
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bf607bd4-c593-35b7-8e93-60f04488cbd3.roa
File: bf607bd4-c593-35b7-8e93-60f04488cbd3.roa (raw, json)
Hash identifier: 4KFFgP0sa3iXVIfZ1FkRV2TltXcDyIJZaFnBARcUQUU=
Subject key identifier: A5:E9:08:64:B0:01:F3:36:68:93:B6:76:46:D2:E6:3A:2D:73:18:EA
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584F506D5124B0C1E0C7B3D9D480
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bf607bd4-c593-35b7-8e93-60f04488cbd3.roa
Signing time: Sun 27 Sep 2026 13:00:12 +0000
ROA not before: Sun 27 Sep 2026 13:00:12 +0000
ROA not after: Sat 26 Dec 2026 14:00:12 +0000
asID: 64267
IP address blocks: 170.199.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:50:6d:51:24:b0:c1:e0:c7:b3:d9:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Sep 27 13:00:12 2026 GMT
Not After : Dec 26 14:00:12 2026 GMT
Subject: CN=d75e32c2-1997-4c5c-b8e1-c9d9f95682c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:29:b8:37:fb:19:ac:bf:62:5e:96:3d:58:92:
11:a0:05:bd:c1:aa:0e:fb:03:2d:b5:7b:e9:a6:e1:
be:ff:8b:7f:16:fe:49:43:87:92:5e:1c:bb:6a:31:
50:67:ac:30:bd:97:9c:bb:d4:9d:88:1c:c1:4a:77:
41:31:4c:97:01:13:9d:32:af:75:5a:85:a9:1d:39:
2b:7e:b2:4d:15:e7:d3:50:7b:f4:5a:b5:64:70:18:
71:6c:b9:ba:4d:1c:66:5f:48:85:28:56:18:7d:73:
30:88:56:16:50:df:1b:9f:5c:86:24:63:15:7b:2a:
df:5c:33:ab:e4:cd:55:41:11:b3:f9:29:ca:db:9f:
41:07:bf:f6:53:2b:d9:b9:58:1e:dd:01:9b:38:63:
7f:ae:ae:8b:18:80:9d:93:1a:e3:6b:61:28:ac:fc:
62:be:d2:ef:d3:80:8b:c3:3c:6f:60:36:ac:1d:27:
21:27:eb:67:5b:62:81:39:ea:dc:14:8e:a1:d4:3a:
9c:ad:40:37:9a:51:93:97:10:38:24:69:f1:d4:26:
6f:34:91:7c:c1:b5:58:12:b2:65:50:0c:7b:16:36:
f9:ac:ae:4a:39:a3:ee:83:94:d4:04:78:a9:5f:9d:
ba:17:fb:6c:e2:fa:28:11:f2:c9:a3:a2:df:b0:aa:
73:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E9:08:64:B0:01:F3:36:68:93:B6:76:46:D2:E6:3A:2D:73:18:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bf607bd4-c593-35b7-8e93-60f04488cbd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
170.199.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:c9:cf:1f:c2:d9:fa:c7:99:fd:11:05:5b:21:f8:0e:54:6f:
e2:c9:12:d5:88:d4:2b:90:67:4b:9b:4c:3b:8f:ac:41:9d:27:
d2:c3:7c:81:a3:1e:6e:4c:a0:34:b4:54:ad:81:18:85:8c:75:
bd:15:79:b3:04:0c:8d:89:d9:83:4b:9b:be:72:58:4a:1c:bc:
d7:b0:23:18:da:b3:a7:2a:c3:26:58:a9:23:02:f4:44:30:bd:
23:ef:5b:45:2f:ba:4e:83:c0:5a:12:cd:be:a6:53:2f:5d:85:
ed:cd:c0:f8:a0:de:ff:23:ed:fe:52:8d:66:15:eb:e2:e4:ad:
18:a9:92:b9:8c:b0:35:29:c8:62:be:29:7c:47:ba:d7:58:53:
0a:5f:ef:56:01:e2:50:84:ca:cc:83:07:b4:36:f2:37:7f:66:
c3:f2:36:bd:ef:64:80:b2:f8:38:2c:c0:a6:80:62:5e:03:96:
6d:ea:b4:66:6f:3c:b2:8a:e7:8d:ac:0c:1f:52:bc:cc:03:2e:
e2:34:f8:85:60:a4:01:c7:f0:b1:54:a4:02:fe:86:9d:df:c4:
f1:e2:c6:5c:e0:9b:dd:5c:2c:9a:8d:e1:d5:e7:b1:96:53:6b:
5f:f2:d8:9c:d0:0b:67:08:f1:c0:0f:6c:15:37:cb:fc:c0:21:
82:8a:e5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:59:40 2026 by rpki-client