
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/280e1cd7-23c1-3403-98eb-58b024bbc468.roa
File: 280e1cd7-23c1-3403-98eb-58b024bbc468.roa (raw, json)
Hash identifier: 9dRXXCOfEsX7jJz6ZDptCNtd/Qs6DxnVhpkBjWxfEDE=
Subject key identifier: BB:6C:B9:EE:62:7A:7E:DB:FD:2A:0E:07:F8:9F:E8:33:B9:9A:B6:01
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BBBC04D0D4A09581D828C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/280e1cd7-23c1-3403-98eb-58b024bbc468.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 7015
IP address blocks: 24.2.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:bc:04:d0:d4:a0:95:81:d8:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=24d6b8fa-2264-4078-b65f-9623e5c907b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:46:ce:27:8d:ff:7b:18:ec:19:6a:63:e4:
96:7e:a2:35:60:d9:b5:14:d0:c5:9a:a3:9f:97:54:
7e:48:8e:ed:81:8f:84:7d:5e:0c:b3:bf:65:f0:a7:
98:7a:01:bd:c0:6c:ea:6d:fe:d0:ca:95:fc:88:92:
e0:f0:88:d9:18:89:ec:4f:df:69:2b:ed:38:02:75:
a9:4c:b7:ad:92:97:55:77:ef:0a:13:3f:0d:d9:5d:
07:4a:2f:05:62:45:24:f4:1e:ea:31:b3:fb:b1:6b:
36:89:12:89:64:69:b9:01:ce:22:39:79:84:ff:b9:
b4:51:57:cf:01:de:0d:b0:cd:6f:bf:fa:a4:52:75:
d2:48:e6:e8:3a:3d:37:e7:f3:cd:a8:a4:a5:f7:4e:
7d:70:4d:14:d6:8e:64:87:51:94:75:75:85:33:cc:
fb:f2:29:a6:c1:5a:9c:91:43:0a:0e:dd:38:76:fc:
23:2b:6d:99:e1:2a:2c:9e:0c:43:f7:45:7b:74:3b:
17:52:5c:de:84:6d:4f:98:64:40:1b:47:05:8c:ca:
68:3a:a9:67:0c:04:c9:31:0e:da:3c:0f:63:21:df:
8d:bc:4e:da:05:85:ab:b5:d6:24:58:2e:d7:82:00:
aa:b8:d3:77:ac:9d:5d:bc:9d:77:c2:e0:aa:65:98:
06:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6C:B9:EE:62:7A:7E:DB:FD:2A:0E:07:F8:9F:E8:33:B9:9A:B6:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/280e1cd7-23c1-3403-98eb-58b024bbc468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.2.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:0e:a7:83:47:20:60:77:98:2a:2c:10:8e:90:68:a1:fa:a8:
ce:3a:2b:d9:12:68:06:0e:da:cd:8b:f4:88:5e:ca:08:a5:5f:
82:52:2b:84:fa:fb:7c:c6:41:3d:52:98:76:16:67:8f:9d:a5:
99:3c:f2:6a:a1:70:57:85:e5:4b:ab:1c:b9:ca:37:5d:14:4c:
53:97:35:c9:1f:83:08:1a:95:7d:c2:d1:67:4a:25:cd:66:06:
4f:ed:65:30:91:34:d2:87:82:95:85:41:b2:ca:81:f3:6e:50:
96:c3:1f:1e:e7:27:f5:45:e1:7d:f1:6d:3c:fb:e4:6d:35:10:
e0:fb:10:88:f2:fb:ac:84:f5:1a:dd:7a:68:99:01:18:24:d8:
f5:e5:88:24:fd:ce:d2:a6:e0:d1:50:2b:42:c9:e0:ae:ca:43:
f7:b0:22:21:2b:18:5c:a4:b1:65:12:a9:9b:5e:74:02:64:9e:
7a:aa:ef:78:88:96:b2:df:6b:8a:14:03:dc:ab:73:53:53:05:
c7:55:61:3d:c3:96:d3:ac:68:e0:a2:6a:3a:b3:de:ac:27:09:
78:e6:f9:fa:b7:a1:ad:a0:2e:37:43:4c:1c:29:36:12:e8:6c:
18:6a:4d:70:a4:a5:9c:b3:4d:a2:39:5f:21:cf:66:f0:36:22:
4c:f5:ba:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:46:22 2026 by rpki-client