
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd90a2e8-7481-3baa-9a5d-6d57f32a649d.roa
File: cd90a2e8-7481-3baa-9a5d-6d57f32a649d.roa (raw, json)
Hash identifier: s/QtUZ9vnxr2GrFymnaOr0K9s3Gc7bRA45IWR7/zdOs=
Subject key identifier: 6B:E8:2D:15:ED:56:9C:DD:76:3B:D9:BF:AF:11:AB:CB:4A:47:B2:21
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584F0672483827BEE0DD41EBED00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd90a2e8-7481-3baa-9a5d-6d57f32a649d.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 64267
IP address blocks: 152.44.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:48:38:27:be:e0:dd:41:eb:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=f1b3feb8-579a-43d4-ac84-df79293a7708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:b6:06:7b:45:90:01:50:3d:06:1d:1e:22:
a0:b7:e1:54:15:35:bf:c9:e8:bf:99:cf:bf:db:18:
4d:a7:a7:35:7a:89:c5:34:c5:dc:2b:72:9b:76:dd:
d3:e2:da:19:06:b3:fc:d5:2f:5d:61:d6:5a:2a:2b:
02:f4:df:8c:3f:74:22:bd:12:4a:82:2d:b0:1b:96:
f0:2b:7e:19:d8:4c:47:d1:0b:97:e9:d8:ce:25:8b:
15:3d:b2:43:10:5d:cd:43:3c:7d:83:a7:a3:95:dc:
2a:b6:c8:22:69:b7:bc:ca:38:de:8c:ca:da:53:63:
65:8d:eb:15:6a:a6:a5:82:b8:58:4f:a7:9e:23:43:
14:8c:be:9d:57:ae:c8:be:1a:27:f7:99:63:49:17:
cd:53:49:72:6b:c3:71:0a:20:21:a1:cd:15:bf:11:
9c:2d:69:99:43:9a:38:74:c0:38:be:07:e3:e9:f6:
39:dd:95:a9:18:86:5c:bb:b6:cd:6e:68:7e:84:fb:
01:ce:2e:5d:86:36:46:72:ee:0f:d9:c5:3b:c3:d1:
9c:12:fa:d4:a3:fa:f7:20:b6:14:f5:e6:32:83:19:
4f:f6:d1:7f:9e:ed:88:fb:de:bf:dc:12:b1:42:a1:
2a:7c:b8:4c:75:0d:b1:ab:c7:43:66:c3:52:6e:10:
3b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E8:2D:15:ED:56:9C:DD:76:3B:D9:BF:AF:11:AB:CB:4A:47:B2:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd90a2e8-7481-3baa-9a5d-6d57f32a649d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
152.44.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:49:4b:2c:48:b7:57:5c:42:bd:00:99:2f:ba:07:dd:cc:c8:
49:81:3c:db:10:67:74:02:4c:e6:8e:7b:1b:fc:0f:1b:91:9d:
36:3e:06:b5:9d:40:5d:1b:58:19:6f:a5:70:f8:aa:68:a7:d3:
86:8c:26:d5:96:e3:29:a8:a3:67:42:bc:1e:c4:7b:9f:8f:d5:
14:5a:bd:5c:67:3d:4e:0c:47:76:9a:00:89:9a:29:a9:7d:41:
d5:9f:5c:fd:c9:52:80:7f:68:49:67:b5:78:95:26:48:26:48:
38:a4:0e:b8:42:21:8d:fc:10:ca:8d:ac:a1:a0:8e:df:ac:84:
e7:41:7e:3b:fd:39:84:aa:1c:b9:85:8e:de:ba:94:46:cf:be:
d5:78:1a:7d:d8:cb:b7:32:1a:12:2c:d6:7e:15:cb:12:6e:c8:
ab:d8:77:45:19:7c:cc:06:7a:a5:e1:db:fa:fb:ef:a7:9f:25:
72:dc:87:93:00:f2:49:c8:5a:61:a9:64:1c:ba:94:ff:09:f8:
85:4b:c2:ee:af:89:65:01:56:8c:96:64:e6:b6:89:6c:57:be:
34:cb:ac:b3:68:c5:44:f1:b9:b6:93:af:36:d2:4e:16:0f:f0:
60:ef:0f:b0:e2:68:cc:89:14:f2:35:4d:10:89:75:ea:92:7e:
65:89:de:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 18:31:47 2026 by rpki-client