
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d018396b-7582-37dd-a1a0-4ff24af6c03b.roa
File: d018396b-7582-37dd-a1a0-4ff24af6c03b.roa (raw, json)
Hash identifier: qHLgmNwJps7YBTPl/EK0Pcd6c58XuwJ9IKeJQU2AV+Y=
Subject key identifier: 67:25:E9:CC:10:B8:9D:52:AE:BA:7B:23:32:F0:B0:01:61:98:43:A2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BA529ACF56E3ED18E64000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d018396b-7582-37dd-a1a0-4ff24af6c03b.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33490
IP address blocks: 24.22.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:52:9a:cf:56:e3:ed:18:e6:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=67e45b0a-747f-4960-a3e5-d2fe0986aeb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:15:d8:73:20:0f:a5:c4:be:dc:f6:66:aa:cf:
af:c3:a1:21:30:26:dc:76:2b:2c:d1:76:f5:b6:dc:
82:70:ec:ea:44:b0:2a:13:7c:8e:e8:6b:b2:25:23:
e1:4c:0a:d0:06:c5:45:7d:09:86:fd:bc:ad:33:a2:
49:55:5f:f4:ba:e1:1d:7e:c9:be:48:6d:29:c6:e5:
4d:d6:85:16:eb:2f:6b:44:28:69:5a:ce:1e:b4:f5:
a1:f8:04:f8:d0:6a:b8:07:6e:5c:a8:5a:5f:ed:b2:
c4:04:c8:3f:4b:f2:d0:d7:56:41:73:ad:7b:98:3b:
c7:f2:7f:65:26:0a:9e:b1:4c:81:e9:5d:6b:33:0e:
1f:70:fd:b5:ef:d1:a0:cb:a3:90:da:f1:fe:c5:d7:
0b:84:e6:b8:95:fb:52:4f:c7:fa:d9:98:1f:14:88:
c8:f0:4f:e4:6c:c5:61:88:f0:7b:87:db:99:95:c1:
ea:93:a1:e2:61:a4:80:f4:20:bf:83:c8:b7:36:55:
68:07:20:17:5b:28:8c:41:0a:e1:24:24:00:28:30:
34:a9:bc:64:c6:7b:15:8d:b1:5b:4c:1d:f5:c1:83:
02:89:48:b8:79:51:90:3d:c9:82:e3:f9:47:49:b2:
4d:b1:6f:06:df:86:df:71:bd:18:3b:b1:09:57:21:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:25:E9:CC:10:B8:9D:52:AE:BA:7B:23:32:F0:B0:01:61:98:43:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d018396b-7582-37dd-a1a0-4ff24af6c03b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.22.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:3c:9b:98:96:38:1d:96:91:af:c4:c9:6a:a9:a0:90:3c:96:
59:69:68:17:99:c5:b3:5b:67:a9:de:a5:4b:a2:ae:83:0c:75:
d8:18:49:1f:56:5f:4b:bf:42:d0:45:c3:97:f2:bb:c5:28:99:
24:d9:d6:0f:77:fa:cf:90:10:2b:9d:6c:48:9a:05:0a:66:04:
56:9c:e2:3b:46:7e:47:81:ed:ff:7b:d0:96:52:1a:32:b4:3d:
44:d3:a2:1c:f3:fa:ea:33:8f:1b:c4:9c:41:94:d9:00:6e:c8:
0b:85:3d:82:18:44:34:55:61:e6:25:46:70:52:0b:e6:8c:7f:
77:60:db:47:1e:58:f0:0f:4b:1d:c4:72:0b:c9:f6:9a:d3:e5:
1b:8c:14:98:f7:f9:d5:a3:d0:77:12:d1:bf:41:6f:88:8c:8b:
65:c1:92:f0:d8:a9:59:39:58:77:1d:d4:06:b9:5a:e1:1a:8b:
04:28:2f:ac:1c:db:1c:40:30:1b:3b:32:16:9c:75:ea:95:7f:
7a:40:fe:97:3e:1a:fe:37:81:3f:23:53:8c:a5:2d:12:c3:df:
a0:11:06:9e:8b:71:6b:8e:7f:30:98:ed:14:ca:b3:89:8d:60:
5e:11:b7:69:e4:1e:e9:1a:f5:90:12:fa:d6:c9:e5:00:5e:49:
75:02:e6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:30:36 2026 by rpki-client