
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0532d20a-c51f-3c61-9542-337a72c386a1.roa
File: 0532d20a-c51f-3c61-9542-337a72c386a1.roa (raw, json)
Hash identifier: byKqmlo2fkgzh5wpC4dxb5MpMQlBOVhPZbnOq1Zu7fk=
Subject key identifier: E8:6A:7D:F7:9D:9F:E6:F8:54:BF:E7:F6:84:46:20:86:DC:78:67:E7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5B4DA80DD1AC17A34964A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0532d20a-c51f-3c61-9542-337a72c386a1.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 24.1.224.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5b:4d:a8:0d:d1:ac:17:a3:49:64:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=3f5091cf-5c4a-49b9-bb58-9623c55cff65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:24:8f:4b:3a:9e:96:a8:23:dd:7e:45:e1:
df:9d:7b:06:9b:53:18:bf:cf:f0:25:cf:25:f6:69:
87:25:98:4f:d4:38:00:7c:60:ce:9b:bf:45:f6:d0:
f9:0c:cb:82:45:ed:22:ee:3c:83:b0:23:2c:24:6e:
cc:13:e8:bf:a2:14:90:cd:f6:31:59:34:60:57:04:
b2:cf:f2:ab:16:03:94:25:2c:42:ca:6d:61:da:89:
13:c1:d9:4d:37:73:a4:0d:90:28:ff:7b:76:6a:c0:
ec:b0:13:cf:4b:22:5f:b6:eb:84:1b:a5:af:3e:5f:
45:01:59:94:03:f3:9c:8c:08:a6:8e:2e:35:0a:23:
9c:d7:51:cd:c6:42:58:ab:ee:10:e8:3f:72:47:8a:
96:b9:45:a2:30:ea:b6:3f:b1:4c:52:f2:ef:0a:cc:
08:bb:b1:ab:61:24:46:6c:e7:e9:56:ed:7b:0d:9b:
0a:02:d9:24:79:3a:fc:63:15:67:9d:5d:aa:69:70:
a9:b3:30:82:5c:e5:0a:94:17:c1:a0:d8:a1:50:41:
e6:d1:27:b8:2d:73:9f:e1:40:6f:2f:67:3c:9c:b3:
2f:35:74:05:b0:e6:ea:11:65:a5:cc:f6:f7:37:d2:
d2:84:2e:c5:76:0f:12:2d:a3:52:67:59:7b:5f:81:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6A:7D:F7:9D:9F:E6:F8:54:BF:E7:F6:84:46:20:86:DC:78:67:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0532d20a-c51f-3c61-9542-337a72c386a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.1.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:b8:58:68:00:17:c2:e7:ac:5a:45:e9:49:52:53:07:51:f6:
04:93:ec:62:da:df:81:28:96:d4:95:90:95:b2:17:37:a6:14:
51:3f:b6:ba:d9:2d:1a:6a:62:d7:06:10:ef:b0:70:97:7f:df:
dd:b5:0b:c3:6a:10:6d:cb:cf:ca:85:85:96:bd:4a:1c:22:76:
73:c7:f8:51:f7:54:8c:dc:fe:56:f7:6e:be:4a:d8:1c:bb:b2:
74:88:cb:f2:e0:b9:85:08:cb:b0:d2:8d:c5:7e:5b:11:04:4b:
e4:ee:19:d0:28:5a:1b:2c:70:bb:5c:70:3d:e1:f9:88:51:ee:
11:7b:14:21:b6:bf:64:2b:ff:4c:9c:2d:9e:19:39:82:8c:d3:
1e:f0:75:b0:6f:9f:37:1e:7b:85:3f:b1:66:88:ae:f7:d8:6e:
e8:c3:ff:d0:34:c4:8c:20:cd:95:c4:ef:2c:8a:35:33:94:1d:
b6:da:68:3d:7d:63:c6:1a:39:79:cb:c0:b3:ba:77:fc:f2:4b:
5b:09:ac:81:93:db:fe:5f:8a:87:86:a8:75:4a:f3:22:4a:50:
6a:4c:1b:eb:8f:15:83:c2:d5:06:f5:42:75:00:98:da:02:e7:
18:9d:80:c7:8e:a6:86:ea:fb:27:04:60:e6:9a:92:50:63:df:
c1:2c:62:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW02oDdGsF6NJZKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
M2Y1MDkxY2YtNWM0YS00OWI5LWJiNTgtOTYyM2M1NWNmZjY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmMkj0s6npaoI91+ReHfnXsGm1MYv8/wJc8l
9mmHJZhP1DgAfGDOm79F9tD5DMuCRe0i7jyDsCMsJG7ME+i/ohSQzfYxWTRgVwSy
z/KrFgOUJSxCym1h2okTwdlNN3OkDZAo/3t2asDssBPPSyJftuuEG6WvPl9FAVmU
A/OcjAimji41CiOc11HNxkJYq+4Q6D9yR4qWuUWiMOq2P7FMUvLvCswIu7GrYSRG
bOfpVu17DZsKAtkkeTr8YxVnnV2qaXCpszCCXOUKlBfBoNihUEHm0Se4LXOf4UBv
L2c8nLMvNXQFsObqEWWlzPb3N9LShC7Fdg8SLaNSZ1l7X4GNuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOhqffedn+b4VL/n9oRGIIbceGfnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDUzMmQyMGEtYzUxZi0z
YzYxLTk1NDItMzM3YTcyYzM4NmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAHgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFC4WGgAF8LnrFpF6UlSUwdR9gST7GLa34EoltSVkJWyFzemFFE/trrZ
LRpqYtcGEO+wcJd/3921C8NqEG3Lz8qFhZa9ShwidnPH+FH3VIzc/lb3br5K2By7
snSIy/LguYUIy7DSjcV+WxEES+TuGdAoWhsscLtccD3h+YhR7hF7FCG2v2Qr/0yc
LZ4ZOYKM0x7wdbBvnzcee4U/sWaIrvfYbujD/9A0xIwgzZXE7yyKNTOUHbbaaD19
Y8YaOXnLwLO6d/zyS1sJrIGT2/5fioeGqHVK8yJKUGpMG+uPFYPC1Qb1QnUAmNoC
5xidgMeOpobq+ycEYOaaklBj38EsYlY=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:01:54 2026 by rpki-client