:38:ea:b4:
c3:a9:63:4b:d5:dd:a2:e1:47:b6:2a:3b:24:f5:87:
65:dc:c1:f4:31:b2:ad:6e:17:46:1f:f2:d0:e9:a2:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5D:83:7B:0A:41:B1:D5:B2:D7:22:02:7B:27:22:28:D4:12:6B:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d4adcc5-f17e-35a7-9897-13c0f25648a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
68.234.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:31:07:69:c2:08:f1:08:ae:ca:11:31:d2:bf:2b:c4:8a:2c:
d2:a7:3c:2f:cc:20:c7:2e:cb:ad:fe:36:b2:3b:cf:32:cf:0d:
18:ea:2d:4e:64:5a:e4:21:2a:e6:71:98:a3:a6:56:f9:58:5a:
1e:f0:ba:84:9b:d2:db:e3:b7:b5:c5:7d:af:6b:ee:58:50:64:
b4:7c:3a:a2:08:dc:d6:f1:31:bb:62:8e:78:a0:28:37:6b:fc:
6a:96:55:4f:a1:31:f0:ff:32:f4:d5:bb:8e:bd:d3:98:8b:00:
c4:79:87:03:99:f4:8c:92:f3:40:eb:2a:82:85:71:09:fe:4c:
80:d1:39:53:dd:0b:59:70:d2:e8:3e:0a:61:46:56:e9:df:6a:
e5:4b:38:06:75:b6:75:d1:1e:ac:55:73:6a:61:6d:0a:c4:36:
b7:ac:be:0b:1b:a1:b6:e3:da:2a:45:66:d6:77:45:2a:ac:a5:
ff:8c:cc:45:90:58:d1:be:47:bb:7a:44:99:69:65:0b:d1:c0:
92:b8:a5:2f:d3:49:39:2f:29:30:46:2f:8a:f1:39:db:96:97:
0d:c3:8a:c0:71:24:60:63:e7:34:19:ef:a3:1a:14:49:d7:43:
c0:7a:06:81:1f:94:cb:27:b7:4b:37:db:ed:8d:9d:5d:4b:75:
8b:89:f1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:25:54 2026 by rpki-client