
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aaa9757d-8e2d-3c13-9576-98d3c54d3508.roa
File: aaa9757d-8e2d-3c13-9576-98d3c54d3508.roa (raw, json)
Hash identifier: zKobo49eRJT7nnpI1S+E4b1fMsguXgXXCuRLvLkK0bQ=
Subject key identifier: CF:F3:94:2E:CB:1A:6C:2C:20:98:57:D0:64:95:D1:D8:0E:32:FB:02
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584E5E7A02FB3E8051FE2BA29580
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aaa9757d-8e2d-3c13-9576-98d3c54d3508.roa
Signing time: Thu 02 Jul 2026 21:00:12 +0000
ROA not before: Thu 02 Jul 2026 21:00:12 +0000
ROA not after: Wed 30 Sep 2026 21:00:12 +0000
asID: 20001
IP address blocks: 167.160.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5e:7a:02:fb:3e:80:51:fe:2b:a2:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Jul 2 21:00:12 2026 GMT
Not After : Sep 30 21:00:12 2026 GMT
Subject: CN=8b102716-3ed8-4866-a7df-f124c7971c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e9:c8:47:22:b8:5f:db:9f:8d:64:f9:a1:0f:
83:dc:4f:71:92:d1:08:0a:52:18:c2:71:ab:02:e9:
fc:92:be:a6:1f:30:1b:e9:b7:fd:d1:02:9a:02:3d:
7c:d5:1a:e4:61:53:fe:9f:a7:73:48:82:a0:fd:74:
39:db:5b:86:75:74:03:ed:7d:5c:8b:c6:84:ea:8e:
59:dd:4f:e9:1c:70:92:ad:19:83:e5:44:9b:71:50:
80:66:ae:71:96:ba:ee:fd:3a:7e:75:a7:a4:e5:eb:
55:20:c7:c4:f0:93:19:55:2a:5f:3e:d1:04:48:1c:
fe:c0:02:1a:98:2f:ca:f1:67:d8:0a:d3:e6:7c:31:
a7:00:5b:87:a3:2b:08:e0:32:14:ff:74:8c:cb:83:
7a:29:a7:18:74:fb:df:79:e4:f1:fa:12:62:17:86:
6a:74:e3:4e:ec:bc:9e:34:25:b3:00:ed:2a:d3:60:
be:a4:14:cf:6f:8f:a3:07:7a:96:4b:a0:0b:f7:24:
e7:f9:03:fa:43:f2:a4:a0:3a:b1:73:b4:a4:2c:79:
56:6e:d3:32:d2:87:7a:0c:62:d2:df:da:5d:25:49:
f1:87:ff:4a:62:98:c2:04:94:a7:6e:e2:28:f3:29:
58:29:e3:cd:cb:93:2d:21:65:be:e2:8d:ea:3c:f0:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F3:94:2E:CB:1A:6C:2C:20:98:57:D0:64:95:D1:D8:0E:32:FB:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aaa9757d-8e2d-3c13-9576-98d3c54d3508.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
167.160.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:50:e7:26:4c:79:06:58:c2:36:9b:47:14:f9:c7:3e:6b:07:
d5:95:1d:70:4d:d1:e8:24:79:c8:e5:64:cf:1c:e7:c0:20:98:
0e:45:90:7b:0f:25:62:a3:fa:1a:6e:6c:8f:f2:04:cb:31:de:
90:cc:4f:22:98:a5:0f:17:3b:f0:ee:1e:32:3f:4a:7d:15:d4:
5b:78:30:07:39:2e:04:2d:8a:0f:38:e9:ca:5b:57:45:e0:0d:
24:3d:c8:02:d3:43:7a:41:a8:be:f5:be:a9:e0:05:8b:5e:d2:
27:28:60:aa:7f:40:95:c0:48:25:28:bb:45:a5:2b:01:77:14:
93:1c:68:21:0f:90:1d:7c:61:b9:64:2f:7f:aa:09:bc:6a:4d:
9a:86:ee:0c:4f:ac:e1:81:5c:52:50:7b:90:91:9e:f0:49:e9:
16:94:39:86:c7:a1:8c:be:90:8a:3d:8c:5c:a8:e8:0c:35:b4:
34:fb:d6:d7:b4:95:21:26:b5:b5:43:c4:bb:6a:4b:5b:8b:3e:
20:48:cd:18:21:54:e4:95:8d:b2:58:5f:1c:6d:34:76:70:1b:
79:eb:69:9c:0d:65:0f:8e:98:88:1a:a4:96:ed:10:f5:d1:6c:
d1:87:6b:6e:c1:d4:0a:f1:df:7a:79:81:3f:aa:6d:29:20:07:
43:af:8f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:23:12 2026 by rpki-client