
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9618114-59a6-30f2-ba01-e17eaa43c6d8.roa
File: f9618114-59a6-30f2-ba01-e17eaa43c6d8.roa (raw, json)
Hash identifier: ZK02FvBg+Ca6Rcu5SNIJkcQ1JGCCxOGs21M2CC9Ucd4=
Subject key identifier: 48:14:07:81:DB:1E:57:B1:D0:31:AB:76:56:74:8D:17:FA:DD:C6:E7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BC33DA4FAE33F10235FFC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9618114-59a6-30f2-ba01-e17eaa43c6d8.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 24.128.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:33:da:4f:ae:33:f1:02:35:ff:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=62c3f7e9-6904-480a-ac68-87e70b0f20fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3e:64:64:48:9e:ed:4b:ae:69:aa:fc:2f:8f:
a1:53:9f:a9:1e:36:86:74:df:bd:2e:33:7f:75:d7:
25:e0:7c:9d:7b:59:98:79:88:6a:4a:33:23:9a:40:
b7:8d:65:bb:f0:49:40:94:e6:eb:ba:fc:26:30:a9:
84:7e:fa:04:8f:87:43:65:58:d1:d8:a7:34:76:14:
f9:9c:49:af:52:b2:dc:96:2d:8e:76:25:04:ae:9d:
14:30:cc:3f:be:07:e3:60:a7:76:9b:dd:90:a1:62:
c5:2a:6c:73:e6:bd:2f:1c:af:25:34:83:77:ac:38:
59:6c:76:68:20:24:97:ab:3a:62:c8:4a:a2:d1:47:
07:5e:a3:5d:b5:f5:60:f5:3a:a3:43:d6:a5:77:17:
d1:e5:1a:ba:cb:da:33:e7:93:79:7e:20:4b:fd:42:
75:9d:04:80:aa:85:d8:02:b4:6c:2b:64:24:9b:d5:
9e:a0:42:bb:c3:2b:09:96:ae:69:fe:15:5d:cf:b8:
69:f7:11:9f:d0:df:4e:57:01:01:a8:54:e3:0a:35:
20:e3:f9:c4:a6:01:32:68:38:d8:c8:9d:e7:86:9c:
57:ab:bd:08:69:03:49:00:45:09:46:47:89:74:68:
1a:18:f9:79:89:f7:70:82:5a:3e:c5:00:f2:1d:06:
93:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:14:07:81:DB:1E:57:B1:D0:31:AB:76:56:74:8D:17:FA:DD:C6:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9618114-59a6-30f2-ba01-e17eaa43c6d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.128.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:db:92:f7:36:78:27:a5:c8:65:40:5c:72:08:5f:36:34:d5:
41:13:28:c3:52:a7:23:f8:c9:43:81:92:18:cc:e6:00:f0:e0:
10:50:13:71:b7:49:d6:d1:30:25:32:64:6c:d9:f2:9e:ad:2b:
55:bb:9d:81:fe:eb:f8:c4:0b:96:44:a7:fb:d8:cd:21:18:7b:
08:84:79:61:4c:6c:b9:d6:f5:cf:aa:9d:69:c3:a5:77:6f:a6:
92:70:5d:1e:98:dd:e4:a1:8f:a5:6a:19:7a:6f:7c:97:1d:fb:
41:1b:8d:6c:24:56:46:60:13:95:ab:fd:07:91:6d:dd:06:8c:
54:f1:77:90:87:24:d8:46:f3:e3:c7:09:bd:f8:3f:d7:4d:db:
0d:a3:66:c7:bd:8b:3d:01:fe:d9:46:39:25:8a:5a:c5:21:82:
a5:4c:fe:fa:4a:b3:69:f4:d2:aa:1a:82:be:bc:da:c8:d3:46:
58:2c:dd:a3:f8:ed:52:63:86:ee:26:2f:37:66:55:4d:a4:83:
28:2f:7a:48:ad:7d:9c:99:67:da:48:cd:45:9a:71:f8:14:21:
bc:57:69:28:b1:85:5b:2d:fb:ba:05:8c:da:bf:21:b1:88:4e:
bf:48:99:8b:24:49:cb:ec:c7:0f:bc:59:d2:61:76:98:0f:d8:
5f:5b:60:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:13:15 2026 by rpki-client