
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9efdcb11-5b29-3bb0-a3ea-ee87995dd44a.roa
File: 9efdcb11-5b29-3bb0-a3ea-ee87995dd44a.roa (raw, json)
Hash identifier: LOB9fcPw7k6J7ReTWJrU4NRaLjLefSuDSWpqNWKv2NY=
Subject key identifier: FD:70:9E:73:00:39:AF:03:8B:5A:F7:39:A0:80:A9:15:EA:20:72:0D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5D32CA511D239C1B78FFA8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9efdcb11-5b29-3bb0-a3ea-ee87995dd44a.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 24.23.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5d:32:ca:51:1d:23:9c:1b:78:ff:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=ea181caf-0657-4ba6-9e75-5bbff6a02e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:01:46:4d:88:00:cf:96:05:c6:fb:88:f8:
53:fc:76:1e:06:43:8d:02:50:ed:ec:88:ee:53:05:
9c:2d:a2:f6:73:0b:7b:02:f1:03:9f:13:61:1a:25:
2b:cc:ea:17:5f:ff:06:2e:1d:78:f2:94:d9:6c:a9:
f7:34:34:ab:e0:11:80:b8:b5:1b:3c:26:00:36:9a:
93:64:f8:1a:64:15:1a:7d:cf:65:40:1e:9b:82:3b:
e2:19:00:88:95:14:aa:aa:1c:fa:c6:a0:de:7e:37:
39:44:e3:36:94:5e:98:b4:17:21:30:97:f9:f2:5b:
bf:5c:36:1c:f5:50:c1:bf:df:a1:8e:88:76:73:7a:
c0:1d:c4:f4:db:f2:f3:60:d0:63:4f:94:a5:ec:93:
f3:f6:00:8d:8b:7f:b2:88:7a:b6:ed:d9:da:25:e6:
2c:6c:de:4c:d2:54:ad:16:97:8b:b3:1f:a3:8b:df:
9d:9f:f5:10:b3:ff:13:13:54:c9:9f:6f:40:5b:ad:
ab:55:55:1f:c2:d0:b4:8c:e7:4d:50:74:c9:46:33:
60:33:b1:7b:74:56:72:18:8d:fd:e8:27:a8:dc:e0:
1d:32:4b:bb:95:58:b8:f9:38:82:27:0f:94:63:9f:
b7:8a:50:76:cd:e8:eb:2d:19:b0:e5:1a:32:75:7f:
22:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:70:9E:73:00:39:AF:03:8B:5A:F7:39:A0:80:A9:15:EA:20:72:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9efdcb11-5b29-3bb0-a3ea-ee87995dd44a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.23.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:33:8d:ae:9a:f0:7c:49:6f:11:b7:35:f6:97:38:57:74:ab:
d6:20:ca:17:e0:2a:df:7b:e5:e9:94:09:98:50:69:44:3f:83:
35:72:5d:4d:56:10:66:ec:01:e0:e8:34:3c:60:9d:83:47:56:
2d:58:4c:2d:2f:d8:80:2a:dc:f8:33:ae:9c:60:b6:88:4b:7f:
4f:4e:d4:3e:4c:a4:a1:0a:40:a7:7a:3f:dd:6c:78:f5:ad:04:
83:8e:ae:ad:b4:a1:ae:d5:c3:76:2f:e7:3a:6e:55:73:93:e4:
f6:25:89:c0:73:db:2c:46:ab:51:60:36:e6:db:ad:e4:73:7b:
1d:93:01:54:fd:68:54:ff:2a:b4:b2:0b:7b:f2:84:6c:4c:64:
79:09:1d:67:be:46:f9:ec:75:17:a7:16:61:4d:af:99:fd:77:
e9:dd:e2:a8:8a:99:09:3a:39:7a:a5:45:d9:fa:d0:32:fd:19:
32:88:8a:8e:f7:35:f7:dd:de:ff:c7:03:8e:9a:55:99:59:0a:
7c:c3:de:7c:7c:7c:5b:d7:fb:ed:62:60:c3:f7:54:9b:97:ba:
91:a5:c0:25:a7:35:5e:a9:34:e8:f5:d4:54:05:e0:85:30:a4:
6d:6f:86:d3:d4:18:f9:1b:f0:24:ae:d2:b0:72:55:3d:f6:27:
18:ba:aa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:28:42 2026 by rpki-client