
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/02a99f07-8e81-33cf-a3e4-39b637121671.roa
File: 02a99f07-8e81-33cf-a3e4-39b637121671.roa (raw, json)
Hash identifier: V4lp9dwbQqDFkvKkxV92jOBzm/pA/pGWwRYzKzlz/HE=
Subject key identifier: BA:12:58:0F:1B:B8:1F:A0:F9:B3:7F:E2:AD:77:BD:EF:15:9D:C9:D6
Certificate issuer: /CN=9b4862b0-8a7d-4d69-bc18-38b430a8c232
Certificate serial: 010D0C9F4328584F549DA413965C0BA7421FC7C0
Authority key identifier: 30:C6:EC:74:BB:9F:46:DC:2C:85:0C:72:B8:78:D5:FE:A1:22:2C:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/02a99f07-8e81-33cf-a3e4-39b637121671.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 32220
IP address blocks: 24.233.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/9b4862b0-8a7d-4d69-bc18-38b430a8c232.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/9b4862b0-8a7d-4d69-bc18-38b430a8c232.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:a4:13:96:5c:0b:a7:42:1f:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b4862b0-8a7d-4d69-bc18-38b430a8c232
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=370c8654-6db1-4db9-8cbe-07b4af32d3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:a0:44:23:14:66:f7:7e:19:50:d1:68:b0:
4b:13:bd:83:41:52:c6:1e:f3:97:f4:7b:bd:dc:93:
63:e0:ce:0e:47:06:ec:d9:40:1a:73:5e:23:fe:0d:
b2:c9:dd:01:5a:4a:bb:b3:ec:4e:18:89:d0:a2:aa:
b3:ee:b4:39:1b:38:cc:db:c3:d4:cf:9d:a9:d1:50:
51:05:22:d6:e3:b2:d4:7a:fa:fd:1c:33:3e:48:8a:
a8:32:bc:e7:6b:23:46:9e:61:02:d8:e2:70:a5:06:
3d:d4:9d:4f:52:62:cc:6b:7c:6f:56:46:a2:84:42:
52:d9:ad:15:fc:ca:2d:79:28:be:4a:7f:7c:9b:70:
3e:16:ea:65:f5:57:5a:99:14:78:0b:89:41:d1:27:
51:2a:5b:dd:7f:51:1b:fc:33:d4:0d:9c:8b:ed:78:
fa:24:7b:29:80:1b:95:da:77:50:a1:49:7a:e4:1b:
b3:fa:59:39:82:75:3f:3d:9e:5f:99:1d:2e:20:43:
3d:26:4b:ca:54:5b:ee:91:7d:3f:df:8a:1d:08:28:
3f:e6:cf:0a:93:10:78:17:1e:4b:24:4e:61:66:1e:
c7:61:aa:d8:63:b1:49:9f:e7:eb:5a:38:99:97:bb:
b9:2e:63:fb:12:58:a9:04:e7:4a:f2:62:6b:87:65:
52:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:12:58:0F:1B:B8:1F:A0:F9:B3:7F:E2:AD:77:BD:EF:15:9D:C9:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/02a99f07-8e81-33cf-a3e4-39b637121671.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/9b4862b0-8a7d-4d69-bc18-38b430a8c232.crl
X509v3 Authority Key Identifier:
keyid:30:C6:EC:74:BB:9F:46:DC:2C:85:0C:72:B8:78:D5:FE:A1:22:2C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232.cer
sbgp-ipAddrBlock: critical
IPv4:
24.233.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:6d:a3:fc:88:bf:c4:36:53:86:65:bc:c8:0c:30:0d:20:0f:
6b:fc:44:5c:90:3e:fb:f7:90:73:7e:39:b5:5e:a4:b1:48:a6:
f1:05:4f:ff:37:b0:6e:08:c2:52:9b:ac:6a:46:0f:29:a5:b5:
eb:33:c7:b8:2e:dd:c6:1e:e1:1b:cd:e5:9b:e0:79:4e:49:74:
38:4b:48:73:6a:43:5e:59:6d:84:b0:af:30:18:38:dc:9c:a8:
a0:66:a5:7c:e2:0e:ed:5f:f5:81:ad:6f:36:a0:3e:ac:8d:19:
39:52:3d:16:70:18:82:d8:6b:fd:90:84:66:ea:eb:ed:cc:e1:
32:66:cf:2c:bb:d9:0d:dd:e4:8d:c3:a8:45:9f:53:44:b0:7d:
2f:f7:16:c2:a1:f4:3b:dd:ed:09:66:47:5c:3d:98:39:07:b5:
96:7e:da:cd:21:6c:75:1a:29:0a:66:81:76:6b:80:59:3e:42:
dc:6f:91:f2:36:68:54:62:0f:15:48:a6:18:e9:8b:43:e4:da:
3a:32:cf:18:6b:c0:dd:5b:1a:0d:21:5d:0a:e1:7a:fa:fd:c7:
dd:20:d9:e4:a1:5f:fa:2a:5d:39:1a:27:19:18:32:f6:02:27:
8a:a1:dd:9c:b7:5d:29:1d:69:29:6d:33:71:ef:df:fb:4a:29:
30:76:97:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 13:39:01 2026 by rpki-client