
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cccbf069-6b1e-38e6-bde4-2fc484ccf5c5.roa
File: cccbf069-6b1e-38e6-bde4-2fc484ccf5c5.roa (raw, json)
Hash identifier: zi6LeM4H1ZHwmOLYE5xCd3rAxZ6YZU+DYyjEKnGl0As=
Subject key identifier: D0:A1:AD:F7:BE:C3:49:81:A7:8F:16:7B:F4:E9:69:F2:DD:95:96:A5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BB8944CE200237DCCC0120
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cccbf069-6b1e-38e6-bde4-2fc484ccf5c5.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33490
IP address blocks: 24.21.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:89:44:ce:20:02:37:dc:cc:01:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=08c01491-c38f-4350-a395-d05ed81bc5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:52:1e:db:52:62:57:7a:7e:4c:da:99:1e:
c0:db:be:6a:e2:8e:d2:f4:bf:0b:1b:02:d9:52:c6:
91:33:d5:a3:34:a6:9c:64:8c:38:f6:22:43:f8:6f:
80:5a:13:90:3e:66:3f:8e:3a:54:9f:a2:7c:92:c5:
97:11:6c:c9:14:60:89:7e:4f:33:2b:3f:06:22:6f:
86:14:58:eb:68:03:46:fa:8b:a7:b5:b2:e3:f4:ca:
1d:0f:7b:68:66:07:30:9c:0f:03:3a:d6:6a:0d:9f:
15:2a:e8:9d:e1:d9:ec:e6:0f:54:6e:3e:6f:a5:5c:
08:fc:29:5e:ff:24:9f:7c:fa:c1:7f:cf:d1:da:bb:
aa:e8:95:a7:b8:ae:1c:9e:94:54:c4:d0:29:9a:01:
91:d6:37:aa:4c:35:88:05:e6:ff:d4:4c:96:70:ba:
53:9b:d0:aa:21:9f:7c:3f:8e:f2:d8:be:83:93:0e:
b1:72:cf:c5:a5:4f:09:97:b3:34:92:00:62:ab:5d:
5d:43:b6:e8:93:fe:d2:07:2e:2a:b0:94:ab:c1:80:
f3:6c:ff:ce:47:af:90:7b:77:60:2c:63:1f:ee:5d:
1a:d8:f0:15:51:97:f5:49:99:2a:63:39:77:fa:15:
10:47:af:f0:f2:fc:d6:76:3b:ad:ba:d2:0e:44:fd:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A1:AD:F7:BE:C3:49:81:A7:8F:16:7B:F4:E9:69:F2:DD:95:96:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cccbf069-6b1e-38e6-bde4-2fc484ccf5c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.21.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
da:c7:a6:e9:4b:a2:1d:35:49:3e:4b:5b:2f:78:d6:de:cb:b6:
d9:bc:4d:74:d0:54:f5:9f:e5:e9:bf:7e:c8:28:ea:14:fc:46:
7d:fc:11:9c:19:34:82:6d:40:06:84:5b:e7:9a:9a:d5:53:f1:
11:f0:b6:73:2a:03:c9:c0:cd:c6:54:c7:28:c2:43:e6:23:f7:
aa:24:61:f2:98:26:ba:9f:08:6f:48:87:22:8f:12:ea:7f:9a:
8c:b5:f2:a4:82:76:68:ab:73:07:1f:39:eb:45:be:11:5a:60:
b5:63:ea:cb:0e:a8:b4:d8:eb:54:fc:f4:a1:02:a2:88:66:47:
de:7f:c8:0e:1b:d3:21:08:03:53:5e:ae:2c:17:bb:2d:66:9b:
26:af:c6:b2:0f:0e:9c:ec:bc:54:f8:f3:36:6e:e9:3e:d6:5f:
07:52:65:80:6e:21:39:ee:8c:75:77:cd:89:f2:bd:b9:64:91:
2a:cc:12:f1:1e:26:bc:a2:90:a4:f0:e4:39:9d:1d:06:a2:8b:
97:ab:12:37:5e:00:82:8d:a2:85:62:e2:bd:f8:c4:1d:a4:9b:
2a:33:90:ec:29:79:d1:27:0b:88:fa:a5:74:df:34:ff:f9:44:
c5:53:a1:13:20:63:bd:0f:35:2a:e4:3d:e6:6a:03:ca:18:7f:
52:f5:82:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:44 2026 by rpki-client