
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d77f3d95-67b7-3221-84a3-3930d2c9dc61.roa
File: d77f3d95-67b7-3221-84a3-3930d2c9dc61.roa (raw, json)
Hash identifier: fiK2gNoHI0cCJhJgS4hWtPfJepIB8uxnNKIETm4NaO0=
Subject key identifier: AF:0B:D0:FB:F7:2F:6E:65:26:EC:F9:AB:15:63:32:BF:10:EC:DA:EF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4E53FE3AD01D5501BE9680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d77f3d95-67b7-3221-84a3-3930d2c9dc61.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 24.128.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Oct 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4e:53:fe:3a:d0:1d:55:01:be:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=a87cd13a-a960-42b1-ba94-e9860c8f99e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3e:38:b0:97:2e:70:f1:17:7e:4b:4c:ab:df:
d2:4a:de:68:aa:f4:a6:ea:36:97:e9:f1:fb:9a:62:
25:7b:d4:df:66:94:2d:e9:cf:ce:82:e5:c1:a3:f2:
34:40:fd:ec:e5:e2:ee:79:7c:58:1d:25:b7:13:5d:
06:ca:58:4e:7f:ec:a7:b3:0d:e1:bf:65:8b:36:e5:
1c:c3:0e:c9:08:f9:c6:09:08:7e:6f:87:f2:7c:fb:
bf:89:8a:99:39:99:f5:ae:ba:c8:89:7c:5c:f3:f8:
66:47:49:f2:fb:6c:37:7c:cc:27:6f:a3:3e:88:d2:
1e:40:6c:a9:04:5e:b9:cf:44:2a:da:e1:56:f8:78:
23:03:e1:e4:f6:57:88:5d:60:3a:8d:96:00:a9:ca:
a6:6f:ee:72:be:2e:8a:73:b5:51:be:a2:8e:cc:e6:
02:bd:df:9f:1b:24:d4:2e:10:50:23:ab:a7:d1:02:
95:b1:d0:2d:14:04:6c:ae:48:96:b0:59:24:a5:12:
a0:ed:34:a1:63:c6:e0:21:48:83:27:02:82:4b:8a:
48:7c:ad:8e:4c:26:e9:ff:1a:60:28:7b:6a:8e:13:
73:37:61:94:90:98:30:e7:b7:35:92:b8:21:dd:9d:
f2:cb:66:3f:97:d3:f2:65:1d:2e:2c:00:32:8a:54:
e9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0B:D0:FB:F7:2F:6E:65:26:EC:F9:AB:15:63:32:BF:10:EC:DA:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d77f3d95-67b7-3221-84a3-3930d2c9dc61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.128.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cd:68:47:be:57:2a:c5:76:cf:d4:41:56:60:f1:c7:af:91:90:
32:8b:4e:b4:44:6f:09:eb:02:9c:ba:e1:ef:54:a6:52:9c:ed:
f1:4c:60:85:fd:26:02:fd:d0:10:fd:a4:3e:be:03:0e:2c:a2:
2b:24:9e:84:7d:15:66:95:8c:51:18:1f:31:79:52:99:23:43:
a6:e3:53:79:78:48:60:e1:6e:2e:73:2d:14:3c:18:1d:8b:92:
6e:fc:83:c2:dc:a4:17:5b:0b:e7:a1:18:9d:b2:5d:12:35:0a:
59:88:67:2a:92:61:3d:c4:82:96:d8:8d:7c:7e:7c:59:9d:3c:
f5:4a:32:13:20:e8:23:85:7b:48:d2:69:ca:ac:cc:90:b0:20:
0f:1a:30:71:82:89:a1:0a:d8:67:9e:a1:84:f3:e3:de:99:6e:
7a:d6:90:52:4d:36:96:c0:81:0d:e0:23:1e:d0:44:49:3c:28:
34:72:e9:cd:32:cc:28:10:2a:52:aa:0e:72:7e:25:86:fa:ee:
1b:82:ab:ff:09:0a:0a:8a:d3:d1:06:28:b2:70:98:3a:22:55:
65:49:4c:19:f9:af:8c:a9:85:22:3a:5d:53:1c:a4:34:63:14:
54:d6:2a:b8:40:d2:8b:e8:2d:60:20:a0:2f:a7:5b:ce:3e:da:
9a:75:31:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:07:18 2026 by rpki-client