
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/0735d197-9273-3075-b268-f6a4054268df.roa
File: 0735d197-9273-3075-b268-f6a4054268df.roa (raw, json)
Hash identifier: 0xqgRB9m4iMJtRL6Uz9d/JDhsaItp0aijm6eNChVaOE=
Subject key identifier: 51:C4:9B:74:80:40:86:D4:1F:44:2B:DF:E9:7C:35:7D:18:20:20:7A
Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
Certificate serial: 010D0C9F4328584F2957B1881962CD37F0663D80
Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/0735d197-9273-3075-b268-f6a4054268df.roa
Signing time: Sun 13 Sep 2026 13:00:11 +0000
ROA not before: Sun 13 Sep 2026 13:00:11 +0000
ROA not after: Sat 12 Dec 2026 14:00:11 +0000
asID: 12129
IP address blocks: 2620:84:c000::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:29:57:b1:88:19:62:cd:37:f0:66:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
Validity
Not Before: Sep 13 13:00:11 2026 GMT
Not After : Dec 12 14:00:11 2026 GMT
Subject: CN=8a98dbfa-6e82-4be0-b80e-290b7544e5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:6e:51:e0:95:f9:af:fd:c0:62:ca:00:6c:
ed:7f:8f:d8:fc:49:12:95:c6:54:82:d0:a0:74:e9:
2e:14:6e:4c:9b:d3:d7:83:88:34:01:cb:8c:c9:74:
f4:f7:f1:7f:e5:e7:e7:53:fc:89:26:90:be:ae:7e:
96:a0:6f:d1:fd:d8:fd:c5:44:b3:7f:5d:b2:e3:e5:
ba:6e:b0:39:74:47:c2:d0:2d:6f:04:b8:01:2c:06:
90:f7:e7:58:b5:06:0c:e5:6f:6a:81:7e:3a:ea:e8:
1e:23:ee:c6:e4:79:e1:fd:74:8c:64:a4:aa:78:fd:
b8:27:03:11:30:a2:50:c5:df:48:4f:dc:36:5f:64:
a1:53:be:c9:af:e5:f4:d7:ca:fc:7e:4e:e0:87:83:
05:32:d5:9f:bc:6a:bd:ed:0a:97:15:31:fe:09:c1:
09:dd:b7:63:98:77:17:98:99:f3:3f:1d:04:65:27:
e3:11:85:71:9c:68:ce:a5:7e:e5:e9:46:b1:ec:a2:
13:9b:11:60:a8:ea:8f:ed:cf:b9:61:9b:3c:73:05:
bf:0b:a0:5e:35:7b:86:8c:99:36:4c:2d:75:77:dd:
64:dd:63:d3:42:73:50:1e:a7:63:03:bd:fe:d3:27:
46:45:ce:af:30:be:ec:4d:db:02:2a:e9:18:a1:65:
20:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C4:9B:74:80:40:86:D4:1F:44:2B:DF:E9:7C:35:7D:18:20:20:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/0735d197-9273-3075-b268-f6a4054268df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl
X509v3 Authority Key Identifier:
keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:84:c000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:a0:a7:ae:a4:5e:e8:79:12:b4:4d:51:53:22:74:fe:4d:e5:
a3:78:ff:31:97:67:56:e6:71:6a:bf:2d:b1:2a:f9:8d:f7:5a:
35:15:35:b5:68:8a:07:02:e8:24:b7:e8:b3:1b:8e:48:aa:60:
7c:cc:bd:e7:05:d0:09:06:62:68:27:8a:53:ee:41:06:c4:ac:
e3:60:02:22:02:19:77:ce:50:e9:0b:8f:a1:1d:b7:ca:aa:03:
fb:a8:c2:f2:79:77:49:7e:eb:1b:ff:e5:e1:68:a9:db:f0:83:
48:5d:5b:00:23:5b:db:7b:14:24:42:2b:1d:9d:6e:35:a0:f9:
ff:10:50:34:1c:ae:90:07:ad:d5:36:de:8e:49:07:94:6d:30:
46:73:7d:09:da:60:46:c6:59:06:c3:5a:55:08:bf:19:48:39:
e3:c3:c5:a8:cc:e6:87:14:69:a6:de:c1:4f:6c:7f:92:e2:d6:
eb:0b:a0:7e:75:5c:c1:d8:80:33:73:f9:03:35:9d:73:6c:89:
ad:0b:42:33:f7:e7:f3:46:cc:0e:72:30:3b:27:bd:65:51:13:
cb:4b:c2:ec:b3:bd:a0:73:38:55:d6:b8:33:21:e0:8f:66:23:
ce:31:9c:aa:f2:be:72:a0:44:25:39:f4:dc:a8:d1:6a:e6:68:
fd:dc:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:42:44 2026 by rpki-client