
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca998017-6342-3bd8-b5af-2c3ba316b4a6.roa
File: ca998017-6342-3bd8-b5af-2c3ba316b4a6.roa (raw, json)
Hash identifier: lbPAIf/ROxw/ObZ02RyGvDq3vrIY4GCgTIVVvfr7fSI=
Subject key identifier: B4:B7:50:92:89:9E:7C:5B:15:E2:58:FD:A5:65:73:86:EA:66:52:C2
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584EBB11B781C418419B1AF8D280
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca998017-6342-3bd8-b5af-2c3ba316b4a6.roa
Signing time: Wed 05 Aug 2026 01:00:12 +0000
ROA not before: Wed 05 Aug 2026 01:00:12 +0000
ROA not after: Tue 03 Nov 2026 02:00:12 +0000
asID: 64267
IP address blocks: 168.91.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bb:11:b7:81:c4:18:41:9b:1a:f8:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Aug 5 01:00:12 2026 GMT
Not After : Nov 3 02:00:12 2026 GMT
Subject: CN=5b449bfd-b12b-4bb4-b77f-8c0a530374ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:66:fd:24:b9:25:c9:c2:33:9a:6b:17:8a:47:
d1:43:63:17:52:61:f2:cb:5d:7a:b3:48:8c:9c:1a:
82:8d:89:58:51:dc:0b:04:98:35:45:97:1e:fa:84:
a4:e2:9d:ad:dc:cf:ea:1e:13:22:c4:8a:f1:5e:c1:
15:c9:08:f2:56:3d:9c:65:ae:d1:bc:9e:d5:5a:c8:
10:14:4a:5d:dc:a3:90:87:68:79:48:ef:c1:b1:3c:
76:83:a3:ee:c6:74:1f:2a:f6:5d:d2:a9:0d:58:32:
0d:35:6f:6a:68:50:f6:a1:77:bf:69:a2:e4:6e:99:
45:64:b4:0c:31:1f:69:a2:33:45:7d:02:86:3f:7b:
44:c8:aa:2e:b3:bb:40:46:b2:0b:d3:0c:c8:f3:c9:
1c:c1:2b:bf:22:84:f9:51:b7:0a:96:47:92:07:31:
0a:94:5a:6f:9a:51:de:11:65:5f:5b:aa:3b:59:0f:
d3:c6:18:ba:8e:c5:ca:58:de:1c:2b:86:59:ba:74:
91:aa:75:da:d2:87:36:77:58:f1:65:27:73:a6:90:
45:60:96:e1:ea:eb:fd:d6:33:9f:3b:65:17:85:68:
64:3b:71:9f:a6:a1:fd:e5:3a:19:d8:3f:73:cc:ff:
62:0c:4d:5d:eb:16:1b:62:52:b0:55:7d:be:fc:7d:
4a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B7:50:92:89:9E:7C:5B:15:E2:58:FD:A5:65:73:86:EA:66:52:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca998017-6342-3bd8-b5af-2c3ba316b4a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
168.91.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:3a:23:56:3b:25:52:f1:69:54:65:c2:14:e6:1b:c8:1c:65:
56:bc:c2:49:4c:b1:db:66:e3:5b:72:ed:40:50:ad:10:e5:80:
b3:04:17:57:62:74:d4:08:0b:86:ae:2d:86:bd:2b:68:c1:ec:
11:1a:0e:5f:35:d6:91:69:eb:43:0b:9d:e9:35:d0:3e:17:52:
34:52:e2:3e:3f:dd:e2:1d:e8:71:d7:84:3f:e7:72:44:c3:cb:
76:c8:33:f5:02:ee:8f:1c:06:0d:00:ad:1f:f7:5e:ce:56:0c:
e3:b6:30:8f:2e:c5:3f:d8:2d:a0:48:45:31:a6:bd:07:48:28:
81:53:7c:fd:28:33:04:de:a8:93:2f:41:55:2f:6b:67:bf:ce:
32:2b:0d:94:22:5c:e4:08:5c:d7:82:e0:6e:b2:79:67:3e:b0:
ce:b7:f0:1a:ac:95:92:1a:c8:f3:e7:6f:32:04:be:48:c5:9d:
b7:5f:ba:85:e9:0a:87:a4:b2:fa:90:45:6f:bb:4f:3c:55:93:
2f:7e:92:cd:cd:b5:37:a9:7c:0e:70:3f:15:75:e5:76:b6:cf:
c3:1e:92:c6:a1:41:70:2c:6f:c4:c7:c9:13:ea:ef:c2:5c:8d:
72:b8:5e:91:5f:a1:52:0e:4f:19:3f:cd:0f:cb:a8:51:e6:9d:
24:a6:03:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:38:07 2026 by rpki-client