
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/4aef7736-3b31-3a62-8371-09c23f6f791d.roa
File: 4aef7736-3b31-3a62-8371-09c23f6f791d.roa (raw, json)
Hash identifier: zDu5MrjjGPtI1HzVkanns4zSNN/VR+7giPY16bjbKcE=
Subject key identifier: 67:E9:8A:67:9F:AC:8E:D7:92:22:C1:14:FB:56:58:2D:A9:B7:D8:98
Certificate issuer: /CN=02df9026-5ea2-4718-a55c-d46da7505348
Certificate serial: 010D0C9F4328584DF640A6778875E2F01807FD10
Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/4aef7736-3b31-3a62-8371-09c23f6f791d.roa
Signing time: Tue 26 May 2026 13:00:31 +0000
ROA not before: Tue 26 May 2026 13:00:31 +0000
ROA not after: Mon 24 Aug 2026 13:00:31 +0000
asID: 14291
IP address blocks: 24.235.80.0/20 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 29 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f6:40:a6:77:88:75:e2:f0:18:07:fd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348
Validity
Not Before: May 26 13:00:31 2026 GMT
Not After : Aug 24 13:00:31 2026 GMT
Subject: CN=48412253-ba9b-4506-bf19-1a3322086e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:02:31:41:5b:82:8f:93:29:f6:9e:72:f4:e2:
48:b5:f3:78:47:f2:64:22:ee:ee:df:c6:1a:24:c9:
fe:75:b2:b4:6d:9b:58:52:75:9e:55:e8:d1:2a:25:
8e:47:9f:83:f1:43:7e:d6:dd:52:d2:0a:40:7a:3b:
8e:91:5e:35:36:08:33:31:1c:87:0a:a2:74:2c:1f:
20:7c:e4:ca:2f:22:af:44:43:6d:06:af:ac:3e:30:
30:9f:a2:67:d9:65:ed:c8:17:f2:f5:cb:88:d7:a0:
1f:a4:88:d5:e2:35:5d:fa:2f:46:cd:ed:70:d1:50:
15:74:d3:2f:39:79:4b:df:72:15:24:63:28:de:af:
0f:4d:74:8d:91:42:f9:0f:1a:43:6d:d2:7c:1e:58:
8e:17:d8:9c:6c:e4:08:c5:08:13:06:fe:d9:db:8a:
d7:69:1d:06:40:98:a1:59:17:43:dc:db:8a:19:2f:
e2:a0:cb:31:38:40:7e:e3:bd:53:69:0b:8c:26:1c:
39:18:b2:0d:dc:3a:de:57:c6:fe:4c:c0:00:50:56:
3e:04:a1:97:2c:ca:95:74:65:9b:a9:c0:36:f8:91:
24:ec:03:0a:47:7e:a3:80:24:45:6b:6d:6f:a5:4f:
c0:8f:a4:82:d4:2a:5e:60:33:42:07:d8:51:d2:a5:
83:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E9:8A:67:9F:AC:8E:D7:92:22:C1:14:FB:56:58:2D:A9:B7:D8:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/4aef7736-3b31-3a62-8371-09c23f6f791d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl
X509v3 Authority Key Identifier:
keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
sbgp-ipAddrBlock: critical
IPv4:
24.235.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:29:ca:a7:e3:b6:73:ac:a5:09:e8:88:f7:53:a2:09:29:1a:
1a:7b:cc:63:a0:75:69:f2:03:e8:d1:ff:02:22:80:2a:7f:5f:
