
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc882d36-3d2e-3d2a-81cf-41240eb4a697.roa
File: cc882d36-3d2e-3d2a-81cf-41240eb4a697.roa (raw, json)
Hash identifier: +nu93OaY2wHjp764iFJStAa6AHX1vyPEaNwOH5AAzxg=
Subject key identifier: 15:B0:CB:A7:21:24:EA:07:AD:65:27:CD:38:22:29:BA:A4:78:F4:2A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED86325D68DA6EE477118EB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc882d36-3d2e-3d2a-81cf-41240eb4a697.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33490
IP address blocks: 24.21.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:63:25:d6:8d:a6:ee:47:71:18:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=5bf437e4-ea3d-40c7-a5dc-3566d01f6c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4d:92:73:01:ff:2b:b1:32:02:7d:57:34:c3:
a4:83:5c:08:ce:f6:50:1d:77:be:ec:10:d4:c4:40:
f6:e8:74:03:54:b3:1e:e1:96:cd:81:16:2b:b3:54:
3d:a4:81:1f:70:e7:b9:b4:9e:13:06:db:06:96:4a:
6d:96:be:6c:bd:85:91:08:76:3f:50:8a:02:44:65:
74:5e:96:7b:3a:9f:d2:13:e0:63:1f:64:1a:8e:d9:
0d:9e:8b:f2:51:a5:85:27:95:f6:2e:fd:8e:4b:2c:
19:c1:e1:dd:9f:29:ac:da:77:3e:9d:ff:fb:21:af:
cf:6d:39:1c:68:ce:9a:f0:2c:4e:6f:15:8b:4d:26:
59:87:79:58:08:90:87:08:8c:18:a2:37:f7:c6:c5:
8e:b8:ea:61:7d:6a:47:2d:18:f3:c1:1b:f4:8b:83:
9f:02:ed:de:4b:fb:2d:9d:88:1a:4b:42:14:71:08:
65:60:ef:5b:f0:17:72:ed:7f:59:8f:1e:cc:b5:21:
93:88:04:42:74:2e:6f:86:87:ec:ad:f2:f9:ec:ab:
c7:6d:be:71:f5:82:43:c0:39:34:2e:e2:ca:77:56:
13:60:e8:d7:fa:b3:1d:2d:5c:d6:b4:84:4e:52:c8:
67:e0:81:a1:e9:7d:44:63:1e:8f:de:b6:00:3c:62:
aa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B0:CB:A7:21:24:EA:07:AD:65:27:CD:38:22:29:BA:A4:78:F4:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc882d36-3d2e-3d2a-81cf-41240eb4a697.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.21.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:5a:28:90:c9:ef:d9:9f:df:37:5f:c5:5e:f4:ae:a3:0c:7c:
d5:d8:30:b3:64:f6:03:04:cd:01:c8:e5:91:80:d3:e4:1e:3e:
bf:aa:05:f2:8b:e8:24:cd:2b:83:5f:ca:e0:61:df:0f:45:62:
06:da:0e:d6:05:3d:9e:76:68:cd:a3:97:39:2b:de:e1:3f:80:
a7:b3:04:a6:8e:27:cf:0d:65:e9:bf:36:92:b3:82:04:c8:b5:
5d:b6:59:c9:97:88:94:b7:f7:51:75:ee:af:03:3c:51:45:11:
55:70:65:69:4f:94:c4:8e:1c:0c:e1:81:bf:a6:e7:fb:b6:77:
4f:9c:eb:33:86:34:88:7f:ba:5a:07:f3:bd:cb:84:79:80:2c:
78:9a:de:b8:eb:57:1a:74:1d:32:17:42:a4:3e:5c:0d:bc:51:
78:25:df:b4:eb:05:ca:0a:36:07:87:af:0b:ba:3d:a9:4a:7b:
dd:6d:fb:50:cc:09:cd:8e:49:1b:e3:0e:08:eb:9b:3c:6d:41:
58:aa:5c:7c:0b:f8:e0:74:bd:03:9f:9b:2d:0c:7d:31:ed:c3:
8b:58:bb:99:55:0f:1e:f0:74:09:e0:dd:35:7a:74:2d:27:07:
b1:8f:78:5a:dc:48:67:09:5b:1b:23:9d:9a:d8:4c:73:29:9b:
38:c5:7c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:04:28 2026 by rpki-client