
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3104a71a-20f3-3522-8e24-dc86758b4ef9.roa
File: 3104a71a-20f3-3522-8e24-dc86758b4ef9.roa (raw, json)
Hash identifier: I0vyRCijB8TN07ZHJbS8nxbcUFoMrNChZq/R+oghhA0=
Subject key identifier: ED:14:67:DB:6D:4E:BB:D0:CF:D4:F1:96:DE:78:18:17:B2:2D:74:2C
Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial: 010D0C9F4328584CA061C9DFD7C82FE3ABC3B1E0
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3104a71a-20f3-3522-8e24-dc86758b4ef9.roa
Signing time: Sat 24 Jan 2026 02:00:31 +0000
ROA not before: Sat 24 Jan 2026 02:00:31 +0000
ROA not after: Fri 24 Apr 2026 01:00:31 +0000
asID: 1403
IP address blocks: 72.10.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a0:61:c9:df:d7:c8:2f:e3:ab:c3:b1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
Validity
Not Before: Jan 24 02:00:31 2026 GMT
Not After : Apr 24 01:00:31 2026 GMT
Subject: CN=5cbddcc7-abba-4ffc-ac5d-b1ace3bf332f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:77:d0:dc:72:88:4e:21:14:14:cf:70:11:
b0:98:27:fa:38:6d:51:e1:a6:71:b7:00:c4:ee:5d:
8a:e3:7d:49:f5:67:85:85:4a:49:72:96:6f:48:3d:
8f:bd:77:ad:07:21:8f:5f:31:e9:69:54:a4:b2:a6:
82:a6:27:8a:b1:86:37:90:3f:7b:eb:74:67:49:a5:
22:db:7f:2e:dd:9d:a3:c6:01:99:5e:92:04:81:11:
6d:d9:d6:bf:60:b3:1f:96:53:bf:49:6e:e4:e2:99:
c9:06:0f:aa:9e:1a:30:68:53:7d:4e:03:85:28:02:
c2:15:68:74:9c:8a:d3:1d:99:21:0a:01:76:30:57:
7b:a3:c1:fb:22:a2:97:6d:07:04:a8:ce:78:b6:08:
5f:d5:8e:52:66:1c:11:01:d4:46:22:aa:ff:cb:da:
95:1d:9a:37:3b:c9:04:20:30:e6:b7:79:f8:c7:25:
6c:92:0f:ab:3c:d6:b7:fa:63:ad:ba:94:ce:59:14:
16:e3:84:7b:63:f4:68:e6:6a:09:43:e3:c6:49:66:
02:6b:0c:dd:13:e9:6d:c9:14:69:79:d7:51:ca:33:
d2:88:00:df:ff:08:3d:6a:11:01:c9:15:6b:1e:66:
e4:81:93:51:90:17:c8:38:89:2e:f5:d3:31:e2:a1:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:14:67:DB:6D:4E:BB:D0:CF:D4:F1:96:DE:78:18:17:B2:2D:74:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3104a71a-20f3-3522-8e24-dc86758b4ef9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
X509v3 Authority Key Identifier:
keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
sbgp-ipAddrBlock: critical
IPv4:
72.10.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:fe:8e:6d:46:9f:2d:a4:b0:68:85:2a:dd:31:e4:ca:31:e9:
ba:f7:ce:56:9f:11:dd:3c:a9:dc:c1:56:57:93:db:2f:fe:6a:
15:0b:83:1f:64:d3:3a:9c:5a:59:9a:3d:b5:24:36:59:93:79:
15:22:c6:9f:60:b5:61:f3:a5:77:82:39:82:46:f3:ce:5f:29:
40:04:26:f7:86:6c:f6:41:90:71:a7:2c:d7:d3:02:90:ef:db:
19:49:8e:4c:33:e7:f4:f8:a3:e1:26:bc:c3:45:83:1d:73:ee:
d6:c4:c2:07:3b:5e:c0:41:15:f4:07:68:a2:fe:a6:42:71:03:
f1:8e:bb:12:54:b1:d4:f5:08:95:c4:05:59:fb:c0:49:74:18:
2c:28:16:5b:3d:cb:49:7c:8d:7e:a8:28:b4:db:a6:00:77:09:
12:8d:00:60:e0:ea:b3:88:ac:9e:80:29:30:45:33:d5:d7:dd:
39:10:b1:af:70:16:6e:06:7a:19:1e:f1:90:45:cc:d0:30:01:
2c:2f:5f:6f:52:be:2a:44:e3:84:b4:66:c0:b7:cf:85:ce:61:
2b:95:03:a9:e1:33:22:61:6c:20:f2:d5:42:16:ba:33:24:bd:
dc:80:84:21:ed:63:3c:f5:c7:1d:30:d2:00:28:52:78:e0:3c:
b0:3d:29:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 10:03:30 2026 by rpki-client