
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/21908a76-1951-32c5-96cf-7506f81108ff.roa
File: 21908a76-1951-32c5-96cf-7506f81108ff.roa (raw, json)
Hash identifier: 6+pWtQD6gHPggsour5x3OmZaMEAD0gSu8/U0NsWM17g=
Subject key identifier: 7B:D4:00:AF:F3:AD:FC:43:BB:03:AA:CA:5B:A3:B2:6D:8E:F7:98:5B
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328584D24E0EA6C2AE2B2A02D3561B2
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/21908a76-1951-32c5-96cf-7506f81108ff.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 36492
IP address blocks: 136.22.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:ea:6c:2a:e2:b2:a0:2d:35:61:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=9356f61d-4544-4418-a042-ad9bc72e5658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:b7:ca:32:d5:83:b5:bf:95:bf:aa:94:d6:
64:e2:f6:92:c8:03:b5:e3:8b:70:8f:6f:c6:1a:f8:
54:58:64:34:97:8e:a1:9e:bb:91:b3:56:3c:19:cf:
5f:8f:00:74:30:c1:eb:8e:62:ab:9f:8f:04:b7:bc:
65:c5:47:20:41:02:9b:64:fd:f1:99:14:ad:3f:9a:
e0:45:c8:99:1a:06:b2:eb:5c:45:2a:c5:3d:fb:1e:
07:0c:b4:10:a6:53:78:9f:44:fb:ad:55:87:79:c0:
dc:4d:93:05:de:2a:fd:d2:a4:a6:19:81:27:08:9f:
e2:c5:fa:33:e8:8c:cb:7a:16:2a:6a:2e:f9:39:65:
52:af:06:37:34:c1:bd:25:c7:77:07:7e:11:7d:80:
f8:5a:0e:50:78:ad:6e:1a:ab:8d:44:1a:54:b7:3d:
9a:3c:60:4c:68:4e:6b:71:de:ff:02:3e:12:a4:a6:
a3:0e:98:9f:57:8e:1e:c3:de:1a:bd:af:11:fa:a9:
d7:a6:68:47:57:0d:e3:8b:4f:a9:0b:0a:56:4c:ed:
be:18:6a:46:4f:7b:56:eb:30:b1:9a:e9:b7:11:72:
74:a7:d7:4b:e9:fa:7c:94:cb:c5:3b:45:e7:f6:55:
df:28:d9:cf:79:c5:27:a6:03:48:a5:af:cc:68:2a:
91:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D4:00:AF:F3:AD:FC:43:BB:03:AA:CA:5B:A3:B2:6D:8E:F7:98:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/21908a76-1951-32c5-96cf-7506f81108ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:69:ab:29:3c:31:81:48:7b:f8:b5:68:0e:83:7c:04:e5:db:
08:71:7b:d0:8c:6c:fa:a4:e1:a3:17:c6:86:b7:18:37:fa:a2:
3c:70:5b:fb:f6:bf:63:54:1b:df:0a:6a:31:9d:57:18:c6:19:
c8:5b:14:64:0c:0e:44:39:6d:c5:0a:8b:d5:43:80:17:05:ce:
c7:c1:b5:f0:79:43:55:f6:6e:c2:90:d8:d2:b8:2e:db:a0:be:
ae:1a:1c:3c:01:96:31:05:37:30:67:9c:d1:69:ce:91:88:93:
bc:1d:16:d2:2d:20:57:7c:2a:2a:e0:93:89:50:59:7f:ba:e6:
31:bb:f0:fb:1b:ee:75:05:49:10:7a:59:c6:17:04:7a:71:8b:
36:8a:06:a3:27:9b:fe:38:ba:44:3a:83:a0:3a:ab:0b:ac:31:
63:52:50:51:3e:6e:46:ff:f3:e3:a1:3e:27:43:23:01:d0:6e:
8b:38:e6:8b:8a:41:02:6f:4d:3c:b2:c5:68:35:32:0a:d7:32:
c4:da:89:b6:49:e8:e7:bf:5d:b9:75:14:5b:d8:77:b9:ec:e7:
c2:b3:9a:5a:7a:3e:54:fb:64:17:eb:8c:6b:ca:41:72:67:55:
b7:84:f2:f4:d8:e7:7f:b7:aa:87:a0:bc:64:79:2f:0c:51:e7:
d1:e5:42:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:36:46 2026 by rpki-client