
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9906885f-3a22-3298-b839-55e83a6fc5f5.roa
File: 9906885f-3a22-3298-b839-55e83a6fc5f5.roa (raw, json)
Hash identifier: QDH3YftmhZ+TVgYBJLfMTMBaWfnjRbpir13UvfU8Awc=
Subject key identifier: CF:58:0A:F3:0F:ED:D3:AE:90:E6:4A:8C:34:10:B9:33:43:E6:49:7F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED861F1A0CB43F623F42ED8C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9906885f-3a22-3298-b839-55e83a6fc5f5.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33490
IP address blocks: 24.20.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:61:f1:a0:cb:43:f6:23:f4:2e:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=32f2d674-0467-4261-93f1-168e6d98ea96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:36:aa:58:b3:54:1d:c2:01:02:61:38:83:
90:a1:4e:74:78:4d:6e:7f:1a:8d:ac:82:cd:9e:c9:
ab:94:00:6a:bc:df:30:6c:a8:a6:2e:24:3b:2f:e2:
c5:e7:19:07:de:b9:39:8a:a1:1c:1e:40:01:05:7d:
94:a5:8e:73:b9:0a:1e:90:d8:10:8a:73:59:69:92:
94:3c:48:38:81:dd:cd:fc:5f:08:2e:93:89:fa:9c:
5a:f9:e2:a9:b2:d6:bd:36:cd:78:58:4d:ea:63:80:
ec:b5:c9:5b:d9:1d:c4:5e:6a:04:98:d7:28:b2:1f:
36:d4:58:0e:1a:ef:54:3e:ee:75:77:b2:ea:fd:78:
f9:c7:33:0c:69:a1:83:8c:a6:3e:c8:d9:ba:f6:1a:
68:3b:c8:91:58:3e:fc:c3:99:0f:1c:ef:68:a2:87:
1b:60:6f:3f:12:2d:1e:87:44:9b:be:19:45:db:38:
58:a9:f1:17:d5:b5:60:68:cb:02:d1:d4:df:43:98:
d7:07:8f:ed:e4:15:3b:84:c3:3f:80:b2:52:1e:9f:
0a:93:01:be:f0:e8:58:0e:e1:18:a8:0d:79:c6:f2:
e5:6a:6b:61:fb:64:15:2f:19:45:2e:a7:7c:8d:09:
01:ff:5e:34:a2:5a:29:f0:88:66:ca:99:bf:e4:c8:
a7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:58:0A:F3:0F:ED:D3:AE:90:E6:4A:8C:34:10:B9:33:43:E6:49:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9906885f-3a22-3298-b839-55e83a6fc5f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.20.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:7b:2c:c5:1e:9d:c1:29:23:0f:b9:66:fc:24:6f:51:2d:a5:
36:42:89:22:f6:c2:6f:40:92:77:d6:ea:44:70:0e:cf:29:eb:
a5:66:a7:19:b8:76:d6:a4:05:44:f0:68:a8:2f:ac:58:fe:bc:
2d:aa:d1:23:fb:74:54:78:a9:ab:8f:af:94:e5:01:3c:01:bf:
03:ed:a7:d6:61:f4:df:87:a0:e9:1b:af:84:75:8a:56:67:99:
a4:f2:4f:1d:d3:95:a0:59:25:d8:7f:8b:06:88:5f:55:15:50:
84:1b:71:fe:43:9d:af:ae:e3:1c:90:6a:d7:ff:57:6f:8c:22:
53:95:40:0d:b2:2e:8e:0a:b9:ad:74:7a:82:b5:b0:4b:92:1b:
8f:6c:11:ab:56:09:ac:0b:36:33:50:eb:99:3c:04:5f:57:fc:
6f:c8:12:a0:da:c8:e4:d1:68:54:0c:7c:0e:2b:2f:cf:c0:8f:
c3:02:85:bd:ef:c3:12:cd:6a:79:15:60:0f:b2:c2:88:da:1c:
1d:60:6b:e3:d3:2f:02:5c:43:64:be:92:1b:e1:de:8a:9b:9d:
a3:75:f4:d7:ca:80:be:95:01:3d:ec:fa:f9:0f:26:72:ea:7b:
70:66:8c:a2:cd:f3:de:a2:25:bb:e5:ca:0b:ab:89:3f:c7:29:
ef:48:56:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:18:08 2026 by rpki-client