
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e8ae57d-b0dc-38ee-a6b8-5969f45e7be5.roa
File: 2e8ae57d-b0dc-38ee-a6b8-5969f45e7be5.roa (raw, json)
Hash identifier: BNs9h3dQ+DEUAxLjNVuQkrmPLHCEWyXCqROl+bXDDqo=
Subject key identifier: 94:C3:28:6D:34:24:2E:B3:FB:35:73:FC:11:E8:94:16:69:1C:8E:0C
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584E5E79F57CFD02E10535D4E700
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e8ae57d-b0dc-38ee-a6b8-5969f45e7be5.roa
Signing time: Thu 02 Jul 2026 21:00:12 +0000
ROA not before: Thu 02 Jul 2026 21:00:12 +0000
ROA not after: Wed 30 Sep 2026 21:00:12 +0000
asID: 20001
IP address blocks: 24.235.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5e:79:f5:7c:fd:02:e1:05:35:d4:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Jul 2 21:00:12 2026 GMT
Not After : Sep 30 21:00:12 2026 GMT
Subject: CN=6409a18b-daf8-4a7f-a724-23f4ab641682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:35:9b:e1:36:32:11:9f:35:0b:f5:6f:7f:6e:
49:3e:83:8d:ca:4e:88:de:c7:53:67:de:8c:29:52:
9e:35:d6:27:18:e0:3f:39:bb:00:b5:67:d1:22:8b:
44:34:02:eb:40:3a:a6:92:a4:d4:e2:4c:ae:d5:0c:
63:f0:f5:4c:49:58:c7:8f:4d:35:d9:ec:17:3c:4f:
c0:db:d9:da:ce:35:e4:39:a7:39:ef:27:e5:18:88:
98:36:a9:6a:e9:65:4c:4f:d6:83:be:fd:46:0b:af:
f8:36:fa:cb:12:66:cd:e9:2f:8f:8f:20:c1:ee:29:
ef:f0:f0:34:50:d9:1c:0d:b9:de:82:8e:60:94:47:
d3:04:41:fe:d1:ae:db:ed:5e:65:31:fd:b9:7b:38:
48:f4:7c:b3:e4:21:f2:15:04:41:a0:9d:ec:8d:bd:
d1:4d:1b:15:4c:ae:05:d9:b6:72:e9:45:a1:7d:4b:
b2:18:5d:53:5f:0b:83:c3:ef:cf:84:77:63:f6:85:
f9:3e:8d:91:01:25:25:79:da:1e:1b:fe:9a:c2:04:
5e:00:0d:a8:b6:25:e6:fa:46:f7:63:c1:3c:d1:a9:
e7:89:da:cf:e2:74:fc:88:d1:24:da:6a:26:9c:a3:
fd:02:dd:d2:e9:8d:80:ac:66:48:f8:ac:62:3b:2a:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C3:28:6D:34:24:2E:B3:FB:35:73:FC:11:E8:94:16:69:1C:8E:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e8ae57d-b0dc-38ee-a6b8-5969f45e7be5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
24.235.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:78:7b:35:38:61:47:30:b1:e1:41:69:52:e2:b4:87:86:ff:
53:5a:60:f5:d7:2b:55:30:3e:17:7d:ba:78:52:52:e6:db:e7:
70:ce:b5:ac:65:88:09:31:e5:e7:de:8c:50:1a:24:a2:5b:b1:
32:9c:68:dd:b5:74:8c:cf:c6:ab:9f:01:7a:12:83:bb:6b:d7:
ba:85:fe:49:10:1e:a5:2e:21:f8:21:17:9c:7f:f9:6b:8b:1b:
1e:db:5e:b0:59:83:aa:74:6f:9a:4f:f4:d3:08:29:11:8c:87:
30:a1:36:b0:58:35:b2:a9:df:cb:29:14:47:4c:c1:7b:69:7f:
a3:b7:94:9e:bf:c7:8f:8d:53:a7:43:b2:66:d5:74:e0:e3:a5:
44:90:e9:51:83:66:4d:b5:e7:45:7f:06:61:3e:1f:b5:11:b8:
a4:dd:b3:65:0c:16:78:d8:73:61:0c:a3:ac:f8:46:2d:54:f1:
b6:3a:85:c4:f3:4a:32:ec:4d:4d:a2:94:93:4a:be:70:31:c4:
fe:50:9c:fc:06:d9:ba:a3:45:90:f0:3f:24:29:ba:32:ac:a2:
57:90:41:87:06:09:23:39:a8:7c:e4:c8:0a:2a:bc:50:26:8d:
68:59:59:70:cd:e3:35:c2:6f:61:68:7c:79:01:97:54:49:cf:
9c:52:2d:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5eefV8/QLhBTXU5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDcwMjIxMDAxMloXDTI2MDkzMDIxMDAxMlowLzEtMCsGA1UEAxMk
NjQwOWExOGItZGFmOC00YTdmLWE3MjQtMjNmNGFiNjQxNjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zWb4TYyEZ81C/Vvf25JPoONyk6I3sdTZ96M
KVKeNdYnGOA/ObsAtWfRIotENALrQDqmkqTU4kyu1Qxj8PVMSVjHj0012ewXPE/A
29nazjXkOac57yflGIiYNqlq6WVMT9aDvv1GC6/4NvrLEmbN6S+PjyDB7inv8PA0
UNkcDbnego5glEfTBEH+0a7b7V5lMf25ezhI9Hyz5CHyFQRBoJ3sjb3RTRsVTK4F
2bZy6UWhfUuyGF1TXwuDw+/PhHdj9oX5Po2RASUledoeG/6awgReAA2otiXm+kb3
Y8E80annidrP4nT8iNEk2momnKP9At3S6Y2ArGZI+KxiOyr66wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJTDKG00JC6z+zVz/BHolBZpHI4MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMmU4YWU1N2QtYjBkYy0z
OGVlLWE2YjgtNTk2OWY0NWU3YmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGOsNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACh4ezU4YUcwseFBaVLitIeG/1NaYPXXK1UwPhd9unhSUubb53DOtaxl
iAkx5efejFAaJKJbsTKcaN21dIzPxqufAXoSg7tr17qF/kkQHqUuIfghF5x/+WuL
Gx7bXrBZg6p0b5pP9NMIKRGMhzChNrBYNbKp38spFEdMwXtpf6O3lJ6/x4+NU6dD
smbVdODjpUSQ6VGDZk2150V/BmE+H7URuKTds2UMFnjYc2EMo6z4Ri1U8bY6hcTz
SjLsTU2ilJNKvnAxxP5QnPwG2bqjRZDwPyQpujKsoleQQYcGCSM5qHzkyAoqvFAm
jWhZWXDN4zXCb2FofHkBl1RJz5xSLXI=
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:21:28 2026 by rpki-client