
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3ff2d6f9-c66c-3621-92df-b8eb3ed0a323.roa
File: 3ff2d6f9-c66c-3621-92df-b8eb3ed0a323.roa (raw, json)
Hash identifier: 1AqkRzdTZEJLuzriaLQ9U4e/3KrWvPPfVxUkury9iYw=
Subject key identifier: C4:D7:BC:F5:C0:06:7C:B1:B1:D3:AE:61:AE:5F:90:5E:BC:1F:8B:F3
Certificate issuer: /CN=09c51633-340e-4eac-820c-a36b33746085
Certificate serial: 010D0C9F4328584F497634ABED99C7B3E0523CC0
Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3ff2d6f9-c66c-3621-92df-b8eb3ed0a323.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 13928
IP address blocks: 199.21.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:34:ab:ed:99:c7:b3:e0:52:3c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c51633-340e-4eac-820c-a36b33746085
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=1bfad5e9-eb0e-4894-8c01-af291227409a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fb:1d:78:ef:ed:e5:5a:32:6e:9d:f8:6f:72:
99:06:45:56:77:ff:3c:d1:1e:10:1b:b7:f6:39:0a:
b5:7d:2c:8f:6d:6b:26:7f:ff:14:30:95:db:0b:56:
b8:b4:8b:0d:f8:fe:d5:90:09:b5:04:ad:81:6c:68:
d0:48:dd:a3:c5:f2:e3:61:23:00:30:1e:d3:16:b7:
31:c0:9c:28:1e:54:e6:c8:1e:2a:c1:1d:ca:f7:8b:
76:c4:e7:38:c4:93:66:b4:84:4b:21:10:88:8a:90:
19:7f:f5:dc:17:ad:34:ac:80:43:15:39:d1:76:c5:
e8:27:4e:dc:05:4a:57:e0:9c:e8:6c:4b:fb:a3:7a:
5a:ca:50:e6:77:d7:18:5c:e8:80:43:32:df:98:4d:
9c:e0:22:0e:07:fc:0c:ba:36:6e:55:fb:84:60:34:
4f:55:c9:09:25:22:eb:b0:b9:66:34:83:2a:3a:51:
c9:02:b3:c8:27:34:c8:33:d7:26:35:90:ee:58:27:
8d:b9:95:a8:a4:32:97:9b:ee:5f:c8:c0:ea:29:c5:
56:4e:ee:f5:1d:22:cf:03:b8:85:b0:b4:9e:12:7b:
6f:05:23:f1:22:69:80:93:cd:5b:2d:e3:8a:c8:cd:
af:3e:b7:3e:6e:e9:b9:44:9c:77:55:99:54:b5:97:
a8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D7:BC:F5:C0:06:7C:B1:B1:D3:AE:61:AE:5F:90:5E:BC:1F:8B:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3ff2d6f9-c66c-3621-92df-b8eb3ed0a323.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl
X509v3 Authority Key Identifier:
keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
sbgp-ipAddrBlock: critical
IPv4:
199.21.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:7b:36:0e:17:92:f1:2e:ac:1d:08:12:4e:5e:63:ec:77:09:
50:24:d8:81:00:17:d0:da:9e:b6:1a:ec:07:0e:9a:32:22:7a:
79:96:af:0b:d2:5e:89:64:6e:51:05:74:67:2a:7b:fb:a2:78:
75:80:7f:54:a2:04:94:36:f0:88:0d:91:51:a4:ee:1f:e9:e4:
23:d6:93:ed:db:bb:f8:c5:66:f3:31:ad:3e:6b:de:32:53:af:
de:1a:42:85:01:c2:d5:f3:25:f5:50:75:a5:a8:5a:d3:52:0c:
cd:6c:ea:d0:9e:e9:1b:e7:4e:d1:bf:b0:5f:a8:98:33:fd:6b:
dc:2b:4b:ee:d2:03:09:cd:6d:c8:6b:47:c7:e4:08:d5:61:c9:
9c:42:3a:48:09:82:06:a7:e7:aa:f0:57:e5:6a:14:b1:30:29:
2d:b4:f6:81:20:b2:04:d1:87:c5:07:66:a9:25:3e:6f:d4:a9:
c4:91:a2:12:9f:39:68:32:c1:f5:02:a0:bc:b7:63:cc:57:90:
e1:e0:b6:c6:33:0f:6a:2f:11:bb:d0:87:d4:b6:e1:f2:b8:2a:
97:03:62:c3:fe:48:1b:55:51:ba:2e:7b:f3:2c:31:68:a3:1f:
9e:ac:1d:e8:9b:64:0e:ce:b6:6e:4b:15:9f:c1:89:8e:04:bf:
f0:07:e3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:53:43 2026 by rpki-client