
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d95919ec-a4ef-312e-b2a0-dd39d0ca01f8.roa
File: d95919ec-a4ef-312e-b2a0-dd39d0ca01f8.roa (raw, json)
Hash identifier: DxS8qi445KCb8t7CgrwNrHh0EyYXKcrdH1Oloj68AIk=
Subject key identifier: AF:DE:40:F4:55:74:4B:E7:D5:19:D0:D7:6B:1D:72:C2:B5:BB:A8:BB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5A7D1E804B6928E157CA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d95919ec-a4ef-312e-b2a0-dd39d0ca01f8.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33659
IP address blocks: 174.57.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5a:7d:1e:80:4b:69:28:e1:57:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=0e953740-606e-45cd-a06e-37cb0b7e65b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:86:de:ab:a0:4f:fd:ca:51:52:15:75:c0:0a:
6f:ca:a0:06:cd:69:a1:ec:84:09:9a:ed:6a:cc:3f:
56:29:f6:44:6b:3b:36:20:75:0a:fe:90:0b:eb:bc:
10:73:e3:08:3f:11:05:cf:c1:de:3b:25:8b:49:32:
04:19:fb:44:85:60:fa:fe:cb:1d:42:64:04:0c:f1:
9d:79:f6:0b:56:d1:9e:89:c6:55:8b:0a:24:e3:70:
73:06:d0:e2:70:58:b1:b1:09:3f:28:c4:c3:c7:fc:
5b:ae:47:82:b8:27:6a:43:5d:45:79:32:9b:ef:55:
2f:d2:03:76:8a:6a:a9:61:9b:ce:0e:5d:a4:cd:e6:
fd:9e:94:63:30:83:a3:9b:94:c1:50:6a:d6:e8:b9:
b4:de:22:ea:6b:05:e6:cf:8c:79:52:03:3a:9a:17:
24:91:65:0c:af:6d:5c:ca:bf:5a:10:d7:b3:22:11:
fa:0a:94:77:bd:f6:6d:2b:d3:98:fc:bb:0e:f5:6a:
80:38:f0:bf:93:6c:e1:e7:3d:d6:9b:d5:c4:97:fb:
3d:51:c1:ae:74:15:14:f7:e4:dc:42:ed:32:92:a5:
57:a2:41:52:2b:9d:76:75:d6:44:6a:40:7f:9e:67:
fd:50:95:d2:a0:61:68:3f:4a:74:aa:64:54:74:82:
5b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DE:40:F4:55:74:4B:E7:D5:19:D0:D7:6B:1D:72:C2:B5:BB:A8:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d95919ec-a4ef-312e-b2a0-dd39d0ca01f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.57.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:19:ac:b1:8b:71:f9:86:84:92:18:d7:32:d7:cd:90:c4:58:
c4:e1:b4:0f:34:f1:0e:fa:80:a3:e9:80:17:c4:3d:55:ba:d3:
11:7f:07:70:77:36:cc:53:64:e8:4a:7b:72:37:c9:bf:dd:3a:
13:9f:e8:a5:19:a3:16:d2:23:69:31:00:1b:28:3f:08:0d:34:
6a:f7:fc:27:b8:c7:2a:14:94:65:c0:a4:0b:68:4f:d5:9a:3e:
70:26:d3:b6:db:9b:6f:b4:e8:5d:4c:66:81:38:2b:e2:64:b6:
be:62:02:0a:3d:2f:d6:76:cc:b1:1a:02:34:47:e8:72:58:fa:
6e:e0:47:bb:cb:cb:44:01:29:8d:5a:80:42:29:92:9d:97:29:
d5:06:e1:2a:ea:12:c5:d0:85:6b:75:00:97:cb:8d:56:1a:36:
85:16:5d:b0:c1:5b:aa:fe:29:3f:4b:05:22:35:e8:8a:33:9f:
22:26:b6:a4:6a:6c:44:92:28:d5:ea:42:6e:96:c8:96:7d:4e:
9c:ff:4d:70:fb:ca:4a:43:9e:7e:a9:8a:3a:48:64:32:20:d3:
96:39:e4:7a:55:c3:b9:b5:38:b6:58:a7:c4:31:af:5e:07:8a:
f3:84:9d:73:64:f0:28:0c:7c:aa:dc:cf:55:62:de:62:83:70:
87:dc:ce:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:29:16 2026 by rpki-client