
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa694c7a-8fea-33ac-a569-e6f22cd6ee3a.roa
File: aa694c7a-8fea-33ac-a569-e6f22cd6ee3a.roa (raw, json)
Hash identifier: UQkwaUKUoqueCvTBH6wA4b9UQG4k/fE1CgZxERXcVsM=
Subject key identifier: DB:A9:3F:71:FC:8D:7D:F9:A0:BA:FE:E1:6A:48:B8:8A:02:40:9C:A3
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584F8DD855B9221C69C6CC13C000
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa694c7a-8fea-33ac-a569-e6f22cd6ee3a.roa
Signing time: Mon 19 Oct 2026 13:00:12 +0000
ROA not before: Mon 19 Oct 2026 13:00:12 +0000
ROA not after: Sun 17 Jan 2027 14:00:12 +0000
asID: 65001
IP address blocks: 24.249.215.128/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Oct 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:8d:d8:55:b9:22:1c:69:c6:cc:13:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Oct 19 13:00:12 2026 GMT
Not After : Jan 17 14:00:12 2027 GMT
Subject: CN=1f390bdf-1b47-476d-848c-1a7d47690ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:a3:da:41:27:5e:dc:54:6a:cd:5a:48:c1:
46:d6:e9:3e:8f:83:dd:57:b0:56:57:56:17:b2:e8:
2d:02:be:f5:89:68:97:fc:fd:4a:e0:26:88:37:3a:
32:cd:91:dd:b0:e0:f6:04:bc:0b:11:d9:b3:36:fa:
c2:2e:2b:90:09:6b:b8:9e:a6:0f:7d:6e:b5:33:d0:
f3:32:68:61:d1:24:29:a7:28:eb:a9:77:c8:f5:0f:
3f:b7:5a:3f:6f:fd:32:1c:3f:7c:a4:db:be:1e:f2:
b0:93:b5:33:e5:4a:02:cc:77:af:7a:bb:7e:39:05:
d4:3f:f8:aa:4f:1c:7e:75:43:18:95:0f:26:08:97:
a8:57:5d:68:55:c6:84:2d:17:21:54:f3:48:f2:28:
f6:40:61:05:71:12:f4:ad:28:b8:45:aa:24:d7:6d:
e1:09:b5:19:44:1e:f3:07:aa:f2:ed:32:f9:be:26:
3e:87:e4:a8:fc:1c:2c:e7:eb:a7:6c:1b:5a:b6:e7:
22:1b:47:a6:bc:ef:47:91:81:a4:fb:36:9d:82:ee:
e7:f6:f6:f3:01:a6:36:20:d4:aa:be:e4:66:cc:85:
aa:bf:48:16:67:a0:3c:3b:71:53:6c:ef:be:2c:fd:
1b:03:7f:5d:67:8e:0c:56:a6:cc:b2:20:4a:ef:4c:
fc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A9:3F:71:FC:8D:7D:F9:A0:BA:FE:E1:6A:48:B8:8A:02:40:9C:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa694c7a-8fea-33ac-a569-e6f22cd6ee3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
24.249.215.128/26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:a2:9c:ce:0e:f3:c8:31:e5:16:c9:e2:3b:f1:bf:3a:50:f5:
e5:40:a9:39:eb:f0:69:88:42:17:3b:1e:cb:9f:b0:fb:f7:ef:
6b:ff:24:b5:5a:1f:49:11:20:e5:1b:b1:0e:c1:58:28:0f:fd:
d0:fd:9c:a0:08:eb:2e:e2:7d:e6:71:1a:c4:28:a8:99:d2:f1:
6b:26:a5:1c:f8:79:c3:68:2f:f8:6b:16:5e:70:b8:03:73:3d:
02:50:94:e9:6b:d6:bb:b0:1f:6d:be:f7:cc:97:15:fb:a5:e4:
ed:b2:3b:3f:a9:87:b1:61:72:ce:fe:e3:0d:f7:6d:66:c5:c3:
0c:a2:47:f5:20:ca:7e:db:90:91:5a:f1:52:92:d0:7a:ca:f4:
9b:da:e8:0c:02:29:c4:73:8d:a8:2b:a7:3d:a9:41:6a:0a:6a:
87:0d:7a:db:83:ba:26:51:4c:6a:54:ea:95:f2:4f:2b:14:8a:
03:a9:df:89:31:bc:cf:b2:41:80:10:d2:cf:68:a0:4a:ea:c0:
d8:dd:40:31:dd:90:38:4f:44:0e:ee:19:41:ec:8b:fc:67:64:
c6:db:d5:8c:1f:53:46:2f:99:c6:58:45:e5:fc:9c:18:f8:07:
fd:a3:de:aa:ae:a8:1b:ed:44:e3:0b:1d:9c:b7:30:ee:cb:23:
cc:99:02:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:44:34 2026 by rpki-client