
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/21b49b53-db5f-37a1-a089-4419a534ed78.roa
File: 21b49b53-db5f-37a1-a089-4419a534ed78.roa (raw, json)
Hash identifier: uFk1RUiJ/6WL5Z4DgthwexiwPyhPofUxL4Li10tJlbA=
Subject key identifier: D5:A2:FF:AD:17:6C:4C:7C:F9:FD:43:F0:0E:42:46:44:BB:41:B5:73
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584D146D8A514BCB3799FA042D00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/21b49b53-db5f-37a1-a089-4419a534ed78.roa
Signing time: Fri 06 Mar 2026 15:38:27 +0000
ROA not before: Fri 06 Mar 2026 15:38:27 +0000
ROA not after: Thu 04 Jun 2026 14:38:27 +0000
asID: 81
IP address blocks: 128.109.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:6d:8a:51:4b:cb:37:99:fa:04:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 6 15:38:27 2026 GMT
Not After : Jun 4 14:38:27 2026 GMT
Subject: CN=3da1fd4e-5933-4ebf-adfd-2324b5eb4849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d8:06:e8:3e:26:22:a5:79:cd:4f:f9:16:4c:
0b:f7:65:50:4c:3d:64:0c:b0:13:23:d9:69:36:2e:
41:15:98:1b:0c:a3:e7:03:59:af:6a:25:31:30:62:
a6:0b:6a:22:b5:be:57:49:e9:c5:49:eb:66:0a:24:
89:49:1e:6c:82:e0:2e:ed:f5:f0:99:fd:0e:0b:35:
2b:12:90:02:92:41:a6:4c:b5:dd:b0:88:3e:57:d9:
97:87:15:7d:0b:c5:c3:2a:73:f8:49:72:b3:42:c6:
38:ac:9d:01:c1:cf:3e:e5:6c:1d:c0:ce:e2:26:dc:
5f:a9:a5:f2:71:dd:22:d9:22:15:0a:83:81:7c:60:
db:0b:c1:cf:d4:9a:05:a4:08:b6:62:b9:23:2f:99:
98:d5:4c:6d:6d:90:e7:08:07:43:36:b5:3c:8c:7d:
1f:1d:6a:29:0d:f5:1f:5c:c3:7a:5d:b8:64:e9:64:
67:0f:28:6a:7b:65:ea:71:42:d2:7f:84:19:31:3d:
cd:15:8f:4f:f7:60:d1:13:ba:40:45:69:7a:27:6c:
e1:2e:c1:e0:de:40:53:9f:23:77:58:c4:14:e3:4d:
f8:d4:ef:94:be:08:ad:0e:9a:c9:bd:2e:cc:54:c1:
56:ad:ad:4e:5e:25:cd:94:39:81:54:3f:60:1a:b3:
47:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A2:FF:AD:17:6C:4C:7C:F9:FD:43:F0:0E:42:46:44:BB:41:B5:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/21b49b53-db5f-37a1-a089-4419a534ed78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:97:55:a4:67:25:6f:bc:8b:06:6a:51:8a:aa:8d:3b:91:46:
63:20:c0:d3:c3:f0:fb:65:b3:71:e8:37:ea:19:a6:0d:f2:32:
83:48:af:0e:0a:eb:23:f9:c1:04:6c:b7:e2:a1:5b:58:70:a6:
77:d2:14:9b:6a:bf:50:eb:db:46:2c:52:72:0e:f3:a2:d1:d0:
9b:7d:f2:28:ff:8d:73:93:84:ed:35:35:cf:ec:b0:20:e7:ff:
5c:76:bf:44:3c:e0:b2:3a:2d:2c:02:76:e2:5a:15:ef:ca:27:
94:83:3c:70:cc:31:9d:f2:1d:02:54:1c:91:60:2f:4a:36:02:
61:35:87:b3:f0:ba:73:c3:f6:96:e2:dc:f5:d1:d6:08:e2:f7:
b8:92:f1:12:d7:09:33:b6:96:45:cc:9e:8a:02:00:b6:05:5c:
e8:94:65:7c:19:78:3c:b9:c3:0d:57:05:74:d9:98:56:73:d2:
44:c8:71:aa:60:75:c9:ca:80:b2:29:04:0d:1e:ec:eb:90:be:
16:f6:4e:5f:b5:82:76:ef:88:ee:a9:fc:e7:1a:2c:9b:e0:1a:
5d:18:62:b6:a4:d9:a7:6d:1a:fc:4c:46:10:0a:dc:4b:fd:19:
a9:30:4d:53:bc:d4:eb:d8:20:45:ea:ae:c7:96:73:53:96:e8:
2f:db:47:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UbYpRS8s3mfoELQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDMwNjE1MzgyN1oXDTI2MDYwNDE0MzgyN1owLzEtMCsGA1UEAxMk
M2RhMWZkNGUtNTkzMy00ZWJmLWFkZmQtMjMyNGI1ZWI0ODQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdgG6D4mIqV5zU/5FkwL92VQTD1kDLATI9lp
Ni5BFZgbDKPnA1mvaiUxMGKmC2oitb5XSenFSetmCiSJSR5sguAu7fXwmf0OCzUr
EpACkkGmTLXdsIg+V9mXhxV9C8XDKnP4SXKzQsY4rJ0Bwc8+5WwdwM7iJtxfqaXy
cd0i2SIVCoOBfGDbC8HP1JoFpAi2YrkjL5mY1UxtbZDnCAdDNrU8jH0fHWopDfUf
XMN6Xbhk6WRnDyhqe2XqcULSf4QZMT3NFY9P92DRE7pARWl6J2zhLsHg3kBTnyN3
WMQU40341O+UvgitDprJvS7MVMFWra1OXiXNlDmBVD9gGrNHnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNWi/60XbEx8+f1D8A5CRkS7QbVzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMjFiNDliNTMtZGI1Zi0z
N2ExLWEwODktNDQxOWE1MzRlZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG0wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqXVaRnJW+8iwZqUYqqjTuRRmMgwNPD8Ptls3HoN+oZpg3yMoNIrw4K
6yP5wQRst+KhW1hwpnfSFJtqv1Dr20YsUnIO86LR0Jt98ij/jXOThO01Nc/ssCDn
/1x2v0Q84LI6LSwCduJaFe/KJ5SDPHDMMZ3yHQJUHJFgL0o2AmE1h7PwunPD9pbi
3PXR1gji97iS8RLXCTO2lkXMnooCALYFXOiUZXwZeDy5ww1XBXTZmFZz0kTIcapg
dcnKgLIpBA0e7OuQvhb2Tl+1gnbviO6p/OcaLJvgGl0YYrak2adtGvxMRhAK3Ev9
GakwTVO81OvYIEXqrseWc1OW6C/bR+8=
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:21:34 2026 by rpki-client