
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2a7b83f-1d20-3187-8336-1e5c18263860.roa
File: d2a7b83f-1d20-3187-8336-1e5c18263860.roa (raw, json)
Hash identifier: CWUrtaSAuNu1zNMH5e/gv0Fez6mLcrjBF0pysjJw96g=
Subject key identifier: A9:C6:D0:A2:08:94:FC:A8:3A:24:AB:BE:5A:D2:03:06:76:F8:29:F4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5B464DE1D8A3629230C840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2a7b83f-1d20-3187-8336-1e5c18263860.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 24.1.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5b:46:4d:e1:d8:a3:62:92:30:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=f467229a-7b6d-45d6-a5f4-44a9abd942a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:8d:84:b7:98:5b:55:e9:00:b2:7a:37:d2:
f0:39:44:6a:aa:59:30:ee:32:4f:f8:30:1f:13:0e:
05:0d:22:90:35:53:55:8f:e6:2b:2a:fe:fc:0e:a1:
ca:e5:21:8b:20:2c:12:98:64:34:eb:3b:c7:f0:85:
1d:af:e4:0a:ff:49:b5:d8:5f:8a:7a:8a:ad:17:b5:
a3:07:ce:ce:64:b1:38:04:00:c8:dc:ca:3c:c7:a1:
8d:cc:26:4e:df:00:c2:77:3b:48:7d:df:7a:17:1a:
53:d5:19:d1:dc:64:73:15:0b:1c:3b:84:b4:4d:19:
eb:52:5f:54:c8:96:74:3c:be:38:98:3e:ff:a5:bb:
b8:5f:33:a7:27:81:b3:c3:88:87:e8:c5:9f:71:c2:
bb:b4:ab:e0:7d:da:24:80:c6:bd:67:4f:43:c6:a6:
7b:1e:90:39:55:ae:41:41:c7:69:64:77:8c:31:fb:
ce:85:43:93:de:43:97:e5:1a:06:db:bd:94:92:5f:
2f:41:7c:e6:8b:ff:21:7e:8f:95:d1:be:1e:ea:e5:
ae:5f:dc:a8:f7:63:b0:86:f7:22:bd:49:10:f9:87:
87:86:1c:89:3c:2a:62:3d:8a:c5:71:47:b8:16:6f:
d9:13:cd:38:8f:45:cf:94:89:6b:fb:50:5b:5d:99:
f3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C6:D0:A2:08:94:FC:A8:3A:24:AB:BE:5A:D2:03:06:76:F8:29:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2a7b83f-1d20-3187-8336-1e5c18263860.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.1.142.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:c0:93:ca:a0:22:44:aa:4d:eb:f9:03:8a:8e:b5:ac:1d:df:
0f:70:fa:93:ca:97:05:23:d1:d7:59:93:41:38:25:e8:fc:2b:
60:52:e5:37:93:1a:08:5d:4c:ca:ba:ce:85:0b:df:c4:e1:90:
5d:30:9d:7f:3e:70:d8:f6:a7:9e:88:1e:d4:a3:3e:8e:45:92:
3e:13:76:a9:45:0d:19:22:d8:48:0c:f0:db:16:22:7b:1e:3f:
5f:ac:ef:25:1e:18:19:6b:32:44:5a:99:d6:32:a1:89:12:a2:
78:6d:41:0a:ee:fc:e1:51:b5:09:86:44:84:fd:c1:28:32:24:
d0:2f:eb:54:28:4e:5c:eb:36:fe:74:28:c9:f9:e8:c3:2d:c2:
f1:5a:62:52:94:3d:2a:71:02:2b:34:3b:cd:2f:75:10:7f:e4:
cc:a3:40:f9:ee:ac:17:28:c5:b0:ea:68:bc:b2:2f:f2:93:4c:
e4:84:f8:39:40:77:91:50:fa:3e:73:7d:e1:19:e9:55:d6:f6:
09:82:d4:64:23:8f:63:96:f5:d6:11:4a:e3:9a:a1:39:83:a4:
f1:47:06:2b:f5:52:8f:d0:07:89:6d:c5:53:5e:e6:a4:40:97:
b3:51:38:0b:ac:be:53:3a:b8:30:ec:9b:07:c4:0f:dc:3a:8f:
2c:7a:07:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:04:37 2026 by rpki-client