
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa
File: d73092b4-54aa-3405-a3ca-45d7d6798270.roa (raw, json)
Hash identifier: 5kuimUk7Ba/rv3izCQyDKICdb2wSDm3MeU8YAYfUhes=
Subject key identifier: E1:F7:94:57:27:D2:59:5A:DD:C9:E5:50:D7:E0:1B:7B:DE:D8:D8:FC
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584F498902D132393CE8C7BC9A80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 23473
IP address blocks: 216.171.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:89:02:d1:32:39:3c:e8:c7:bc:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=3d271c0c-b947-4fca-b62b-5b213f58ab9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:2f:15:98:75:b5:5b:98:8e:90:73:40:41:
39:fd:47:6f:a1:22:5a:a5:59:40:f8:34:8d:14:84:
66:e1:ac:18:0a:6a:64:7e:f4:9d:e1:b7:42:22:0e:
22:a4:a0:59:5e:84:0c:5f:c1:78:c8:82:b9:a4:a9:
ee:50:01:a5:87:8a:c5:bf:6d:f6:1a:58:7c:82:c9:
74:ab:a8:e4:05:a4:fe:ac:dc:f0:9a:e1:b2:a1:74:
6a:65:48:b3:6b:3c:b7:16:dd:09:28:36:29:a9:1d:
df:83:e5:2b:61:a1:95:6f:ae:d0:36:fa:a9:0b:4a:
05:05:87:f4:ba:24:30:e4:c5:4a:7f:07:cd:a0:df:
5d:3b:b3:f6:16:ad:25:cc:3a:50:3f:48:b6:69:40:
22:e7:0c:4f:57:ff:e7:54:fe:c7:7b:47:d6:ef:72:
8d:14:59:aa:61:29:75:4b:99:fa:74:32:6d:6a:48:
b3:ea:03:0c:fd:18:f8:46:de:03:e3:31:76:e1:54:
a8:b8:73:98:20:83:81:00:78:bd:c4:63:1b:93:e6:
7d:87:50:30:53:c6:bb:ab:8f:a8:f7:86:7a:96:6d:
68:c3:3a:bc:06:3d:e6:92:88:5c:b7:b4:8d:31:d2:
70:6d:dd:e5:87:8f:cd:63:e0:8f:34:8f:ee:fe:82:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F7:94:57:27:D2:59:5A:DD:C9:E5:50:D7:E0:1B:7B:DE:D8:D8:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
216.171.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:40:ee:4a:47:5f:97:bc:a1:1a:c3:71:7f:3b:b9:86:b1:c9:
2f:cb:26:21:12:d7:99:0d:49:58:20:fb:b6:d6:65:63:3b:ae:
21:30:e0:ed:4a:c7:ad:7e:3c:f5:4b:7f:15:20:48:7d:9a:e8:
3e:51:ff:d0:23:85:9d:63:18:9f:e1:97:98:a9:a5:8b:bb:f1:
0a:0d:fa:1c:d7:34:7f:92:3b:01:ea:d2:9e:4d:99:8e:d1:d4:
d3:15:bf:fc:b4:f7:89:b1:80:85:9e:0b:f7:ef:7b:a6:f0:5f:
16:a4:26:96:4c:56:df:25:ab:03:10:4c:e4:0c:1d:de:0d:2a:
5e:fa:8a:1e:fd:04:c9:e6:67:b8:fb:99:37:da:d6:f2:90:c6:
e6:35:0e:ac:ff:0a:e2:f3:60:8a:34:de:ae:cc:3d:8f:60:2b:
6a:fc:09:66:f9:f9:8f:bb:81:51:75:5d:bd:79:60:bb:4c:53:
fe:23:e7:c1:09:aa:17:e8:0f:ca:8f:da:ee:a7:33:52:f7:35:
43:88:69:89:8b:83:28:ae:a0:c0:16:80:7f:51:25:be:49:61:
5d:05:d2:27:01:91:bb:d2:bc:60:ee:f7:d7:90:9b:33:c2:ed:
11:2f:8f:b3:06:dc:59:10:c6:43:62:61:dc:e9:df:e4:ba:26:
00:d5:31:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:41:00 2026 by rpki-client