
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9f2e3a7b-0c23-3881-97de-7de82bfe7572.roa
File: 9f2e3a7b-0c23-3881-97de-7de82bfe7572.roa (raw, json)
Hash identifier: XoMizPTkQqjunN8pzAUOEJKtO8QYMzs9I6PJIjbzUMo=
Subject key identifier: 24:42:21:E9:7A:4F:9B:D9:B7:0B:14:95:A5:2D:5A:2F:BF:A1:28:23
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F77835B4BF7C282298E85C9D0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9f2e3a7b-0c23-3881-97de-7de82bfe7572.roa
Signing time: Sun 11 Oct 2026 13:00:12 +0000
ROA not before: Sun 11 Oct 2026 13:00:12 +0000
ROA not after: Sat 09 Jan 2027 14:00:12 +0000
asID: 19905
IP address blocks: 24.129.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:77:83:5b:4b:f7:c2:82:29:8e:85:c9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Oct 11 13:00:12 2026 GMT
Not After : Jan 9 14:00:12 2027 GMT
Subject: CN=0231f5b7-5c3b-4c4d-bf00-8c5ed4de36d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:20:c3:49:51:9e:32:cf:b9:9b:c7:c7:06:af:
39:5b:6e:74:5f:62:2b:f6:93:c3:27:42:b1:8c:e6:
fd:aa:ed:71:ac:77:00:b6:8e:3e:17:ad:1d:fd:6e:
17:8c:01:4b:60:9e:15:21:bd:73:8e:16:9c:6a:64:
2c:57:90:c2:ab:9f:3a:69:c5:ad:b9:71:c4:d5:e7:
ca:92:9c:e4:ce:ef:fc:a6:99:59:6e:cc:5f:de:03:
17:be:0c:e9:e8:72:e7:fd:c1:59:4a:00:93:39:fa:
fc:b2:5a:3d:eb:c4:87:36:33:1c:55:5a:f9:97:97:
13:6a:48:b4:a6:e3:d2:d6:d4:42:c6:28:cc:cc:0e:
ea:a6:fa:21:98:1d:92:d4:ef:40:00:af:d7:a7:23:
97:73:5f:7f:5e:b2:d9:b2:82:95:55:b4:b9:f1:f2:
2c:be:25:97:e1:99:23:f7:80:af:a2:d2:10:26:8e:
f6:bb:b7:8f:7f:be:1b:4d:ab:ae:b9:77:4a:78:16:
ba:00:1d:df:b1:0e:94:d7:72:11:3f:09:a2:6b:76:
7b:c9:4e:79:27:72:4d:2e:32:d1:bd:00:af:f4:42:
ee:64:a5:45:bd:23:d5:26:fb:14:0b:53:ea:9c:15:
a5:d6:5f:02:02:cc:29:10:e5:de:22:2e:96:5b:8b:
e3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:42:21:E9:7A:4F:9B:D9:B7:0B:14:95:A5:2D:5A:2F:BF:A1:28:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9f2e3a7b-0c23-3881-97de-7de82bfe7572.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
24.129.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:cf:bb:ab:0f:51:af:c5:67:c7:2f:07:51:8f:2d:8e:f8:a4:
aa:40:3d:7b:ab:8d:b4:8f:5a:35:74:ca:17:a3:e3:77:2a:97:
cf:f2:59:b7:36:87:47:01:e5:31:4b:41:d5:56:1e:81:81:f2:
eb:2f:81:93:66:8e:d5:f0:c2:df:cc:8d:4e:f2:d3:98:a6:5e:
aa:b2:e2:31:c4:64:2f:bc:0a:2b:b1:3a:e2:9a:d6:86:ea:b6:
64:55:26:2f:fe:eb:c8:5c:09:a8:9e:94:52:e7:12:4a:ba:ae:
a0:89:00:4e:5e:f3:b2:c0:2a:3b:d0:4a:9f:11:1c:2d:7c:47:
9c:86:17:15:ab:78:6f:0f:a5:28:bc:01:2d:e6:f4:58:99:7a:
0c:dc:c4:e9:36:ff:11:6a:8d:a5:88:8e:62:5e:06:15:f4:9d:
75:e4:f5:d7:a2:0c:6e:31:58:54:95:ce:29:c2:24:30:7d:c1:
91:3f:00:6f:82:5f:a7:af:82:a5:0c:e7:7d:30:c2:03:82:2c:
85:42:74:a2:21:2f:d7:1b:42:c9:b9:7d:4f:80:ec:9d:f7:4a:
12:30:f6:80:ba:06:98:f3:a7:c8:53:90:86:39:a0:89:cd:03:
29:40:6b:4a:03:aa:fd:83:2b:49:25:f9:bf:42:28:f1:25:75:
97:e9:29:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:36:42 2026 by rpki-client