
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a8644c3-0414-37b7-8a4e-179731ab2779.roa
File: 1a8644c3-0414-37b7-8a4e-179731ab2779.roa (raw, json)
Hash identifier: VPrDJIgKpnNyGsoRxBzpG/Si57BlorJG33HvxhzEuDU=
Subject key identifier: 9A:8C:71:C4:55:B2:41:CA:F5:71:E4:B2:06:05:ED:1D:68:6B:C8:19
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE58B5EB5D0B01A5D8A7A780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a8644c3-0414-37b7-8a4e-179731ab2779.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 24.5.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:b5:eb:5d:0b:01:a5:d8:a7:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=2a34a9d3-f080-4f49-a2b7-6037e587f12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:66:65:9a:96:3b:17:b8:77:aa:ec:bf:95:6a:
90:45:a7:1d:7d:27:42:86:0e:27:d6:59:66:be:cd:
f1:61:cc:bb:f4:4f:b8:f1:57:38:4d:96:97:84:ac:
a5:a1:90:bf:c7:f0:68:1b:22:40:0f:3f:ba:e4:44:
cd:fd:24:9b:a8:6f:28:48:4e:ee:9c:c6:42:9a:53:
39:bb:49:82:0a:2b:4a:26:18:87:f4:e1:db:e9:99:
71:7e:1b:ac:7c:ab:44:02:b3:01:ee:fa:e4:ea:0c:
45:f0:c8:f6:f1:3c:5d:61:71:31:3a:62:b0:e7:d6:
4e:d2:d6:bf:76:cc:07:f7:45:63:0c:63:24:09:9a:
43:f9:92:16:cb:88:dc:be:18:19:f0:b4:7e:5a:1a:
18:9c:90:a1:4f:7c:16:10:9f:3b:1a:2f:f0:3c:d4:
0d:6c:ae:ae:5e:a4:3b:f0:a3:3c:6c:5f:8b:87:9f:
53:2e:b4:5b:1c:1a:2e:53:61:28:75:25:69:9a:8d:
0b:0e:64:bc:2e:e4:9d:e0:94:ba:ae:22:05:cf:00:
94:e7:46:83:e3:aa:3b:e2:b8:8b:d4:fb:d4:c7:da:
e9:dc:b6:3a:37:dd:58:ed:f1:e9:1c:52:49:d4:fa:
d5:3c:a3:ff:1c:42:5a:21:8e:3d:6d:0d:b7:68:55:
3e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8C:71:C4:55:B2:41:CA:F5:71:E4:B2:06:05:ED:1D:68:6B:C8:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a8644c3-0414-37b7-8a4e-179731ab2779.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.5.126.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:f2:17:48:2e:55:5a:d3:39:ac:50:5a:0e:eb:20:bb:d5:2b:
3e:89:66:b6:57:e6:15:df:6f:e5:4b:38:42:b2:c2:e6:3e:c6:
d5:66:cd:e1:7e:7e:7c:1c:ac:11:3b:0e:6a:e5:89:f6:78:a4:
dc:dc:f5:f7:6a:73:2b:e2:db:ff:47:9b:22:ba:b9:41:18:e4:
e8:bf:60:64:ba:cf:eb:46:4b:d3:78:7c:58:21:bd:34:40:19:
3e:86:7b:eb:fe:1d:be:c7:be:05:1b:35:b7:1e:2c:65:cf:98:
5a:d2:11:92:a8:4f:a4:8a:a7:1a:df:8b:aa:5c:4c:e3:c8:e1:
f2:0d:e6:4a:bd:81:f6:73:69:e2:d5:07:dc:93:06:0f:58:05:
37:66:1e:97:81:2b:26:01:39:1a:fa:ac:e9:d6:2b:37:f3:97:
d4:a1:a2:9b:91:e5:8b:13:b4:ff:a7:ba:a2:cf:19:cc:42:74:
ca:c4:d8:23:ea:f7:30:58:0a:86:b3:c3:33:a2:66:97:ba:66:
82:22:8d:42:e5:64:71:77:7a:bf:92:93:25:98:bc:4c:4a:7f:
8e:5d:9b:03:4b:cd:4c:a1:3a:78:13:d0:4e:68:e5:01:e0:12:
43:4c:cf:c6:1f:0e:af:49:4a:85:2a:bc:aa:18:d5:74:ca:f7:
e6:45:e3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:10:38 2026 by rpki-client