
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77de2370-7c6c-336b-bddc-641a20b2bba6.roa
File: 77de2370-7c6c-336b-bddc-641a20b2bba6.roa (raw, json)
Hash identifier: zb5iZcGvk0q7rjI3XN6uYAzyWTvY85rtWOtzs0C799M=
Subject key identifier: 18:CE:20:3C:5E:11:37:37:6E:BC:E7:4A:46:D4:A5:7E:B5:B9:DA:EA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F03A7DDC2D9CF999D2709D580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77de2370-7c6c-336b-bddc-641a20b2bba6.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 33659
IP address blocks: 24.0.228.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a7:dd:c2:d9:cf:99:9d:27:09:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=9fb70b4a-fe7b-43ae-9fa0-97f2eb033078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:f0:dc:92:de:f7:1e:2d:df:3c:e2:7b:41:
ee:e0:95:8c:7f:d0:76:0a:d0:3c:ac:66:b6:93:57:
2b:b5:e6:8f:95:53:54:05:c8:01:c1:fd:d5:57:f6:
b2:24:ca:b2:49:31:a8:96:dc:60:c6:7f:e7:f7:53:
32:6e:ac:a1:12:c9:b1:29:c5:c0:c6:b3:02:46:12:
8e:05:44:41:63:2d:58:02:ef:ab:ae:0d:53:f0:84:
9d:5e:f2:df:dd:36:ee:d6:85:1c:63:a2:ba:5b:d6:
ee:b0:ac:04:4b:0e:fc:ab:81:38:c2:23:52:ba:41:
f3:8b:49:fa:47:48:53:5b:72:f4:30:ce:4a:91:5c:
e6:80:12:b7:b2:2d:f1:dc:a5:df:23:e9:f5:9d:96:
16:c1:4f:e2:c3:2c:ba:4c:13:44:64:e2:ee:77:58:
45:4e:4b:d9:5a:3b:e9:d9:d1:8d:85:38:4e:ce:58:
c4:61:da:67:b0:60:02:df:da:9b:89:33:bc:bc:da:
51:cb:e3:7c:7f:3b:cb:ee:1e:0b:01:b8:b8:9c:75:
a8:a3:37:20:1a:87:cf:4c:96:86:1d:9e:9f:c0:dc:
e8:1c:f9:ad:46:b2:91:6c:8b:8c:b3:bd:c7:37:84:
11:58:01:ad:8a:77:5f:98:42:85:25:88:d2:3c:c2:
22:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CE:20:3C:5E:11:37:37:6E:BC:E7:4A:46:D4:A5:7E:B5:B9:DA:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77de2370-7c6c-336b-bddc-641a20b2bba6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.0.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:3a:43:15:6f:69:88:ed:d8:b9:b8:90:99:18:40:06:50:46:
c1:be:49:73:6a:35:e2:d3:87:9a:cf:a2:69:02:e5:2d:95:b7:
f1:85:d7:99:d9:c8:55:7b:03:14:ff:11:a5:e3:cb:18:fd:9c:
9d:74:3b:1e:37:0c:5d:9b:af:f7:78:7c:51:bc:5e:4c:a4:b6:
03:50:4a:b0:64:37:88:a1:56:d6:73:a6:e2:d9:54:af:f8:32:
44:be:4d:31:8b:29:87:ef:c6:69:0a:c1:ae:88:89:b1:76:e2:
ab:e8:14:68:01:d5:6a:3d:08:e1:6d:e7:61:0f:ac:ce:60:f8:
78:10:d4:dd:b5:56:53:e6:4d:0a:2b:72:d9:49:21:8b:61:0a:
41:e7:57:13:14:49:be:81:1f:6d:b1:ad:cb:85:09:ff:27:37:
a0:c7:58:48:22:28:ba:f6:2e:cc:0a:1b:13:ee:81:10:5c:be:
ef:14:f6:10:13:30:73:56:d1:fb:f5:27:08:79:71:93:5f:85:
5c:ad:9b:77:23:0d:ff:b0:22:cc:99:f6:7b:0e:5a:3f:b4:9a:
80:21:da:02:56:12:91:c5:2a:23:db:52:62:d4:fb:9e:d1:7e:
eb:04:76:46:98:f9:20:1f:f9:2c:a3:5f:1c:cb:c9:1d:29:64:
cc:6a:d6:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp93C2c+ZnScJ1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
OWZiNzBiNGEtZmU3Yi00M2FlLTlmYTAtOTdmMmViMDMzMDc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYvw3JLe9x4t3zzie0Hu4JWMf9B2CtA8rGa2
k1crteaPlVNUBcgBwf3VV/ayJMqySTGoltxgxn/n91MybqyhEsmxKcXAxrMCRhKO
BURBYy1YAu+rrg1T8ISdXvLf3Tbu1oUcY6K6W9busKwESw78q4E4wiNSukHzi0n6
R0hTW3L0MM5KkVzmgBK3si3x3KXfI+n1nZYWwU/iwyy6TBNEZOLud1hFTkvZWjvp
2dGNhThOzljEYdpnsGAC39qbiTO8vNpRy+N8fzvL7h4LAbi4nHWoozcgGofPTJaG
HZ6fwNzoHPmtRrKRbIuMs73HN4QRWAGtindfmEKFJYjSPMIiqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBjOIDxeETc3brznSkbUpX61udrqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzdkZTIzNzAtN2M2Yy0z
MzZiLWJkZGMtNjQxYTIwYjJiYmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGADkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKg6QxVvaYjt2Lm4kJkYQAZQRsG+SXNqNeLTh5rPomkC5S2Vt/GF15nZ
yFV7AxT/EaXjyxj9nJ10Ox43DF2br/d4fFG8XkyktgNQSrBkN4ihVtZzpuLZVK/4
MkS+TTGLKYfvxmkKwa6IibF24qvoFGgB1Wo9COFt52EPrM5g+HgQ1N21VlPmTQor
ctlJIYthCkHnVxMUSb6BH22xrcuFCf8nN6DHWEgiKLr2LswKGxPugRBcvu8U9hAT
MHNW0fv1Jwh5cZNfhVytm3cjDf+wIsyZ9nsOWj+0moAh2gJWEpHFKiPbUmLU+57R
fusEdkaY+SAf+SyjXxzLyR0pZMxq1uE=
-----END CERTIFICATE-----
Generated at Fri Sep 4 21:21:10 2026 by rpki-client