
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4d7c2970-d436-3df2-aeba-fc5c59619be3.roa
File: 4d7c2970-d436-3df2-aeba-fc5c59619be3.roa (raw, json)
Hash identifier: V4gLG8vmXpXaef8TOgpbuEuScesFfGlq3q9OnoCrPxk=
Subject key identifier: 0E:38:8C:01:BB:4A:81:72:F7:E7:79:6C:04:62:82:6C:3F:27:A6:DF
Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial: 010D0C9F4328584F1E4BAB3E73CFB3AF526D8400
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4d7c2970-d436-3df2-aeba-fc5c59619be3.roa
Signing time: Wed 09 Sep 2026 14:02:10 +0000
ROA not before: Wed 09 Sep 2026 14:02:10 +0000
ROA not after: Tue 08 Dec 2026 15:02:10 +0000
asID: 396998
IP address blocks: 205.220.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1e:4b:ab:3e:73:cf:b3:af:52:6d:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Validity
Not Before: Sep 9 14:02:10 2026 GMT
Not After : Dec 8 15:02:10 2026 GMT
Subject: CN=4521f1a5-7bcf-42ee-9bea-4c351f46899d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f6:bb:c4:34:21:45:59:5f:b3:ac:2e:9d:0d:
0b:47:3e:23:2d:a5:8b:80:27:d3:57:14:78:28:31:
10:92:98:7b:07:73:4b:b3:65:62:aa:f0:51:ab:89:
55:ec:11:bc:e5:a2:49:a7:91:a4:57:84:f5:07:8d:
ac:9a:1d:f4:7d:61:87:80:02:bf:e6:a8:47:51:aa:
4b:f1:79:92:e1:35:d1:c7:d6:fb:57:4f:75:13:04:
69:56:82:17:c5:33:72:eb:63:cd:86:24:94:36:f6:
1f:ef:fe:8a:9e:da:d9:79:26:32:4b:48:77:f8:af:
ab:60:2a:ab:c1:8b:9a:0e:2c:9a:21:ba:32:1a:44:
5a:31:46:32:b4:09:74:81:9a:96:f1:f9:3a:97:ca:
65:86:c6:b6:0a:98:75:f8:b4:08:e2:63:5b:3f:c2:
2e:f7:6a:4b:4d:2d:c0:ce:d6:dc:7f:7a:05:42:6b:
5f:3c:e0:0c:ad:43:09:ec:08:48:22:b6:5b:e2:84:
04:55:6e:aa:6d:a3:38:71:6e:18:9a:57:30:dc:69:
e9:d7:5c:5c:97:87:7e:b2:43:6f:fd:cb:ed:7d:ab:
e3:e9:37:94:fd:94:3c:63:ce:7d:63:f0:c9:22:31:
bd:1e:ef:65:8a:07:9b:71:98:bf:63:a7:56:41:47:
86:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:38:8C:01:BB:4A:81:72:F7:E7:79:6C:04:62:82:6C:3F:27:A6:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4d7c2970-d436-3df2-aeba-fc5c59619be3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
X509v3 Authority Key Identifier:
keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
sbgp-ipAddrBlock: critical
IPv4:
205.220.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:12:5a:0f:94:c3:7b:f2:ba:bb:88:e9:50:d6:e8:73:8a:3b:
f5:ca:93:07:16:37:45:fc:3e:74:1b:74:81:ae:8a:33:68:48:
b4:20:cf:1b:e7:95:c9:c0:b8:7c:00:c9:bb:c7:31:25:4e:1a:
00:ac:b1:1b:99:72:90:28:fd:29:56:df:4b:32:8f:1e:ae:45:
cd:76:d8:78:bb:00:5d:55:0a:a7:c7:63:df:46:f7:45:e4:ea:
32:30:c3:32:18:6e:a1:a8:9a:c6:67:e5:91:fa:c6:dc:72:ca:
18:20:94:3b:e7:c3:74:38:a4:c2:5b:d1:f4:c7:bb:67:ab:d4:
f7:13:8a:05:5f:d7:34:35:59:c6:74:5f:92:43:1c:80:74:1e:
bc:dc:8c:d2:63:45:62:b0:b8:cf:48:cc:b2:88:b3:ab:ba:06:
71:01:10:7c:df:87:37:db:23:46:66:83:a3:e7:52:b5:48:82:
13:92:f4:24:c1:96:0e:9b:f4:cc:b7:b9:a6:79:47:97:06:60:
d7:6e:93:5d:40:4d:4a:c7:03:07:69:38:4c:32:5f:5e:27:18:
52:7e:85:44:f5:f4:8c:dd:1a:05:21:1c:f8:61:bf:49:49:40:
a5:61:95:90:9e:d2:8c:4b:54:42:22:dd:d1:5b:08:a9:77:6e:
f9:c5:d1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:43:23 2026 by rpki-client