
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/1f54617e-3c5e-3db3-ad0e-8c7f5e145528.roa
File: 1f54617e-3c5e-3db3-ad0e-8c7f5e145528.roa (raw, json)
Hash identifier: 5URaloajr3J7TapQKrmp/Z7ImacfT5NhZSLp3i5sS4s=
Subject key identifier: AC:9C:34:B1:CA:CA:53:E1:0A:0E:C9:DF:82:30:39:A3:09:6F:AA:7D
Certificate issuer: /CN=265b0641-047d-4787-a12d-159370bfcdb1
Certificate serial: 010D0C9F4328584D1F4A1C13CA64AC7EE0600760
Authority key identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/1f54617e-3c5e-3db3-ad0e-8c7f5e145528.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 20473
IP address blocks: 104.171.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:1c:13:ca:64:ac:7e:e0:60:07:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265b0641-047d-4787-a12d-159370bfcdb1
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=572cce8a-2886-47b8-89f3-cdbd228bb491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:55:12:ef:9d:24:c2:1e:7f:93:51:56:06:00:
72:93:3c:27:44:0a:01:4f:48:bd:b0:f7:0f:03:40:
e1:06:eb:cc:95:02:47:37:cc:f3:3a:ef:d5:2c:dc:
fb:30:a7:bc:12:be:47:df:02:0f:9b:a3:f5:b0:87:
4d:4f:1f:90:53:c1:1e:7e:f9:64:e8:4c:64:ee:fc:
d1:ad:06:43:a2:60:96:90:f9:7b:59:08:e2:bb:e4:
8a:2e:d3:f4:ce:09:27:fd:2a:bc:85:d8:43:2b:25:
b2:71:fd:cd:63:10:5b:92:e1:24:4d:76:90:4d:73:
6a:13:33:be:ce:1c:7c:8f:13:ee:3e:09:87:89:e9:
f9:c8:4a:eb:15:a0:a1:91:d1:26:49:61:3c:1f:b6:
f5:cd:3e:12:f6:c3:74:eb:89:84:e7:5e:41:57:76:
ef:1e:23:23:37:b7:71:9a:01:c3:22:da:34:90:70:
84:c4:67:84:07:b5:d9:85:ea:ff:1a:a1:7d:04:a4:
a9:b4:57:25:de:49:5c:37:a7:25:48:25:9a:20:cc:
fc:9d:2e:2d:95:ab:f2:05:2c:4e:2d:86:25:b8:1d:
ab:0b:ef:a1:aa:9a:48:6f:20:69:74:78:4a:21:de:
b1:fe:45:dc:79:61:41:29:80:34:23:15:9f:01:dc:
4e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9C:34:B1:CA:CA:53:E1:0A:0E:C9:DF:82:30:39:A3:09:6F:AA:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/1f54617e-3c5e-3db3-ad0e-8c7f5e145528.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl
X509v3 Authority Key Identifier:
keyid:26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer
sbgp-ipAddrBlock: critical
IPv4:
104.171.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:92:2d:03:50:64:4d:61:f0:bb:af:4d:68:4e:06:dc:d3:ef:
a9:4f:17:53:e7:d9:c8:bd:26:55:0e:29:95:5b:bd:20:30:aa:
8d:a8:1a:fb:ea:34:10:d3:b0:30:f6:86:6e:82:8a:04:79:5c:
3f:74:03:27:d2:b5:5e:ae:59:43:1a:71:68:20:b6:49:a3:ef:
ca:8f:9d:e3:5e:ae:34:40:46:63:ee:eb:56:7f:2e:b7:48:a6:
ad:b4:03:2d:19:0f:03:a4:d8:ca:28:aa:97:de:4a:b2:47:83:
02:54:49:83:39:12:e1:c3:03:f9:12:00:76:64:9d:1d:30:72:
0d:8a:21:1e:7f:9d:fd:9e:14:a9:ab:8d:a9:a6:7d:ca:d7:6a:
4d:7e:70:c7:20:94:f0:84:ba:f2:b0:42:55:27:a4:80:cd:c9:
a1:28:e1:6b:f6:3e:5d:75:ab:76:5a:32:96:66:b1:57:41:24:
95:8d:fb:fb:f6:17:3e:8c:b5:62:30:e7:a5:ad:83:93:5a:b1:
7e:5d:c9:37:70:b4:f5:d9:25:05:ce:b5:9f:a0:66:6f:7e:1f:
79:8d:ee:09:27:e0:da:b5:c6:14:24:06:ff:06:c2:0f:0b:e4:
3c:9f:42:a1:bd:0f:ba:2a:fb:1a:25:c8:48:1b:d0:c2:55:98:
38:d8:13:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:21:55 2026 by rpki-client