
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f8a5e91-b741-31e7-974e-fd815d5d0d4a.roa
File: 9f8a5e91-b741-31e7-974e-fd815d5d0d4a.roa (raw, json)
Hash identifier: fE2EK83Lamo235DHQr2fkmBZifrTdhIoCXO3zLdH5u4=
Subject key identifier: D0:36:94:52:55:84:E3:60:C7:58:35:24:4B:F5:01:A0:2C:28:7F:8B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F03A8327BC307DEB4F663FD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f8a5e91-b741-31e7-974e-fd815d5d0d4a.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 33659
IP address blocks: 24.0.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a8:32:7b:c3:07:de:b4:f6:63:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=d75ccece-89ee-476a-90aa-c2e2419dceee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:78:cd:87:d9:51:64:0b:39:ba:54:0c:fe:69:
44:52:ce:30:07:c9:d0:24:69:9f:a1:d0:82:84:9f:
3c:0c:5e:ca:2c:4a:40:cd:bc:8a:e8:39:e7:42:0d:
e4:38:11:36:fe:ec:19:ed:36:88:6e:82:2b:47:30:
7a:98:8b:d9:eb:9c:94:bc:f2:54:18:16:dd:0f:35:
ba:4e:f0:f5:72:02:c3:75:a2:86:55:99:1b:84:9e:
36:1e:1a:dc:61:0d:00:06:ad:15:f8:c1:86:50:de:
f7:3f:08:0b:9f:09:6b:3a:b3:3d:db:bc:da:7c:72:
94:ef:6b:e4:9e:52:f1:07:9f:ca:30:95:f1:a8:da:
5d:e0:3a:c6:56:9a:c3:93:a6:31:10:9e:de:9f:60:
1d:30:0e:42:6a:00:99:a5:6a:77:dc:e7:17:ca:03:
d0:1c:45:52:eb:cf:10:e1:44:e8:0f:c9:ae:44:81:
f8:f8:9d:23:d7:d4:05:4f:4c:c8:d4:2f:bc:a8:dd:
32:56:d6:b9:f6:4b:31:36:aa:0c:af:3b:a8:8d:50:
1f:f2:25:ef:e0:07:44:2d:d4:64:04:d8:5d:42:c0:
10:99:5c:76:8a:45:d7:3a:5c:7d:83:e2:da:39:d7:
61:ae:9b:3b:1a:cc:10:d5:71:97:4d:6a:60:c0:4f:
6b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:36:94:52:55:84:E3:60:C7:58:35:24:4B:F5:01:A0:2C:28:7F:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f8a5e91-b741-31e7-974e-fd815d5d0d4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.0.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:4b:ad:b9:9c:1b:20:21:3c:d3:55:9f:e1:c0:ea:ba:3b:2c:
25:fe:7e:d0:30:8c:f8:34:86:94:8b:d5:a5:7d:c8:0d:56:b3:
dd:bc:d6:f2:b5:2d:12:30:1e:ff:86:de:30:bf:a2:e2:56:f0:
7a:fd:58:c9:ac:67:cd:a5:4b:61:f3:77:bc:b6:dc:87:48:17:
02:e1:df:a7:72:c8:f0:65:38:e7:e5:24:a5:16:32:b5:54:b8:
19:ac:26:bc:45:3f:32:d8:00:d6:5e:ec:1d:76:03:38:ab:0e:
f9:8a:ea:c9:b4:e6:e3:fd:13:c0:c6:fb:76:31:f8:b5:03:98:
02:28:d0:a2:e3:d9:5d:a0:0a:9c:86:10:5c:de:c4:d8:6c:45:
87:c9:55:7e:bb:6a:54:83:fc:17:a6:3c:01:cf:50:49:af:0c:
c5:64:49:1f:56:17:c2:8e:35:22:ce:8a:37:b9:81:1c:61:15:
b5:aa:bd:e6:6b:0b:c1:11:9a:38:b8:00:3b:c0:ed:7a:f1:ad:
11:b7:f8:e5:d6:4e:3a:be:79:57:0e:a4:93:aa:01:b8:34:0b:
99:f1:18:07:3b:6b:69:97:ea:1c:c6:d4:17:1e:47:37:27:d1:
95:99:7f:b7:97:39:73:3d:b3:0d:ba:df:97:3b:e3:fe:43:14:
85:42:17:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:36:43 2026 by rpki-client