
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa
File: 503a28c0-4f23-38d6-94cd-f22d4c077e71.roa (raw, json)
Hash identifier: pLrpU76Qb8sTmwjyiL9HpM2KCOok6328nVr3r8SgSDc=
Subject key identifier: D8:52:B9:E6:59:A5:2D:7A:92:E8:27:EB:C3:46:62:3F:F2:FC:23:3C
Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
Certificate serial: 010D0C9F4328584E86F4ED73C06B66396396BD20
Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa
Signing time: Fri 17 Jul 2026 09:00:14 +0000
ROA not before: Fri 17 Jul 2026 09:00:14 +0000
ROA not after: Thu 15 Oct 2026 09:00:14 +0000
asID: 30242
IP address blocks: 2620:84:c000::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:86:f4:ed:73:c0:6b:66:39:63:96:bd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
Validity
Not Before: Jul 17 09:00:14 2026 GMT
Not After : Oct 15 09:00:14 2026 GMT
Subject: CN=08cc9401-3a26-4ead-8e73-0179c459081d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:0b:5e:c1:c1:9b:22:d3:52:d2:8e:d1:af:
2c:f0:a6:b6:07:81:7a:d7:de:c8:8e:81:4d:04:32:
1e:ef:56:5b:bd:81:0d:36:43:07:83:b2:32:d6:2c:
35:77:d9:66:5c:49:65:ce:2a:f8:06:c0:e5:86:ba:
ae:94:d3:05:76:53:10:6d:b1:12:9c:ec:f8:c3:30:
27:89:1a:f6:48:f2:42:ea:bf:d0:09:86:46:39:0f:
f1:b3:de:f4:6e:5a:ef:bd:7c:96:03:65:e9:95:3d:
c7:29:ae:15:51:b7:b5:f9:b4:90:fc:72:8b:27:25:
bc:7d:2f:40:b6:f8:2d:65:39:78:f0:bd:e4:e5:75:
e6:54:f5:24:81:52:11:bf:27:a9:ef:9e:36:a7:34:
0f:60:1c:4a:e8:59:e0:77:ed:19:53:74:e4:40:13:
bc:c8:11:65:8c:42:b5:a9:11:f0:50:84:ed:1f:04:
9a:62:45:b4:66:52:17:98:0a:e1:2d:01:81:81:8e:
07:f0:b1:93:30:ca:d8:0e:f2:8c:56:6a:38:1f:10:
11:34:17:20:cc:63:df:01:04:2c:3c:cf:21:e0:d1:
19:42:e9:85:05:b6:fd:0e:65:ca:59:13:67:64:25:
19:84:03:a3:82:a7:cd:b6:2a:d3:30:e8:56:27:26:
0a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:52:B9:E6:59:A5:2D:7A:92:E8:27:EB:C3:46:62:3F:F2:FC:23:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl
X509v3 Authority Key Identifier:
keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:84:c000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:9d:1f:4f:22:58:ff:7c:6c:76:f6:31:b8:c4:39:57:4d:76:
32:e9:41:ad:db:5b:c8:14:61:66:00:d9:65:d6:e5:b6:bc:46:
da:bd:f3:96:78:c0:9f:d2:be:e6:6d:bd:ef:18:49:77:31:79:
f1:c8:0d:a6:7d:b2:7d:2b:f9:10:c9:6d:5e:96:5b:34:f7:76:
ca:d4:7c:e4:73:9e:c8:b4:66:20:81:ac:59:26:28:95:f7:a7:
7e:92:60:d0:d8:b7:ee:c3:08:52:c1:96:5a:ae:c9:db:35:e8:
cf:6d:11:29:e1:99:31:11:fd:03:10:53:21:3f:65:35:cd:48:
bc:85:f8:06:0c:f8:52:c4:a8:45:2e:98:2f:e2:6c:72:b2:8f:
49:6e:b4:16:22:f0:84:21:9f:78:f8:76:4b:3d:22:b6:39:b8:
d7:12:d9:68:52:95:29:a4:ad:11:75:bd:de:da:5a:27:2d:ce:
72:35:b6:cc:a4:b8:47:51:a4:f1:e3:17:e6:f8:14:6e:c4:37:
84:c9:fd:48:54:76:c8:b9:ee:3a:fc:2a:85:74:1e:a0:b5:f1:
ec:26:94:ad:ae:ba:4e:e5:56:cd:eb:5e:d8:7e:ce:6e:92:22:
16:f1:55:81:62:34:cb:cd:c3:82:4b:ff:7f:e9:df:93:78:b2:
8e:73:55:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:49:30 2026 by rpki-client