
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/08b8473b-ed8c-3ed8-8108-06aa61ea34fb.roa
File: 08b8473b-ed8c-3ed8-8108-06aa61ea34fb.roa (raw, json)
Hash identifier: 0V5G6y+3XEsUZ8e+VbQyWQUFmKqV4PhmbHx4jEE3U2g=
Subject key identifier: 33:9A:59:64:DA:CB:C1:39:C4:B8:BD:1B:24:93:BE:7D:C8:74:F2:50
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584DBA3B0612908FFA7E0C0676C0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/08b8473b-ed8c-3ed8-8108-06aa61ea34fb.roa
Signing time: Tue 05 May 2026 01:00:23 +0000
ROA not before: Tue 05 May 2026 01:00:23 +0000
ROA not after: Mon 03 Aug 2026 01:00:23 +0000
asID: 11232
IP address blocks: 24.225.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ba:3b:06:12:90:8f:fa:7e:0c:06:76:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: May 5 01:00:23 2026 GMT
Not After : Aug 3 01:00:23 2026 GMT
Subject: CN=a5758de4-7f26-4386-9d11-6dc5ae6465c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:d8:d2:63:4c:28:61:80:01:bc:12:51:84:
ad:6a:6d:28:aa:ab:ab:be:1e:b9:86:fa:ab:78:8a:
de:3b:22:67:2e:bf:ac:57:8d:31:e2:3e:e3:cb:9a:
c3:35:f2:e4:9e:92:65:88:fd:24:59:7e:6e:03:e7:
0c:1f:68:79:43:f5:af:b8:5c:ef:23:bd:34:96:7c:
c8:6c:8e:fa:79:b1:14:6e:ed:b4:6a:30:2d:1a:87:
fc:7d:dd:00:a9:20:f4:13:b3:f4:a4:3c:73:20:23:
e9:1c:8f:74:df:f3:ef:dd:72:01:1c:b5:8a:95:71:
d2:6c:5a:ac:40:b7:09:1f:e6:47:85:f0:72:66:58:
33:30:cf:61:06:fb:2d:05:9f:e5:30:15:5e:16:63:
48:d8:2c:0e:46:a3:4f:a1:fa:0e:80:e7:a4:51:42:
d2:5e:a1:dd:10:f5:84:1a:bc:cd:05:d6:19:f8:01:
b7:92:3f:f2:62:46:ae:02:67:0a:f0:43:92:23:b8:
61:6d:8c:b6:cb:40:51:17:68:05:e5:21:ed:51:76:
40:e5:f2:bb:38:00:6c:e5:eb:45:71:e0:fc:ca:bd:
c9:b6:49:f3:44:3e:a7:58:33:43:1f:b5:bc:f9:9b:
90:64:c8:ad:25:95:51:0d:c3:52:83:10:b4:97:0a:
aa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9A:59:64:DA:CB:C1:39:C4:B8:BD:1B:24:93:BE:7D:C8:74:F2:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/08b8473b-ed8c-3ed8-8108-06aa61ea34fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.225.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:94:75:8b:50:af:84:fd:b6:c6:67:c0:67:1e:64:d6:72:c7:
29:c5:d7:c3:64:b8:b2:d0:65:31:6a:0e:b2:1d:c6:00:7e:84:
8e:8f:4b:9f:ea:05:7f:7b:8a:ca:8f:18:79:cd:1c:d6:44:77:
2f:b5:02:b1:ab:28:70:fe:7a:7c:d0:5d:f6:54:27:4e:3b:35:
35:8b:54:6c:77:38:6e:dc:03:ae:0c:4c:7b:d7:3b:ce:ce:1f:
15:9d:2f:83:36:97:b3:d7:56:e5:c8:f9:24:d4:c1:99:86:72:
45:89:a1:9c:49:14:26:17:73:a6:ba:ce:cf:3e:9d:47:fc:34:
22:5a:81:ca:b0:9b:d4:e5:ae:1d:15:3c:b4:1d:f3:83:e9:f4:
93:8d:28:f1:a7:ec:b3:7b:52:b1:e5:df:c6:1b:63:01:a7:22:
22:a5:c9:e7:31:4b:06:dc:55:fb:0c:6e:36:20:b8:58:05:7f:
36:d2:a3:8d:40:74:f1:bf:48:ef:0f:f8:b5:77:f1:4b:16:4c:
52:3c:0f:ff:4a:b5:02:66:cf:19:89:ea:1e:48:be:86:b1:04:
09:cb:aa:89:4e:78:56:1f:4e:03:80:a3:04:f2:22:9a:14:10:
f2:1f:3d:83:4c:c0:89:48:77:27:3e:da:83:ca:46:3b:0b:c4:
f7:2c:67:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OwYSkI/6fgwGdsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk
YTU3NThkZTQtN2YyNi00Mzg2LTlkMTEtNmRjNWFlNjQ2NWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSfY0mNMKGGAAbwSUYStam0oqqurvh65hvqr
eIreOyJnLr+sV40x4j7jy5rDNfLknpJliP0kWX5uA+cMH2h5Q/WvuFzvI700lnzI
bI76ebEUbu20ajAtGof8fd0AqSD0E7P0pDxzICPpHI903/Pv3XIBHLWKlXHSbFqs
QLcJH+ZHhfByZlgzMM9hBvstBZ/lMBVeFmNI2CwORqNPofoOgOekUULSXqHdEPWE
GrzNBdYZ+AG3kj/yYkauAmcK8EOSI7hhbYy2y0BRF2gF5SHtUXZA5fK7OABs5etF
ceD8yr3JtknzRD6nWDNDH7W8+ZuQZMitJZVRDcNSgxC0lwqqQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDOaWWTay8E5xLi9GySTvn3IdPJQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMDhiODQ3M2ItZWQ4Yy0z
ZWQ4LTgxMDgtMDZhYTYxZWEzNGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGOFgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCUdYtQr4T9tsZnwGceZNZyxynF18NkuLLQZTFqDrIdxgB+hI6PS5/q
BX97isqPGHnNHNZEdy+1ArGrKHD+enzQXfZUJ047NTWLVGx3OG7cA64MTHvXO87O
HxWdL4M2l7PXVuXI+STUwZmGckWJoZxJFCYXc6a6zs8+nUf8NCJagcqwm9Tlrh0V
PLQd84Pp9JONKPGn7LN7UrHl38YbYwGnIiKlyecxSwbcVfsMbjYguFgFfzbSo41A
dPG/SO8P+LV38UsWTFI8D/9KtQJmzxmJ6h5IvoaxBAnLqolOeFYfTgOAowTyIpoU
EPIfPYNMwIlIdyc+2oPKRjsLxPcsZ0c=
-----END CERTIFICATE-----
Generated at Wed May 13 07:08:50 2026 by rpki-client