
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/24389646-f33e-3ab4-8e45-b731e4365860.roa
File: 24389646-f33e-3ab4-8e45-b731e4365860.roa (raw, json)
Hash identifier: hduYBbR3NGzkCKYvNMkFMVfSrFftlEua3MgCpaAC6zc=
Subject key identifier: 40:93:A3:D0:72:43:32:30:C5:A3:B4:C1:4E:A6:E6:E3:0F:03:17:CA
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F4328584EA8EC3A1F8EFCEBDC0624FF80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/24389646-f33e-3ab4-8e45-b731e4365860.roa
Signing time: Wed 29 Jul 2026 13:00:12 +0000
ROA not before: Wed 29 Jul 2026 13:00:12 +0000
ROA not after: Tue 27 Oct 2026 13:00:12 +0000
asID: 201106
IP address blocks: 23.27.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Jul 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a8:ec:3a:1f:8e:fc:eb:dc:06:24:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jul 29 13:00:12 2026 GMT
Not After : Oct 27 13:00:12 2026 GMT
Subject: CN=65f65cce-1890-4389-9a11-668f5f9c7ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:63:a3:85:31:92:6b:b1:10:23:3e:c4:8b:02:
8d:7d:6b:1a:74:d9:1f:0d:40:51:7f:82:41:f5:e4:
24:a8:af:b2:af:71:4a:bf:2b:b3:34:59:55:db:3f:
42:84:6d:c7:76:89:3c:08:0f:aa:79:44:e4:be:2e:
b9:ee:a1:f7:66:cc:7c:7a:46:ea:67:06:33:4f:9c:
54:30:49:16:1f:fc:e5:11:51:79:a6:4c:bf:26:bf:
77:cf:d3:ed:90:24:df:84:4a:66:a7:15:f9:27:df:
c9:8c:9a:44:33:20:3f:a5:e4:f6:94:6a:4c:a2:e0:
cd:0b:01:ca:2f:a7:36:93:9b:e0:e6:cd:6f:92:90:
b0:2c:6b:af:3d:5c:65:fb:eb:56:d1:7f:49:4c:ca:
eb:e8:1c:1c:73:65:96:c8:13:2b:e4:fc:21:68:be:
6d:6a:e1:4f:6a:ba:b3:4c:08:01:8c:c8:3b:82:a4:
6d:32:13:eb:f9:07:4a:32:45:1e:4b:6b:18:4b:ab:
f6:5a:ed:5d:d3:dd:fc:55:22:d0:51:c3:86:5e:e2:
65:5f:37:6a:68:10:b1:3d:53:83:d3:8a:07:29:c5:
e2:6a:04:c1:1b:5c:27:bd:1c:41:9a:6a:d1:a0:0c:
8c:a0:0f:ab:1a:bd:0f:33:67:23:3f:5b:25:3c:7b:
24:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:93:A3:D0:72:43:32:30:C5:A3:B4:C1:4E:A6:E6:E3:0F:03:17:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/24389646-f33e-3ab4-8e45-b731e4365860.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:01:20:46:43:c9:45:e3:34:13:7d:b2:86:ab:1f:c3:dd:8b:
72:af:f3:3a:fe:75:92:f5:f0:f1:38:1c:e7:bb:18:22:fd:d7:
d1:a1:17:66:aa:32:b0:76:16:73:b3:c9:65:3b:8d:cd:33:72:
63:70:62:af:51:4a:7c:9a:65:72:7c:d1:2a:eb:18:02:b8:d5:
2a:0b:16:45:56:ed:0d:5a:9e:20:62:24:7b:ee:7d:bc:b7:32:
8f:0f:09:5c:c7:4f:0b:b1:cc:e6:2c:fb:55:9e:fc:dc:df:00:
05:e3:d2:2a:44:2e:ae:ff:1b:e4:c0:0e:f4:9e:25:a6:bd:2f:
10:90:99:86:1a:56:63:16:f1:cd:28:61:de:77:02:71:4c:b2:
ee:f3:a2:bb:0c:95:78:cd:c4:db:40:c8:05:4b:91:dc:f5:4d:
4c:e4:9b:1b:0b:29:26:1c:39:12:f1:ad:bd:84:3f:51:c7:43:
d6:05:09:7a:2d:b8:2f:5b:af:c6:15:b9:c2:23:fc:ca:22:36:
47:0d:58:25:a3:8b:95:44:6d:9f:49:98:0b:e9:c2:86:ca:1b:
5f:d2:a7:98:ed:b6:f1:51:2f:41:7b:4f:1e:27:07:ca:e0:75:
fb:54:5b:26:c7:3a:d8:9e:e2:7f:de:5d:fa:db:c0:ef:64:2a:
73:18:e1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 10:48:50 2026 by rpki-client