
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afd1727e-ecb0-3e56-b764-aa3ae2a09f90.roa
File: afd1727e-ecb0-3e56-b764-aa3ae2a09f90.roa (raw, json)
Hash identifier: hkg8Btsm1Uv46aH/MFAIQqnP/IUEJiUsGmXGvcqegcY=
Subject key identifier: 23:A1:7B:15:52:51:5F:6F:CF:6F:A3:A3:20:22:A7:AC:C5:EE:A0:FA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CA061DFADE14408CA0ABB4A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afd1727e-ecb0-3e56-b764-aa3ae2a09f90.roa
Signing time: Sat 24 Jan 2026 02:00:31 +0000
ROA not before: Sat 24 Jan 2026 02:00:31 +0000
ROA not after: Fri 24 Apr 2026 01:00:31 +0000
asID: 7725
IP address blocks: 24.99.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a0:61:df:ad:e1:44:08:ca:0a:bb:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 24 02:00:31 2026 GMT
Not After : Apr 24 01:00:31 2026 GMT
Subject: CN=631221f1-bcef-47be-957c-bf639c89b968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:46:54:29:77:3f:57:90:25:ee:65:00:ac:7c:
11:4d:d0:76:4e:71:b3:e9:4e:78:eb:80:6f:71:6d:
da:fd:86:f9:ed:6a:c0:dd:05:ba:9c:47:cf:d3:cf:
a1:4b:9a:9f:89:61:88:c9:8d:aa:0a:ce:83:bc:5f:
23:e1:03:82:cb:53:c4:43:58:6a:fc:dc:84:79:05:
49:6f:f3:4c:34:12:ef:3d:3d:ae:32:a0:08:b6:0e:
81:b2:af:00:62:ab:7f:21:ab:39:8e:b7:03:e1:0a:
c3:9e:8b:e2:1b:c0:d2:42:77:9a:68:4f:67:79:e3:
f5:b7:10:1f:19:12:74:57:8d:9f:6e:d0:ba:4f:f0:
c4:d2:28:2f:86:7c:55:78:40:8f:e3:e2:98:3c:ad:
98:5d:e7:23:2b:e7:a2:49:b5:73:cc:ce:01:1a:68:
cf:bd:ca:ef:5d:79:41:3a:66:ae:69:0b:7f:18:53:
2b:c8:d5:c5:25:03:13:03:08:1d:de:6a:21:a1:38:
15:f9:36:33:9f:37:5a:cc:2f:bc:1e:e2:b8:8d:9f:
2c:99:48:58:28:3c:b9:c3:e3:42:0b:a1:13:91:9d:
df:89:45:8d:b4:92:50:4f:69:60:6b:0c:39:4e:58:
dc:09:d3:be:2d:a9:6d:42:e4:0b:7d:c6:0e:5c:d4:
8c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A1:7B:15:52:51:5F:6F:CF:6F:A3:A3:20:22:A7:AC:C5:EE:A0:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afd1727e-ecb0-3e56-b764-aa3ae2a09f90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.99.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:ad:e5:fe:2f:04:36:c0:7a:28:d3:ca:54:b6:7d:d0:40:98:
bb:a5:05:b2:c0:bf:50:51:d6:a4:22:35:36:b4:b4:33:ba:41:
93:b7:cb:60:70:5d:1b:44:56:40:99:71:ca:13:0b:fd:c9:0b:
21:e9:f5:7e:71:e3:d4:58:8f:41:98:5f:b8:58:29:0a:4f:43:
fd:16:17:5c:14:3a:ec:a9:ed:0a:24:a1:ba:e9:d7:4c:e1:eb:
6c:d2:33:ee:5f:f2:91:23:8a:31:7d:68:3d:7f:c0:dc:90:b0:
fe:65:d1:93:0d:2f:66:78:fc:4c:42:31:2c:73:31:50:f4:4d:
a0:de:e4:4e:e0:45:49:7b:38:55:09:48:63:59:2e:14:c2:cb:
2b:a1:ec:85:bc:80:98:9c:89:b7:4c:a8:ea:d0:79:4d:68:7e:
cc:b2:30:5b:76:97:c1:fc:40:b9:af:0a:64:bb:1e:b8:74:e1:
06:1d:93:cd:a2:58:1e:f6:ba:82:a7:b2:51:17:16:67:84:a6:
de:23:a1:17:a8:ee:36:d9:2f:20:79:3c:21:c8:1e:f6:cd:1e:
c3:e4:47:ca:a7:30:c1:f5:a5:60:b5:fe:f9:72:59:1e:41:04:
2b:3a:8d:4e:ed:05:b0:30:19:50:f2:c5:9d:0a:f3:ab:e8:d2:
2e:40:80:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:21 2026 by rpki-client