f5:28:7c:71:2f:f3:fe:6b:b2:fb:32:c1:18:05:88:66:83:09:
ee:37:84:e9:16:70:de:51:a1:2f:f0:0f:49:cc:7b:92:36:4a:
49:9b:56:71:3b:58:35:f3:74:ae:bd:7b:ea:45:f0:e2:7f:a0:
4c:da:56:a3:7a:0a:3f:51:03:ce:3c:1f:77:99:e3:d5:ba:e9:
38:dc:b1:5c:f6:f1:82:d6:20:8f:7b:b4:7a:02:f5:8d:20:a3:
f7:47:fc:e2:1f:16:ae:7a:5e:bb:96:11:90:da:6b:1e:8c:68:
e8:23:01:58:e9:8b:cc:86:3a:19:03:ef:70:57:28:64:7f:74:
4c:93:bb:02:d4:b1:a1:01:92:fc:a0:57:e7:77:2d:52:31:fa:
dd:f2:b0:45:6f:19:ed:4a:bb:c2:b2:58:ff:89:2e:cc:b0:c4:
61:59:5b:e5:b9:29:58:d7:e4:b3:b6:55:1c:b8:b8:38:95:e3:
01:41:f0:b8:ea:27:aa:5e:17:c4:de:ef:e2:2b:4d:77:f6:c6:
9e:88:5c:0a:08:87:1e:be:da:24:17:a3:59:2e:53:88:f8:60:
7f:80:eb:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32QKZ3iHXi8BgH/RAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDJkZjkwMjYtNWVhMi00NzE4LWE1NWMtZDQ2ZGE3NTA1
MzQ4MB4XDTI2MDUyNjEzMDAzMVoXDTI2MDgyNDEzMDAzMVowLzEtMCsGA1UEAxMk
NDg0MTIyNTMtYmE5Yi00NTA2LWJmMTktMWEzMzIyMDg2ZTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAIxQVuCj5Mp9p5y9OJItfN4R/JkIu7u38Ya
JMn+dbK0bZtYUnWeVejRKiWOR5+D8UN+1t1S0gpAejuOkV41NggzMRyHCqJ0LB8g
fOTKLyKvRENtBq+sPjAwn6Jn2WXtyBfy9cuI16AfpIjV4jVd+i9Gze1w0VAVdNMv
OXlL33IVJGMo3q8PTXSNkUL5DxpDbdJ8HliOF9icbOQIxQgTBv7Z24rXaR0GQJih
WRdD3NuKGS/ioMsxOEB+471TaQuMJhw5GLIN3DreV8b+TMAAUFY+BKGXLMqVdGWb
qcA2+JEk7AMKR36jgCRFa21vpU/Aj6SC1CpeYDNCB9hR0qWDAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGfpimefrI7XkiLBFPtWWC2pt9iYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRm
OTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZkYTc1MDUzNDgvNGFlZjc3MzYtM2IzMS0z
YTYyLTgzNzEtMDljMjNmNmY3OTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDJkZjkwMjYtNWVhMi00NzE4LWE1
NWMtZDQ2ZGE3NTA1MzQ4LzAyZGY5MDI2LTVlYTItNDcxOC1hNTVjLWQ0NmRhNzUw
NTM0OC5jcmwwHwYDVR0jBBgwFoAUyBt2Ol6lM34AGtjZ+ZDa9s1kXqUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRmOTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZk
YTc1MDUzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGOtQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQpyqfjtnOspQnoiPdTogkpGhp7zGOgdWnyA+jR/wIigCp/X/UofHEv
8/5rsvsywRgFiGaDCe43hOkWcN5RoS/wD0nMe5I2SkmbVnE7WDXzdK69e+pF8OJ/
oEzaVqN6Cj9RA848H3eZ49W66TjcsVz28YLWII97tHoC9Y0go/dH/OIfFq56XruW
EZDaax6MaOgjAVjpi8yGOhkD73BXKGR/dEyTuwLUsaEBkvygV+d3LVIx+t3ysEVv
Ge1Ku8KyWP+JLsywxGFZW+W5KVjX5LO2VRy4uDiV4wFB8LjqJ6peF8Te7+IrTXf2
xp6IXAoIhx6+2iQXo1kuU4j4YH+A68Y=
-----END CERTIFICATE-----
Generated at Thu May 28 13:42:35 2026 by rpki-client