
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa3b6995-9785-3575-bff7-b5cdbab92144.roa
File: aa3b6995-9785-3575-bff7-b5cdbab92144.roa (raw, json)
Hash identifier: jFyF9+AKd3gOrYS5cmrQN88aWCi193dTAsxDYNq/zkA=
Subject key identifier: 93:CE:36:DC:78:70:80:D8:15:99:18:DA:B7:90:3B:64:91:85:2C:48
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BA8AAFCB98E53598059580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa3b6995-9785-3575-bff7-b5cdbab92144.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 7015
IP address blocks: 24.61.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:8a:af:cb:98:e5:35:98:05:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=458d5e02-7b08-467e-b2be-cb0a71ba9c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f4:12:04:db:23:5b:00:c4:e9:96:9f:39:b9:
70:04:7d:3b:89:92:be:6a:9a:26:22:fc:81:d0:2b:
6a:c4:8b:ed:3d:19:0d:d5:4a:df:d6:fd:9e:3b:e8:
2b:f5:ad:8f:8b:ff:18:1c:f7:48:90:25:37:76:d5:
2b:98:b3:7e:5c:d6:8b:be:b4:a0:42:54:7d:a7:32:
77:3b:7a:d1:0f:ff:66:b2:67:9c:6b:18:6e:01:24:
6b:c3:ac:25:dd:d9:52:df:38:0a:11:bb:64:ef:9a:
20:f2:77:0a:34:7e:d4:3a:e2:91:8b:96:7d:e5:31:
59:d4:58:74:a8:c5:8a:5f:13:47:54:06:b8:ce:fa:
57:0f:52:95:0c:56:41:6c:ca:65:c0:ae:78:87:0e:
72:8a:b4:f9:5c:ce:98:11:f3:03:bd:21:05:b2:a6:
2e:fd:e3:3f:b0:66:95:f0:4e:9c:1d:37:bf:9d:25:
cb:5b:46:90:18:82:43:21:26:e6:fb:06:00:fb:6a:
97:97:65:bd:81:d2:54:d9:f8:62:f2:38:a0:06:0c:
1c:1d:34:c8:64:63:05:bf:8f:3a:ee:3b:61:a2:fc:
1c:c2:d4:75:b1:83:ce:fa:3b:c9:a5:e4:90:a3:de:
f2:25:d1:48:57:3d:90:fc:f2:e5:d6:bb:e1:c0:0d:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CE:36:DC:78:70:80:D8:15:99:18:DA:B7:90:3B:64:91:85:2C:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa3b6995-9785-3575-bff7-b5cdbab92144.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.61.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:39:c4:3c:44:50:a1:85:e9:01:d2:47:db:98:e9:e5:41:82:
74:93:6d:f4:de:12:8e:f2:98:64:b3:db:be:61:26:33:62:1d:
18:69:da:f5:e1:b3:5e:b3:ca:99:51:9a:50:6d:e4:4b:84:dc:
0a:d5:26:cd:04:e1:12:98:cd:af:f8:80:8f:89:93:39:3e:1f:
8f:bf:7c:3a:ae:c1:ef:cc:d9:70:fe:c9:c0:f8:a6:8c:5a:6e:
ff:75:3a:bf:0e:7a:7d:09:9f:8c:50:20:47:2a:19:36:22:5c:
30:6b:bd:e5:23:ca:dd:f6:e4:fc:4d:b5:fe:85:64:b4:17:b8:
38:3e:3a:81:5d:d1:e1:f5:d3:5d:22:b9:46:03:67:98:58:13:
6d:18:c8:c3:cc:9a:44:f1:2c:c4:a8:53:b0:c7:06:3e:73:6d:
be:70:02:83:e2:9d:a8:58:ba:1e:15:b6:8a:cc:ba:f1:60:22:
91:03:14:e7:66:82:07:87:36:76:a4:4d:9d:52:21:46:0b:05:
98:5b:89:24:54:5b:e5:96:1f:48:dd:3f:e5:e9:69:48:e9:af:
18:38:d0:45:6b:8c:82:bb:da:56:62:25:ed:14:e6:bf:32:da:
51:74:38:b0:bb:e2:87:22:9e:3d:e3:d7:ac:97:b1:d4:05:fa:
87:9c:75:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:37 2026 by rpki-client