
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/348e18b1-3360-3ce2-96e9-7cce6074f332.roa
File: 348e18b1-3360-3ce2-96e9-7cce6074f332.roa (raw, json)
Hash identifier: zKXB21CjUGa4AgazBD/+z7QgX/uwhexVpc02oe3IzfE=
Subject key identifier: 9C:24:C2:A8:D8:18:09:AB:8C:10:C8:9B:C3:10:F6:E8:CA:FB:2E:6E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F03A7A716D87D147FFEDE6660
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/348e18b1-3360-3ce2-96e9-7cce6074f332.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 7725
IP address blocks: 24.99.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a7:a7:16:d8:7d:14:7f:fe:de:66:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=3a3cddb9-c824-439f-9d84-6d6bea04aa42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:a9:ac:fb:4c:db:8f:e1:e3:ae:9f:d5:aa:
e9:14:90:d5:c7:d3:4f:6e:0c:bc:96:76:94:4d:88:
cc:72:d8:01:46:ec:a8:74:f9:87:32:a3:67:91:f2:
6b:94:af:87:77:f2:d0:71:8f:0d:4f:ed:b0:27:48:
cf:9b:4b:1e:de:9e:bb:b5:82:96:b8:7b:7d:d6:1e:
8e:46:c6:05:7c:c1:99:d3:1c:a8:20:63:39:3c:a0:
59:7d:4c:da:a4:37:25:c0:e0:6a:db:7f:64:33:c3:
c1:c3:ba:d5:fb:e6:9a:23:b5:5a:b7:71:d4:12:1c:
9b:8a:1f:13:51:50:68:f4:61:36:38:4c:69:78:a8:
f5:2c:0c:ea:2e:b1:1f:31:03:ae:5b:d4:b7:5d:17:
5c:54:ba:5a:96:b1:6c:5e:98:79:f8:50:aa:19:8a:
93:37:0e:67:29:03:53:7a:47:60:f2:98:62:e0:c7:
35:8b:76:bc:29:b0:40:12:43:40:fb:9d:04:13:42:
de:e6:85:32:f0:42:54:b6:05:37:78:af:10:7f:e8:
30:21:39:95:ef:7c:38:20:73:dd:8b:fb:15:ce:56:
cc:11:68:10:aa:e2:64:9d:c5:f4:88:d7:eb:1a:67:
a4:1a:c8:9e:ff:ec:e4:61:52:35:01:c7:a7:64:bf:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:24:C2:A8:D8:18:09:AB:8C:10:C8:9B:C3:10:F6:E8:CA:FB:2E:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/348e18b1-3360-3ce2-96e9-7cce6074f332.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.99.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:5d:ff:19:bd:11:07:b8:01:7a:43:5e:af:23:1d:c2:97:de:
56:00:10:c8:e8:09:fe:43:11:26:8d:f5:93:d3:38:b2:3a:c0:
4d:7a:5e:d6:12:a3:84:64:19:ed:06:c9:ec:20:50:36:b1:a0:
6f:0b:db:d3:0d:f2:ff:a4:b7:10:85:52:ac:a7:6a:d5:51:85:
c1:ad:29:2a:18:4c:ef:6f:a4:1d:82:05:52:f7:de:6f:6e:7f:
95:20:aa:69:66:2a:7a:02:a5:3c:e9:7f:d6:bb:c4:a8:8a:7a:
85:6f:28:58:09:eb:bc:6b:af:23:5c:55:d1:85:ef:2d:1c:15:
6d:b9:b8:d4:0b:eb:32:63:25:d4:58:2b:9b:e8:12:b7:7c:87:
0b:58:4e:8a:01:a2:65:c6:7c:54:c1:16:04:84:19:a0:ec:9e:
7a:6c:e7:2c:a5:78:fa:df:c2:58:22:a1:42:9a:05:d8:62:87:
05:e7:7e:fc:97:36:48:a0:dd:47:f0:da:44:28:ff:49:8d:e8:
b4:57:a4:8a:c4:41:0b:b7:44:a8:3f:73:a5:f2:dc:f8:e6:62:
ba:e4:bd:22:26:11:69:73:06:33:0d:02:75:a2:1b:7c:f9:83:
48:a5:1a:5c:f4:29:f4:cf:6b:60:c3:d4:ce:2d:13:e9:b2:85:
2a:a7:ed:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:32:26 2026 by rpki-client