
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af327780-f5e1-3b26-9b45-8a052736aaca.roa
File: af327780-f5e1-3b26-9b45-8a052736aaca.roa (raw, json)
Hash identifier: Zwub4fDFRM2b2l6SLFRHwU0dzszzBFRXkn18ASuXWT4=
Subject key identifier: CE:D8:AA:D6:65:CB:CB:11:4F:21:04:10:AE:68:27:4B:D7:96:ED:AE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE7B3B607CA0425A13D6E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af327780-f5e1-3b26-9b45-8a052736aaca.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 22909
IP address blocks: 24.11.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e7:b3:b6:07:ca:04:25:a1:3d:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=698c35d1-d388-4dc7-bd7b-8dfa3f5743e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f8:f2:6d:18:d8:1f:54:b8:34:66:88:96:74:
46:3c:7e:15:78:38:89:95:cd:50:98:49:6f:57:75:
9e:d4:be:1d:78:d9:06:b9:17:f1:d3:85:4c:3a:29:
8d:e3:72:70:ab:a0:27:9b:3b:4c:30:7d:64:85:31:
c8:59:d6:83:1a:22:fc:c1:23:e8:cb:4d:9d:5a:36:
5f:d2:15:39:49:ba:48:b4:42:6c:ae:08:f3:5f:df:
7b:db:e6:85:b8:5b:b4:fb:09:1c:57:41:47:3d:df:
12:ed:3d:8f:1b:a5:a5:df:0a:d9:1a:f6:37:25:6a:
84:33:22:87:b6:a2:48:9b:31:0f:4f:f9:59:1d:17:
f2:6a:ff:ce:53:c4:7b:3d:8e:f2:12:39:b5:6d:27:
3b:b5:c6:21:3f:fa:8f:f3:a2:56:e0:ed:bb:ce:97:
b1:63:c8:21:f1:ad:38:f0:c9:70:d4:b1:a8:02:f1:
92:8c:a5:64:3a:f0:01:0b:79:16:25:14:81:73:4d:
d8:e9:63:0b:ba:4c:c8:2c:db:b1:4c:53:69:4f:35:
2d:d0:51:18:b9:0c:d0:6a:23:67:a2:69:05:5b:38:
05:87:79:8a:e5:ee:48:34:0c:7f:6b:c2:06:82:b1:
62:c6:d9:12:15:8c:ab:96:0d:89:77:1c:77:97:f1:
84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D8:AA:D6:65:CB:CB:11:4F:21:04:10:AE:68:27:4B:D7:96:ED:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af327780-f5e1-3b26-9b45-8a052736aaca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.11.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:86:ad:aa:da:0e:7c:e3:9a:22:2a:03:12:78:d7:c7:30:8f:
72:44:ef:02:f8:53:14:0e:2a:7b:c0:61:93:98:92:0b:4b:9f:
39:c3:5b:13:be:6a:18:ba:02:57:4b:c1:f2:60:e7:cc:4d:b6:
92:4a:3e:de:10:66:90:b5:81:c7:b3:f8:5f:43:f8:84:7b:0a:
aa:ac:21:1d:76:0d:3a:3c:68:92:ed:db:10:06:1c:9a:b7:c9:
b5:63:99:f8:bf:71:32:d7:ee:e5:de:d2:e0:87:2f:23:73:99:
68:2e:8d:e1:88:da:45:a5:cc:b0:91:cb:e4:7f:e9:81:3a:f0:
fb:c4:66:1a:c2:3c:e5:c5:9e:83:3a:8f:ec:e6:23:d0:17:e2:
bf:bf:04:f8:49:ee:85:97:5b:db:ff:6f:f8:42:ed:d5:c1:cf:
62:44:e7:90:32:e9:3a:b8:7d:86:6d:d1:8b:ea:b8:20:e3:28:
c8:ec:2d:a2:76:51:7d:4d:ca:d0:bb:25:32:d6:b5:ea:c1:43:
0b:b5:cb:70:4a:cc:17:2a:b6:61:ff:4d:e0:30:6f:db:7f:29:
37:38:45:be:82:f9:3f:e6:26:05:f2:90:a3:5f:c3:95:7e:81:
9c:30:3f:0f:a7:05:a0:85:f5:3a:80:af:d1:1a:a2:3f:8c:ae:
2f:00:07:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz957O2B8oEJaE9bgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk
Njk4YzM1ZDEtZDM4OC00ZGM3LWJkN2ItOGRmYTNmNTc0M2UyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfjybRjYH1S4NGaIlnRGPH4VeDiJlc1QmElv
V3We1L4deNkGuRfx04VMOimN43Jwq6AnmztMMH1khTHIWdaDGiL8wSPoy02dWjZf
0hU5SbpItEJsrgjzX9972+aFuFu0+wkcV0FHPd8S7T2PG6Wl3wrZGvY3JWqEMyKH
tqJImzEPT/lZHRfyav/OU8R7PY7yEjm1bSc7tcYhP/qP86JW4O27zpexY8gh8a04
8Mlw1LGoAvGSjKVkOvABC3kWJRSBc03Y6WMLukzILNuxTFNpTzUt0FEYuQzQaiNn
omkFWzgFh3mK5e5INAx/a8IGgrFixtkSFYyrlg2Jdxx3l/GEHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM7YqtZly8sRTyEEEK5oJ0vXlu2uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWYzMjc3ODAtZjVlMS0z
YjI2LTliNDUtOGEwNTI3MzZhYWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAv8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFqGraraDnzjmiIqAxJ418cwj3JE7wL4UxQOKnvAYZOYkgtLnznDWxO+
ahi6AldLwfJg58xNtpJKPt4QZpC1gcez+F9D+IR7CqqsIR12DTo8aJLt2xAGHJq3
ybVjmfi/cTLX7uXe0uCHLyNzmWgujeGI2kWlzLCRy+R/6YE68PvEZhrCPOXFnoM6
j+zmI9AX4r+/BPhJ7oWXW9v/b/hC7dXBz2JE55Ay6Tq4fYZt0YvquCDjKMjsLaJ2
UX1NytC7JTLWterBQwu1y3BKzBcqtmH/TeAwb9t/KTc4Rb6C+T/mJgXykKNfw5V+
gZwwPw+nBaCF9TqAr9Eaoj+Mri8AB6s=
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:11:11 2026 by rpki-client