
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec783c90-441a-3a43-8e6a-884b1f3c031a.roa
File: ec783c90-441a-3a43-8e6a-884b1f3c031a.roa (raw, json)
Hash identifier: 10XczoDib0TJOHueg//9oAkLXtSSC/HDXNWgwsuOQJw=
Subject key identifier: 7E:4F:13:7E:4D:7D:29:7C:D2:B8:CF:C8:37:0E:16:66:B0:CD:D1:F1
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F49738AD4C6BD1F929BBD8EB0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec783c90-441a-3a43-8e6a-884b1f3c031a.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 19905
IP address blocks: 173.21.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:8a:d4:c6:bd:1f:92:9b:bd:8e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=94867422-0660-45ed-a260-4250de26f78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:1b:01:14:c5:ef:94:0d:37:a9:f8:69:4a:
db:c4:1b:35:f2:4b:a8:0b:c5:d9:35:9f:6e:9b:f1:
45:fe:65:00:3a:f7:18:ce:8c:bc:b1:63:72:61:11:
6d:e9:87:93:67:dc:ed:d7:2a:67:20:4d:ea:05:23:
3a:68:a4:11:bf:fb:34:82:f4:6d:82:fe:62:3f:2f:
8a:38:4b:13:62:cc:96:7b:41:29:2a:0a:de:ed:ce:
16:e7:9a:72:18:39:d8:88:c3:85:1d:ed:ba:b9:ba:
76:a4:c6:40:d4:1b:26:0b:29:33:65:c8:a8:0f:32:
e7:e0:61:59:b9:35:62:4c:9e:33:37:eb:0a:ff:e7:
68:ef:df:c7:07:86:0e:91:ec:a1:ce:08:96:2e:9e:
66:93:9a:00:79:4a:01:cf:0a:bb:2b:fc:92:74:9e:
7f:fc:ee:1d:0c:98:80:f2:f0:e0:b6:23:47:ee:2e:
c1:9e:3e:4d:f2:11:ec:d4:24:d2:96:25:ed:c4:b5:
c1:37:30:01:79:bd:fe:4d:b4:82:02:c1:ab:d3:ec:
55:fb:03:b7:8b:9a:d0:d7:59:26:a9:85:ee:53:c7:
25:c4:ef:6d:76:26:50:af:0d:85:e0:91:a1:0d:71:
31:eb:aa:27:74:6b:b1:73:31:79:89:4d:b2:c4:d5:
b3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4F:13:7E:4D:7D:29:7C:D2:B8:CF:C8:37:0E:16:66:B0:CD:D1:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec783c90-441a-3a43-8e6a-884b1f3c031a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:08:0a:80:de:9c:90:a1:e3:c5:2b:9a:d2:42:64:da:04:39:
95:e9:ff:f8:a5:a9:1d:d7:0b:80:a6:a6:cb:1e:e4:72:d1:cb:
bc:6f:f6:63:48:57:52:79:b7:45:88:81:1f:62:f4:91:09:80:
d4:2a:75:d3:d7:74:c0:50:5d:1e:82:6a:c3:d4:68:93:bb:af:
8d:33:3b:2a:aa:bc:24:bb:42:a2:fc:cb:e6:07:a6:f4:ad:c5:
b3:49:57:41:23:a8:a3:d5:a5:2c:ae:6a:3e:b2:3b:49:4e:65:
84:e6:e0:c3:ab:a1:3d:07:2c:a1:50:67:20:c3:b8:35:87:0f:
6c:37:34:5a:5d:b9:d2:36:a3:df:93:3d:1f:b7:46:b3:94:27:
71:07:d3:8f:6c:34:6c:56:27:71:8a:e6:07:6e:fa:37:f5:8d:
70:da:7f:5b:ab:4e:70:55:84:be:db:32:24:fb:ca:8b:53:3c:
fe:fd:8f:28:69:53:ed:f7:44:c4:f2:e9:70:49:e7:84:7e:91:
59:d0:16:23:35:b4:4b:6e:98:8a:bc:a2:f3:89:b9:a0:69:4c:
09:63:0c:b2:71:b8:36:28:33:a4:9f:af:f8:74:a3:8d:a3:ba:
df:ae:d3:82:da:9f:29:0d:d1:da:95:0a:0e:18:36:c4:90:63:
63:9e:53:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:57:10 2026 by rpki-client