
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f87dfadc-1647-39b7-9e3d-42de942bd5cc.roa
File: f87dfadc-1647-39b7-9e3d-42de942bd5cc.roa (raw, json)
Hash identifier: Jgv1AP9XKkiNmlh+xdUsLJtQ/elTzMY8Bs6yEemufI8=
Subject key identifier: 2C:83:45:A0:3E:5A:14:7E:2D:13:FF:33:1A:49:8D:65:68:DE:3F:D0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF6F59380B003BDBEE16600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f87dfadc-1647-39b7-9e3d-42de942bd5cc.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33660
IP address blocks: 24.11.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f6:f5:93:80:b0:03:bd:be:e1:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=3a420c60-c2c8-4d7c-b291-e72380d43b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:62:15:b4:60:09:e3:6b:70:14:56:5d:40:4a:
fb:72:dc:54:de:f7:14:a3:55:97:66:80:50:b7:33:
6c:35:a2:ca:57:02:66:ef:f9:a2:c2:10:6b:aa:2f:
57:ee:1c:22:ae:eb:55:ba:f9:b4:f1:69:e0:e9:1d:
f8:e8:07:6b:72:7c:c0:94:bf:3d:af:3a:19:44:1d:
b8:27:a5:d0:b2:09:9b:95:09:dc:b7:fa:85:a1:68:
3e:54:dd:36:11:ea:2f:93:a0:c5:2a:13:59:73:9d:
1a:19:e7:a0:a3:82:c4:a4:90:a8:60:f9:de:0b:b7:
d4:ad:55:e5:21:c3:97:03:9c:23:48:33:72:f7:49:
db:fa:96:9c:70:0b:19:37:89:04:0c:98:a0:eb:1d:
6b:57:11:98:8b:89:94:8a:19:d2:8e:32:c9:75:fa:
f9:bb:86:08:f2:0b:65:81:f7:63:98:cb:69:50:52:
bc:19:e1:d4:40:1c:06:9a:b6:95:7b:cc:b5:cd:a2:
4f:df:f8:40:6c:55:8e:b9:11:20:84:9e:cc:fa:bc:
0b:02:70:2c:0c:8c:cb:fa:a3:a3:f0:21:be:e6:45:
38:f8:31:9d:8b:82:94:ee:ff:cc:4c:b1:ff:27:7f:
ad:e4:56:07:c4:14:7a:16:78:96:d2:a7:b3:d3:a0:
d8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:83:45:A0:3E:5A:14:7E:2D:13:FF:33:1A:49:8D:65:68:DE:3F:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f87dfadc-1647-39b7-9e3d-42de942bd5cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.11.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:a9:6b:b2:49:f0:54:1f:40:42:29:67:1f:ec:6a:02:cb:5e:
13:17:34:ba:45:7a:bb:f8:1e:78:aa:a7:30:bb:8e:68:b3:3a:
07:ba:55:30:5d:ac:88:d7:e8:20:8c:73:7c:e1:df:21:9c:b9:
ff:5b:d2:a3:10:05:86:a6:06:a2:05:da:62:74:68:93:ee:ae:
b5:c5:9f:80:98:c9:8e:82:a5:e4:eb:37:50:0d:ed:1c:d1:3c:
dd:bb:d6:67:4f:bf:1d:b2:77:8b:31:b1:a3:a7:cb:3b:52:26:
9d:12:55:ab:aa:57:5d:f4:2e:fb:bb:1b:b3:24:48:aa:55:fc:
86:27:b8:91:71:59:64:8e:50:73:68:69:d9:22:b8:a9:38:1c:
25:91:d5:96:eb:4c:5d:09:c0:a0:af:ff:00:02:ec:25:45:28:
59:0e:16:d7:fa:9f:4f:5c:60:00:7e:e1:76:84:76:b3:96:eb:
2b:56:d1:70:7d:65:44:bc:0d:a9:c1:af:20:11:66:dc:1e:ac:
3f:d2:7e:43:15:15:0b:09:81:71:11:2c:a3:46:ef:52:59:12:
5c:9e:7d:99:12:7a:1b:66:82:3e:34:cd:21:c1:e4:44:95:3b:
2a:74:bb:f3:77:91:ed:5b:12:65:f7:19:f5:4d:ec:6c:17:13:
ae:35:85:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:19:05 2026 by rpki-client