
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac984509-41f5-3feb-9c7e-9ceab06da949.roa
File: ac984509-41f5-3feb-9c7e-9ceab06da949.roa (raw, json)
Hash identifier: jp/2os0xG++r1PSUtWU8YwTYZ2Cl+99BYcUqMcnPaJs=
Subject key identifier: F2:5D:28:A3:21:29:29:B7:BA:59:B9:FE:6D:30:C0:45:0C:82:5B:0E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE57EE295DA1A9FCB01EA080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac984509-41f5-3feb-9c7e-9ceab06da949.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 24.12.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:ee:29:5d:a1:a9:fc:b0:1e:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=f2a3fbbc-3dbb-4061-b82a-8b621c49cbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:66:64:b4:5e:93:c9:80:b9:c8:19:6f:4c:d0:
ec:ef:e3:f5:61:ad:6c:0d:f4:18:9d:c8:57:d3:8a:
1e:2b:0f:2d:bb:62:62:ef:bd:ff:8c:bd:ae:f8:b4:
63:13:e5:e4:38:b1:0a:6c:20:a4:5a:95:85:ec:39:
fa:a1:10:2b:f6:bb:51:93:d5:fa:0a:b3:dc:6c:b2:
da:22:08:11:e4:34:0c:8b:db:44:a2:9d:1f:06:b4:
17:19:8c:bd:49:db:aa:88:44:d7:7c:5e:ea:81:5e:
58:75:f8:56:be:3a:34:1a:5e:b6:10:b7:51:26:da:
cc:53:99:66:d8:28:f3:1c:29:30:c0:00:ad:b1:48:
21:f8:0a:90:53:b3:fe:8a:2d:64:da:cb:95:fa:85:
ec:f4:cb:da:cf:c3:39:00:58:de:bc:b5:12:14:cf:
63:8e:4a:c7:12:44:7c:be:0a:32:6c:6b:90:d3:6e:
29:f8:6c:e0:43:96:05:44:20:c4:55:9a:70:a6:f0:
f5:33:5d:e7:b5:35:87:cc:0c:21:b9:fd:03:fc:98:
15:19:cd:8b:e0:c3:49:ee:f1:4c:77:25:b0:25:ee:
52:c2:77:9b:89:60:15:3e:47:6b:67:11:69:70:4c:
9f:8f:36:a7:15:63:96:6e:74:5f:6e:ca:60:cc:fc:
05:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5D:28:A3:21:29:29:B7:BA:59:B9:FE:6D:30:C0:45:0C:82:5B:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac984509-41f5-3feb-9c7e-9ceab06da949.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.12.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:07:27:40:1d:a7:1d:74:05:99:65:a4:3a:55:2a:eb:29:df:
e5:76:d1:c2:00:d6:28:13:80:79:7c:3f:11:2e:d9:fd:e5:75:
5e:8b:a9:a5:3a:67:20:ca:ad:6d:20:ba:c2:d2:e1:62:68:25:
04:da:99:a1:54:02:19:51:20:90:52:07:b8:55:72:86:5a:81:
44:79:8a:44:e2:94:6d:d0:d0:8e:08:8b:54:7c:d1:e5:af:fd:
29:30:d4:19:cd:89:1d:43:02:f9:e2:03:ac:70:b8:d2:65:fb:
04:60:4f:03:ab:a9:5d:8a:cd:80:3e:f5:15:8c:5a:55:42:74:
db:05:38:f7:5f:55:a8:b5:0d:3d:6c:a7:01:60:35:5f:e3:39:
54:16:7f:5d:1d:20:b4:29:c0:9d:ff:89:86:9f:65:b1:69:ab:
f0:7d:59:4b:88:5a:ad:ed:6d:02:16:8e:9b:bf:c3:aa:77:87:
be:4c:30:c1:03:df:4a:3b:b0:f9:51:46:ca:0e:97:fa:69:3d:
4c:d7:47:80:28:c9:09:f3:33:29:e4:10:db:ab:4e:84:32:c0:
5e:4b:d9:a5:c5:e2:21:f5:7d:06:c6:01:f2:91:40:d3:49:d2:
78:71:05:d7:9e:de:6a:c0:0c:d0:bb:4f:34:50:a2:48:04:7f:
71:40:e1:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV+4pXaGp/LAeoIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZjJhM2ZiYmMtM2RiYi00MDYxLWI4MmEtOGI2MjFjNDljYmI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2ZktF6TyYC5yBlvTNDs7+P1Ya1sDfQYnchX
04oeKw8tu2Ji773/jL2u+LRjE+XkOLEKbCCkWpWF7Dn6oRAr9rtRk9X6CrPcbLLa
IggR5DQMi9tEop0fBrQXGYy9SduqiETXfF7qgV5YdfhWvjo0Gl62ELdRJtrMU5lm
2CjzHCkwwACtsUgh+AqQU7P+ii1k2suV+oXs9Mvaz8M5AFjevLUSFM9jjkrHEkR8
vgoybGuQ024p+GzgQ5YFRCDEVZpwpvD1M13ntTWHzAwhuf0D/JgVGc2L4MNJ7vFM
dyWwJe5SwnebiWAVPkdrZxFpcEyfjzanFWOWbnRfbspgzPwFeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPJdKKMhKSm3ulm5/m0wwEUMglsOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWM5ODQ1MDktNDFmNS0z
ZmViLTljN2UtOWNlYWIwNmRhOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAyoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABcHJ0Adpx10BZllpDpVKusp3+V20cIA1igTgHl8PxEu2f3ldV6LqaU6
ZyDKrW0gusLS4WJoJQTamaFUAhlRIJBSB7hVcoZagUR5ikTilG3Q0I4Ii1R80eWv
/Skw1BnNiR1DAvniA6xwuNJl+wRgTwOrqV2KzYA+9RWMWlVCdNsFOPdfVai1DT1s
pwFgNV/jOVQWf10dILQpwJ3/iYafZbFpq/B9WUuIWq3tbQIWjpu/w6p3h75MMMED
30o7sPlRRsoOl/ppPUzXR4AoyQnzMynkENurToQywF5L2aXF4iH1fQbGAfKRQNNJ
0nhxBdee3mrADNC7TzRQokgEf3FA4b4=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:41:15 2026 by rpki-client