
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a8d5a5fb-00e3-3a5f-adca-77c5f35b9914.roa
File: a8d5a5fb-00e3-3a5f-adca-77c5f35b9914.roa (raw, json)
Hash identifier: XqdrJPDsInj+c2kWAkSWjBzPhzoTsbvKRANzxqtIXt0=
Subject key identifier: BF:0B:15:6E:08:5C:31:2A:97:31:9D:22:93:0C:63:18:E2:78:06:E8
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F4328584DA6B02060DC5BE824B1E53B80
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a8d5a5fb-00e3-3a5f-adca-77c5f35b9914.roa
Signing time: Tue 28 Apr 2026 01:00:24 +0000
ROA not before: Tue 28 Apr 2026 01:00:24 +0000
ROA not after: Mon 27 Jul 2026 01:00:24 +0000
asID: 4922
IP address blocks: 24.56.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a6:b0:20:60:dc:5b:e8:24:b1:e5:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Apr 28 01:00:24 2026 GMT
Not After : Jul 27 01:00:24 2026 GMT
Subject: CN=ec75849f-8dc0-4cba-87df-e25329a86e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4d:c7:9a:67:f0:9a:e7:ea:f4:60:d4:f6:21:
81:8e:bb:a4:ce:1b:9d:35:ba:8e:c7:7a:97:24:c3:
41:99:5f:1f:ae:63:17:f0:29:65:55:11:23:f8:af:
51:65:83:02:94:bf:43:38:ec:dd:fe:52:5a:ff:74:
b2:f7:e2:4d:3b:15:4d:84:ed:45:fc:71:f1:70:85:
5c:d8:6c:30:d1:ea:f7:8f:60:4d:9b:09:97:58:8d:
d7:36:3b:25:3f:ae:bb:fa:40:ae:26:2f:73:d7:bc:
da:3b:f9:21:5b:eb:60:96:21:78:f0:7a:eb:38:11:
86:8f:01:8d:ae:06:12:fa:16:eb:99:02:f1:bc:59:
b8:7e:d8:7c:c1:72:d5:b3:25:fa:ab:fc:f7:4d:fd:
4a:61:0f:3a:fc:68:6a:f0:48:98:56:06:20:42:47:
ce:fd:f5:a0:c5:ae:d5:c6:79:b5:47:54:9d:10:16:
f7:a9:ec:51:50:dd:39:20:a7:3d:a8:7e:52:d7:51:
27:58:fb:32:8d:c9:c9:bc:d5:5a:6b:ff:57:2e:55:
e1:b3:6d:01:e5:6d:9f:f8:a1:a3:f2:ac:5e:67:63:
76:3d:2a:63:48:a5:79:1c:62:81:64:be:2e:d9:11:
2f:dc:fd:13:d8:33:a6:8d:80:85:c3:82:e9:09:bf:
bf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0B:15:6E:08:5C:31:2A:97:31:9D:22:93:0C:63:18:E2:78:06:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a8d5a5fb-00e3-3a5f-adca-77c5f35b9914.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
24.56.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:a7:23:35:e6:ee:30:b3:51:ad:a3:a3:40:01:a2:b7:00:f2:
8c:38:7e:3f:bb:8e:d8:c0:28:f4:69:58:6e:57:59:06:51:da:
58:fa:7f:ca:3a:c7:62:73:2a:07:e5:ed:fa:3a:ea:fd:43:0e:
1d:81:bc:a8:3b:e2:02:e3:3e:6e:a1:22:0c:e5:27:51:af:c9:
d5:07:ed:e9:30:9a:81:17:7c:33:c1:de:bd:74:bb:c4:fb:bf:
b1:3e:db:9f:10:e5:31:9c:d7:10:1c:a3:81:13:21:fe:fb:1d:
45:db:1a:e5:69:dc:0f:b1:bd:28:fe:7b:0b:21:da:7f:2d:8c:
62:43:af:b9:68:37:24:ac:25:5a:d1:b6:76:42:6f:f9:62:90:
ee:38:3f:a9:49:74:b1:15:e3:8d:1f:5b:e4:43:d2:d3:97:57:
56:2b:0b:77:63:be:00:42:ec:3f:d8:c6:e0:d2:21:b8:9f:9c:
86:47:85:be:12:27:66:03:9b:3b:98:0e:44:08:fc:5e:11:01:
f5:83:1f:18:22:04:09:83:42:f3:41:d1:f4:6b:c4:7b:0d:41:
c6:96:69:cb:09:21:60:4a:06:db:6e:68:f8:8f:bf:79:f8:2d:
ad:64:e1:6e:47:bc:93:2b:38:90:2f:a3:b7:ca:89:32:fd:69:
cb:73:34:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:02:40 2026 by rpki-client