
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a616887-6377-3901-921f-0c549851b939.roa
File: 8a616887-6377-3901-921f-0c549851b939.roa (raw, json)
Hash identifier: wUyj6WbMXsEJem7UX2I1scboW3HyfFYDDpeDYs3s91A=
Subject key identifier: 70:65:E7:85:F2:A7:DE:DE:01:97:59:5F:58:65:B2:E5:33:EA:25:64
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5B48646E414A7CAA2C1900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a616887-6377-3901-921f-0c549851b939.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 24.12.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5b:48:64:6e:41:4a:7c:aa:2c:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=f183f906-8a53-400a-9edd-168e0deda2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:43:d8:62:7e:a5:65:d9:49:a1:94:c8:42:
c7:d5:51:84:62:b0:60:1d:bf:cb:85:db:c0:4c:9d:
34:35:97:f0:ce:cc:a9:d4:3f:91:56:d0:69:53:2d:
21:64:d5:04:c1:63:59:cc:f8:e3:d2:e5:d7:97:9c:
cd:7d:9f:f7:12:bb:72:b9:d5:68:fa:56:df:13:bb:
7f:86:39:ab:50:18:57:41:84:b0:b5:bd:dd:f1:bc:
bd:8e:3b:39:5a:b9:d4:95:75:cc:00:cc:8c:ec:f1:
fc:f7:d5:fa:0b:83:24:b8:31:4d:31:9f:80:f3:39:
a5:ef:1a:22:20:cb:6c:1a:b2:41:c8:22:1b:0e:19:
84:2f:26:bf:53:6f:50:95:21:11:96:ee:9e:e0:84:
15:c5:58:e1:c6:a4:ca:73:5e:ae:ba:47:c7:2d:16:
db:9b:06:15:68:96:89:62:0b:aa:a3:75:a0:74:44:
9e:60:0d:71:99:fc:b1:b1:96:43:18:95:ed:fa:02:
ca:74:6a:0d:6c:7e:37:ab:31:68:bd:81:d0:da:a3:
c1:01:25:fc:c2:eb:f7:68:b6:ba:5e:ca:a3:61:c6:
ea:f0:3f:06:b4:0e:b3:a2:cc:37:28:a3:61:e6:56:
15:f9:dd:8b:5e:31:6a:14:59:77:f3:0d:d7:5a:00:
11:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:65:E7:85:F2:A7:DE:DE:01:97:59:5F:58:65:B2:E5:33:EA:25:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a616887-6377-3901-921f-0c549851b939.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.12.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:37:32:b7:ac:3e:fb:9a:a3:d6:93:b9:29:86:b3:40:c1:11:
8e:f8:1a:eb:5c:f6:9e:6f:2f:bb:6d:8c:4a:16:10:01:25:43:
00:86:31:fd:83:50:c6:aa:36:c4:fd:55:bb:6d:96:b2:e1:c8:
b8:d4:37:fa:5c:2d:c4:09:e5:67:04:fe:34:c9:b3:ff:d8:b5:
ed:bd:64:7a:71:59:2d:25:42:44:a2:58:b8:bf:1f:e9:17:69:
d9:9b:fc:46:d6:af:cb:34:3d:b4:cb:c9:31:ad:52:2f:e5:cb:
11:ff:3f:3c:35:5d:07:5f:5f:22:14:12:b7:98:cf:e4:1a:a9:
63:90:67:2c:a8:6e:19:13:05:d2:cf:b9:04:a1:39:a9:2d:01:
f4:f6:7e:d5:73:b0:be:a2:53:c7:19:f4:5c:1f:09:36:01:1d:
75:35:85:09:b6:a4:bd:66:dc:00:ca:29:cc:8a:62:e1:1d:d0:
44:da:6b:be:60:d7:08:f1:cc:de:24:63:22:1f:67:e4:15:ac:
d8:08:bc:dd:15:db:15:e5:78:1e:e6:b1:36:b3:71:da:c8:26:
04:bf:9d:f9:fc:1f:d1:bd:42:71:65:78:f3:c8:ca:65:ab:f6:
c9:d3:ac:0a:84:fa:7e:73:be:aa:13:70:e3:73:41:0c:31:21:
b7:98:74:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:56:15 2026 by rpki-client