
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/24b85252-04e1-3fd2-b188-843b7481b99e.roa
File: 24b85252-04e1-3fd2-b188-843b7481b99e.roa (raw, json)
Hash identifier: TD0uBuP9XDvqv6NcoLN4twyuQdvjH2LsnvYSx30ifus=
Subject key identifier: 27:4D:CB:93:30:76:38:BE:EA:A8:B0:F1:4F:77:9D:2B:EF:50:70:7B
Certificate issuer: /CN=1111aa78-6e1e-4e22-9796-bcefdfe4c0bc
Certificate serial: 010D0C9F4328584F2D87B00C2C2B937A26A38500
Authority key identifier: 60:1A:73:12:2D:65:12:49:96:32:4E:81:15:6F:4C:5A:13:F8:CB:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/24b85252-04e1-3fd2-b188-843b7481b99e.roa
Signing time: Tue 15 Sep 2026 01:00:12 +0000
ROA not before: Tue 15 Sep 2026 01:00:12 +0000
ROA not after: Mon 14 Dec 2026 02:00:12 +0000
asID: 402127
IP address blocks: 199.245.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2d:87:b0:0c:2c:2b:93:7a:26:a3:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1111aa78-6e1e-4e22-9796-bcefdfe4c0bc
Validity
Not Before: Sep 15 01:00:12 2026 GMT
Not After : Dec 14 02:00:12 2026 GMT
Subject: CN=cfd897bb-0990-474a-85ab-8bd64809ef34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:80:92:35:fb:78:c7:81:c8:40:dd:e4:e0:05:
7d:35:cb:7a:81:2a:c9:e5:1b:94:48:9d:2b:d9:3f:
2d:54:6e:f9:10:37:26:cf:13:11:83:a1:17:03:f1:
70:3e:85:1d:86:e4:bf:28:91:03:32:11:67:ff:d9:
e3:dd:c3:5d:22:f1:f1:e4:8e:2c:22:a9:22:90:bd:
13:a5:72:81:67:87:10:69:a7:c2:33:29:38:af:e2:
7d:5f:a0:c3:61:fb:32:aa:7f:ba:dd:44:5c:9f:cd:
6c:8a:d6:ae:bf:c3:7f:04:17:9e:58:03:66:d1:34:
02:12:5f:43:6e:a1:72:38:5d:f3:df:1b:2f:24:98:
14:ed:43:ca:10:04:7c:cc:56:31:26:af:06:b6:7e:
08:7e:23:dd:a0:88:27:f1:79:4b:b7:4a:ce:8a:35:
bc:43:e7:53:b1:0a:35:81:2b:01:6f:5a:19:fa:79:
70:d7:68:4e:54:23:fc:68:2d:b7:bf:01:b9:22:55:
90:bc:38:a1:37:9e:d9:96:2a:c0:2b:a0:f4:26:85:
e9:c3:0c:dd:8f:2f:a0:9b:43:71:e5:16:c8:8f:2f:
db:ea:cf:11:14:12:82:90:05:4a:b7:d7:53:9b:2e:
f6:26:47:c0:e7:03:ab:ae:ed:02:65:01:ec:95:5a:
7b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4D:CB:93:30:76:38:BE:EA:A8:B0:F1:4F:77:9D:2B:EF:50:70:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/24b85252-04e1-3fd2-b188-843b7481b99e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.crl
X509v3 Authority Key Identifier:
keyid:60:1A:73:12:2D:65:12:49:96:32:4E:81:15:6F:4C:5A:13:F8:CB:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.cer
sbgp-ipAddrBlock: critical
IPv4:
199.245.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:b0:92:9e:b8:60:86:5e:64:a5:c5:d0:95:1d:d8:49:a9:90:
df:0b:89:18:41:4c:3f:72:ff:71:a5:d8:30:96:ce:99:fa:aa:
ca:f3:84:82:53:ad:6d:89:2f:38:d5:1e:6c:2a:d5:9a:59:5c:
6a:c0:c6:91:62:ed:6a:88:60:e8:fc:cf:55:c2:6f:5a:ad:fd:
96:95:14:66:5f:66:f6:7b:13:05:b8:54:a4:ae:e2:4c:73:fb:
44:f8:35:f0:fb:e8:4e:13:df:1e:96:e6:a2:13:64:43:3d:59:
dd:05:d5:2f:55:1a:fb:05:e7:da:a3:eb:c9:27:25:14:68:00:
a9:cb:ab:56:c9:07:57:98:54:10:c7:d2:f7:a7:a6:2d:4d:4a:
65:87:1e:81:e6:e9:61:af:0e:f1:35:27:eb:f2:e4:61:24:5a:
a1:1a:35:79:b7:df:af:3c:f4:89:d1:2a:04:0d:21:68:5a:13:
62:56:15:ee:a5:43:05:d6:ff:07:8c:c5:e1:f2:46:82:35:b6:
13:12:dd:d7:49:25:13:17:22:72:64:40:d9:09:3d:25:07:6b:
03:cf:93:ef:4d:83:ee:08:71:17:eb:c8:0d:81:d9:3f:6f:15:
34:46:84:e9:cb:27:f1:47:2e:48:39:cf:65:82:db:09:80:53:
63:9a:66:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:27:30 2026 by rpki-client