
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20e89968-6c95-3283-9f1a-fdd7d088bdb0.roa
File: 20e89968-6c95-3283-9f1a-fdd7d088bdb0.roa (raw, json)
Hash identifier: 4BDuaA6DMS2yT4xqDITG8wsRhA8HC/4Xq6qgn107u54=
Subject key identifier: 29:42:3B:86:0A:76:4F:72:82:0F:4D:C4:9E:41:C3:3A:F0:44:B1:2D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4E4BF60F5A9AF942577C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20e89968-6c95-3283-9f1a-fdd7d088bdb0.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 107.4.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4e:4b:f6:0f:5a:9a:f9:42:57:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=26d52dc1-cc06-4300-9589-d80c9d5326c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:8f:cb:4a:bf:87:f0:b3:91:33:b6:37:23:
9d:14:fb:a3:d7:0b:e2:09:db:de:b0:0c:df:02:d8:
c1:3a:0e:a5:53:6d:c4:9b:1c:94:a3:9b:bf:fb:87:
48:16:82:13:af:2e:bd:ba:a7:16:6b:78:74:83:d1:
ee:e4:e1:e7:c3:91:25:07:0a:b1:07:e0:ba:4b:e0:
70:32:29:d5:c5:49:14:34:b5:77:de:39:d3:a7:cd:
d3:a2:03:f3:e8:1c:cd:99:64:60:da:a7:7d:aa:6a:
e0:12:b0:cd:f4:35:01:87:49:8f:92:49:e3:55:4e:
e5:27:f2:cc:31:27:3b:29:32:b3:25:48:f4:b5:8b:
fe:b2:5c:2a:a6:70:2e:68:97:e4:d0:ff:a9:fe:b0:
d8:ba:ae:bb:9a:06:a0:ef:d0:21:ce:45:49:35:14:
ef:cc:58:c3:36:f5:ec:b3:c7:f3:94:c1:1a:c8:cc:
13:e9:52:d2:e6:02:c2:72:c4:78:ad:c9:ea:d5:60:
56:a8:fb:52:8d:91:60:d0:32:c2:27:03:0f:d7:18:
6a:4d:28:56:e5:a3:44:a1:47:70:e4:35:45:d1:2f:
8f:5c:fb:89:12:bc:b9:cb:cb:43:ad:eb:bf:f3:dc:
34:40:96:b3:42:67:d0:70:9e:b4:3e:88:69:9a:d8:
3e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:42:3B:86:0A:76:4F:72:82:0F:4D:C4:9E:41:C3:3A:F0:44:B1:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20e89968-6c95-3283-9f1a-fdd7d088bdb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
107.4.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:38:69:39:0f:0a:08:5d:0d:e5:39:6a:a7:3c:5b:2a:e1:8e:
cc:43:ad:46:15:7e:34:b7:99:47:92:21:81:50:49:65:1c:82:
46:b9:83:b6:82:72:6e:34:de:06:65:1d:2d:93:bb:37:05:fb:
a0:7c:01:f9:af:92:b0:25:73:20:ca:75:47:70:b1:c5:5a:bb:
29:a1:a8:5b:19:63:58:95:c4:77:a5:f8:d2:cb:84:95:83:1e:
a3:86:07:4e:cc:5e:be:43:58:e2:f1:be:68:a4:ba:33:63:74:
1d:e4:1f:c0:13:a9:b7:bd:44:69:c6:26:19:03:ad:dc:b5:f5:
0a:64:41:1a:ba:ad:1c:35:5b:05:25:7d:0d:71:5f:a4:5d:62:
38:48:f0:50:89:59:70:38:e9:bf:ba:2e:5f:6b:7a:8a:fd:08:
a8:57:24:48:36:33:ec:96:a9:4d:28:29:76:0b:09:5e:4a:ba:
74:2c:27:62:64:42:4e:9d:e6:8c:91:5a:59:71:1e:00:ee:3c:
27:3f:bc:41:38:4c:2c:4e:17:8c:b1:af:35:35:cb:7f:f4:13:
35:98:b6:ea:67:38:bd:57:e0:49:5e:55:d6:0a:2a:0a:21:cd:
fa:ae:1b:e7:03:df:b5:3e:38:7e:28:29:00:b9:ca:54:c4:81:
bc:18:6b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:34:08 2026 by rpki-client