
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d204249c-9705-3ad2-9c85-32345972ac3a.roa
File: d204249c-9705-3ad2-9c85-32345972ac3a.roa (raw, json)
Hash identifier: ooElP5y9xDbAsm7Sems/7GT+0c1U0jg9m+l5gBWrETU=
Subject key identifier: B1:B9:4A:FD:41:C7:60:1A:F3:94:1A:3A:EF:F4:02:20:A6:46:B0:E8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA78DB8FBDD29678ABA17CF40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d204249c-9705-3ad2-9c85-32345972ac3a.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 13367
IP address blocks: 24.118.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8d:b8:fb:dd:29:67:8a:ba:17:cf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=688fe3e9-f733-4738-af59-69d6a560460c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:b1:d2:13:b7:47:28:8d:c2:ee:d5:47:a5:
25:c5:e7:ef:57:57:c1:02:40:ad:af:58:7d:05:d5:
8a:1d:a1:64:de:ab:ed:29:be:aa:52:e4:52:83:d6:
5c:b4:69:26:c7:d8:79:b3:32:57:8e:a5:e4:ad:a9:
9f:d6:de:64:dd:89:c6:1e:2b:7f:0c:3f:24:08:6b:
42:49:66:13:e6:c3:ca:8c:29:2f:2f:9d:d0:81:bf:
11:f0:02:1f:12:39:e4:7c:02:10:65:d1:b9:23:47:
5f:ba:b3:f5:75:cb:9a:cb:37:9f:44:8a:ed:2f:40:
a9:05:68:82:b0:9c:6f:3e:d3:f6:83:3b:3f:63:93:
aa:09:08:53:40:1c:26:a9:1f:73:ff:c5:06:d6:da:
34:09:f7:8c:54:b6:d9:43:5f:fc:c4:24:ba:d8:28:
c7:2d:5f:6d:ed:ef:6c:c5:5e:90:1b:ae:72:89:d7:
13:1b:61:4d:0e:d9:8b:39:09:eb:9f:22:2f:41:a2:
5b:c9:d9:c3:5f:a2:ee:83:22:9a:e9:ed:98:7c:16:
9f:75:ab:a4:5a:4d:b0:7c:6a:73:df:b9:ee:fd:c0:
85:2c:2b:f7:c5:2f:83:54:72:cd:4e:de:a5:37:f9:
ce:86:ba:17:ac:8d:71:89:d8:f6:c4:2f:f2:af:a1:
90:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B9:4A:FD:41:C7:60:1A:F3:94:1A:3A:EF:F4:02:20:A6:46:B0:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d204249c-9705-3ad2-9c85-32345972ac3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.118.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:5d:82:b9:b2:ae:3a:02:5a:27:b1:5d:0b:e0:5f:2d:80:9a:
cf:63:69:d4:62:e8:5f:e0:b8:45:f3:c1:c0:3f:5d:96:fa:62:
97:08:db:16:08:85:17:7b:db:d9:b7:cf:6a:72:0f:b7:35:65:
c1:99:de:b0:0e:79:96:3c:3f:8d:81:51:43:5f:b9:9e:e6:d1:
31:8e:d7:8b:f0:6f:44:2e:b7:e9:91:d8:bb:8e:51:99:b2:e0:
21:7e:57:1e:c5:68:9f:77:6e:65:f2:48:47:44:d1:8d:cb:9b:
da:a6:29:9e:cd:d1:87:dd:b0:81:14:26:12:31:ca:ed:d6:d7:
1c:47:2d:3a:16:a0:6a:9d:dd:ae:73:22:d0:4e:a9:b6:e8:92:
4d:d4:e9:78:82:4d:cf:90:db:12:ea:e3:22:5d:d8:3e:75:6b:
83:14:a0:dd:6b:50:36:05:35:75:cc:10:07:d0:80:34:8e:79:
40:c6:d1:f4:6f:7a:9a:23:14:49:bb:56:ef:12:82:bb:17:50:
91:82:8d:a3:fb:be:cf:bf:f0:f5:93:9c:d8:3a:23:dc:7b:3f:
4e:2b:87:32:ac:11:9a:37:26:93:3c:a8:83:ae:46:92:fe:97:
ab:27:63:e9:72:65:8c:e8:84:37:ed:4a:9f:31:9f:5a:2e:da:
63:c9:8e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:37:10 2026 by rpki-client