
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3fdd0f3-0edb-3d1c-b76b-ce2830d00907.roa
File: a3fdd0f3-0edb-3d1c-b76b-ce2830d00907.roa (raw, json)
Hash identifier: ydFWpzeg5qjLaV+V5ivfrYH8kA3FGuftcfAEHFfAIn8=
Subject key identifier: BE:54:F5:60:F5:86:00:EC:C2:06:38:B8:B4:31:D9:88:2B:18:C2:82
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119F0121D0669A0D099FB900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3fdd0f3-0edb-3d1c-b76b-ce2830d00907.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33491
IP address blocks: 24.15.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9f:01:21:d0:66:9a:0d:09:9f:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=c6b86dc1-0eae-41d9-8af8-f75651700dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:95:2c:3f:aa:f0:ad:3d:85:b9:b4:e8:31:bb:
b0:9a:ed:56:c9:b5:bb:0e:95:f8:6f:5b:b1:fa:5e:
81:8e:44:9d:e0:8d:22:04:04:38:f5:46:3e:31:f2:
38:f3:2c:c0:19:a0:2b:a7:e8:c4:57:1c:b9:40:7d:
5b:98:34:f6:2f:1e:9e:c9:87:62:44:e8:4a:a7:2e:
b0:c2:1a:24:29:58:c5:09:37:b0:fb:0e:fa:ae:6d:
bd:e5:a9:ef:22:b0:58:0f:1c:e9:b8:cb:da:92:2f:
f1:6b:43:43:9a:fe:91:55:38:f7:d9:33:41:90:c7:
f1:3a:6b:c4:35:36:90:42:5e:d3:c1:c2:bb:a9:91:
ca:8d:f3:ff:c0:bd:04:a5:1f:3b:a7:98:aa:83:1e:
c2:20:21:13:55:55:d9:34:86:59:32:68:0b:bf:b9:
10:80:97:96:64:d1:1b:f3:fc:11:bc:34:ad:c7:eb:
c1:b9:af:5a:7e:75:15:07:9d:ff:44:65:51:43:54:
32:de:3c:f1:6c:d8:43:08:94:e0:53:5d:87:21:f0:
23:55:61:3e:4a:40:7f:a2:86:3f:14:83:00:25:52:
31:63:7d:25:d9:52:00:ee:d4:33:ff:00:69:93:36:
45:a9:2a:c4:02:9b:28:b8:9a:9c:c4:04:71:3b:9c:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:54:F5:60:F5:86:00:EC:C2:06:38:B8:B4:31:D9:88:2B:18:C2:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3fdd0f3-0edb-3d1c-b76b-ce2830d00907.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.15.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:38:5e:17:a8:63:e2:d8:19:44:b0:80:ff:fb:7e:f2:74:6a:
1d:31:7b:d5:e1:a6:90:c1:e9:3c:6b:77:26:64:32:f3:fd:cf:
dc:77:dd:69:6a:d4:a2:1f:b1:2b:c2:aa:8d:45:22:59:dd:8b:
a6:c3:47:09:86:47:d6:a3:56:4c:b9:43:39:0c:15:4b:6b:7c:
69:70:3f:32:01:91:26:7b:1d:e3:32:08:e0:67:aa:27:4f:78:
64:f2:95:d8:dd:3f:7c:e4:5d:a7:01:52:2a:62:46:52:ed:a6:
4c:6c:d4:ca:48:54:34:ed:7b:f6:25:53:8b:d3:e8:eb:0d:15:
19:27:2e:5d:4a:c4:15:78:c2:9f:86:82:08:7a:9e:35:80:bd:
c1:ed:ec:47:e3:d3:45:05:67:91:ed:3b:21:82:49:d5:28:03:
e7:75:3f:f7:13:5d:74:c6:a2:f0:ed:b9:12:95:33:da:d8:85:
11:73:6c:a8:4a:dc:8b:87:a3:89:b9:99:e3:3a:81:ec:bc:d5:
cd:b1:ee:1c:76:33:44:96:4b:ae:c0:1a:5a:ed:54:1a:f8:0e:
39:3d:d6:e3:c8:42:44:c0:da:22:29:35:fd:25:92:7e:ef:50:
24:65:1a:a1:42:35:7b:c3:64:d3:bd:23:cf:9e:2b:77:d4:f0:
76:de:55:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:29:02 2026 by rpki-client