
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/ce93ba7e-91da-3dff-a52d-68e1db0914ea.roa
File: ce93ba7e-91da-3dff-a52d-68e1db0914ea.roa (raw, json)
Hash identifier: Fy5rJM5Z4O4fUCHAfW5ppAvbK+8pB5wGmtCatM108VM=
Subject key identifier: 9D:34:B1:A3:BC:5D:2D:26:CE:F1:7C:4F:00:6F:4F:41:BE:31:A7:50
Certificate issuer: /CN=b031f288-aa10-4c6d-b640-6749f212c6b7
Certificate serial: 010D0C9F4328584D7A05501158522518C879E900
Authority key identifier: A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/ce93ba7e-91da-3dff-a52d-68e1db0914ea.roa
Signing time: Sun 12 Apr 2026 01:00:24 +0000
ROA not before: Sun 12 Apr 2026 01:00:24 +0000
ROA not after: Sat 11 Jul 2026 01:00:24 +0000
asID: 1299
IP address blocks: 24.225.112.0/20 maxlen: 24
216.172.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7a:05:50:11:58:52:25:18:c8:79:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031f288-aa10-4c6d-b640-6749f212c6b7
Validity
Not Before: Apr 12 01:00:24 2026 GMT
Not After : Jul 11 01:00:24 2026 GMT
Subject: CN=b9be0867-1023-4c7a-a4a1-973de02c4555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:00:38:1a:e9:3f:55:9c:48:7e:36:16:77:eb:
5b:31:ab:1a:41:5b:77:48:e9:ca:e6:d4:ee:3d:43:
92:ed:39:56:e4:c6:7f:31:9c:7d:af:6d:f1:d8:4a:
55:e1:09:92:a5:ac:bf:30:25:1b:ea:bd:58:09:39:
bf:60:d8:59:fd:0b:44:c4:19:a3:08:94:89:4e:80:
59:65:49:a9:6a:36:a2:30:cf:11:b0:1b:1b:f7:ab:
35:d9:56:f9:bc:91:e4:90:2c:31:c5:b0:8c:56:eb:
80:bc:01:c0:4b:4b:f5:65:cd:6a:8d:6b:1a:a2:9f:
31:89:be:ce:65:a2:d5:92:a5:b4:05:28:cd:04:75:
07:f6:6f:9b:75:f8:44:2b:63:38:cf:c8:34:42:96:
25:79:61:0e:28:16:2e:5c:1c:ed:9d:f6:12:a0:37:
4a:d1:e8:7b:8d:3c:e4:dd:be:bd:d6:ac:72:5e:c6:
2a:e3:aa:75:9e:dd:b8:f8:3d:e8:fc:b4:fc:01:d3:
54:f5:50:7d:81:ed:ea:e6:61:9b:a2:dd:34:d0:c8:
28:5c:0d:4d:52:e4:b6:ee:e5:66:ad:3b:b7:bd:b4:
39:4e:d9:c1:b0:00:ea:1f:39:0f:c1:ad:75:d9:bb:
87:48:e7:ac:2f:5b:8f:dc:61:9f:81:7e:38:b9:de:
8f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:34:B1:A3:BC:5D:2D:26:CE:F1:7C:4F:00:6F:4F:41:BE:31:A7:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/ce93ba7e-91da-3dff-a52d-68e1db0914ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl
X509v3 Authority Key Identifier:
keyid:A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
sbgp-ipAddrBlock: critical
IPv4:
24.225.112.0/20
216.172.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:de:fe:2f:93:39:62:80:58:ff:da:36:5b:8b:51:ae:96:59:
4e:f1:5a:f0:bb:e8:16:c5:7d:e9:c2:a7:b5:99:cd:ac:f3:7f:
b3:4d:46:91:34:d5:87:95:0f:fa:1b:af:17:fb:6b:08:e2:a9:
fb:72:30:75:6f:40:23:9d:dc:e1:c0:4c:68:c3:c5:93:0b:c5:
01:b6:0e:a9:7b:72:a2:fd:6a:a0:b8:09:96:f8:87:78:a2:52:
6a:89:a7:fa:b7:59:34:88:36:6b:6f:ce:7c:df:9a:f2:01:c9:
6f:d9:59:99:d7:44:85:5b:09:db:7a:53:79:79:86:8f:f5:94:
84:72:be:0f:ee:77:22:09:60:e7:6f:79:60:27:24:1d:e2:5d:
fc:9d:e9:c0:88:49:ec:2a:7e:e0:6f:ef:fc:af:ff:8a:84:d9:
58:bd:3c:83:06:50:db:4c:34:91:21:b2:a2:74:63:f6:f4:4d:
a3:10:3a:3f:e4:db:c1:14:58:05:fc:8d:aa:6b:7e:c9:a3:32:
5e:aa:26:ce:90:af:70:33:95:1f:5b:90:d4:70:de:45:c1:dc:
b9:40:ff:bb:5b:45:1f:34:cc:03:b0:c1:3a:82:d1:71:ba:e6:
d3:82:a9:7f:d8:cb:74:4c:7c:96:0f:59:40:db:9a:8e:d1:17:
fd:43:ae:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:09:18 2026 by rpki-client