
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8221811-9343-331d-b9fb-e2bf0312db34.roa
File: a8221811-9343-331d-b9fb-e2bf0312db34.roa (raw, json)
Hash identifier: S81b8oZ+4t6SIUv/e20yflRi3gHBHaiFpliXn5He85k=
Subject key identifier: 63:DF:E6:E6:DB:CD:AF:D4:A0:18:D8:D0:D3:2D:B4:2B:B2:1B:52:6B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BA50725F6EA16FD51EB6C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8221811-9343-331d-b9fb-e2bf0312db34.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33490
IP address blocks: 24.21.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:50:72:5f:6e:a1:6f:d5:1e:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=1b6e4ef9-fff0-4511-87cb-ccccd88fe2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:8f:2a:15:74:9b:49:3b:06:79:04:e3:fd:
42:56:1a:ab:18:bf:c1:94:17:01:53:88:b2:b7:1f:
cc:59:5b:9f:61:48:36:58:45:44:27:91:07:80:d4:
7b:2f:d6:7c:2c:61:5e:57:ad:57:f0:de:28:79:c2:
88:d8:5d:fb:b2:41:dd:2d:d4:6c:72:89:0a:64:c6:
7f:d2:3c:30:11:21:b1:6b:39:b9:ba:eb:91:b8:b9:
4b:07:fe:03:60:7a:27:ea:4e:73:4d:9a:56:e7:78:
8c:5e:67:22:1d:3b:10:32:40:64:63:f7:48:4a:1b:
1d:70:66:9a:76:d9:88:97:a4:e3:15:57:16:c0:06:
cf:8c:44:ca:0a:b6:57:36:06:ae:e1:31:dd:bd:3e:
86:d9:f8:7d:f4:88:5f:24:1e:c2:7a:d0:03:5a:49:
5c:ce:39:d2:c2:82:19:f5:e4:a7:34:20:c3:3e:19:
74:c7:37:bb:fc:5d:7b:60:bb:e2:a2:7b:7d:f8:dd:
fc:71:f6:5d:dc:39:3c:26:c9:45:91:e9:bd:08:ab:
a7:c3:da:90:0b:a2:79:22:f4:63:bc:65:b9:dd:2e:
1a:76:56:93:92:b1:7a:22:bd:23:8b:c8:16:eb:82:
e3:a0:5a:f8:0c:9c:eb:0a:53:0f:52:37:0c:d6:64:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DF:E6:E6:DB:CD:AF:D4:A0:18:D8:D0:D3:2D:B4:2B:B2:1B:52:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8221811-9343-331d-b9fb-e2bf0312db34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.21.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:93:b5:2f:dd:3d:df:38:73:03:03:d4:a2:01:53:91:69:35:
db:f0:62:aa:6d:04:16:6e:dc:ef:6f:cb:5e:48:c1:15:b1:d5:
50:4c:bf:a3:17:dc:c2:c5:83:ae:14:4f:ac:eb:57:8b:6f:c4:
ff:9f:fc:7e:4a:f2:ad:1d:8b:4c:75:ac:12:53:5a:20:41:49:
14:c0:00:3e:fc:82:9e:ba:09:a6:e6:c0:da:e1:40:18:dc:cd:
78:17:20:fd:c7:a5:59:b2:c3:ed:09:46:45:b8:b7:e9:be:f6:
95:27:5d:cf:96:c8:d8:18:ed:22:3b:c7:fa:64:1b:dc:62:30:
91:9d:e2:7c:4d:7b:55:5f:ae:7d:dc:01:a4:a1:4b:25:24:3c:
0a:48:4d:24:d2:16:ed:d6:28:90:7f:66:49:31:94:97:6e:0f:
03:09:a1:66:10:2d:b6:23:6d:11:03:41:df:4a:cd:68:f5:3c:
fe:fc:13:e4:82:a8:62:1a:df:b9:e1:f3:d6:51:a5:fa:ef:e2:
b9:32:de:f8:fa:b9:af:67:c5:34:d8:f8:3d:67:ee:26:5e:16:
76:eb:a4:2e:b4:b1:3d:6e:bc:02:8f:bc:0f:31:f5:00:9e:32:
a7:dc:ba:83:ee:bb:ad:55:06:60:ca:56:78:28:f1:74:c6:da:
cb:7e:38:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:21:33 2026 by rpki-client