
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/13ad9c53-2bea-3d0b-af1f-09c18fdfea58.roa
File: 13ad9c53-2bea-3d0b-af1f-09c18fdfea58.roa (raw, json)
Hash identifier: 2DPsQIDGOH+L+/G95sldw+85mzqOA3s0VlwEsv2Lhw8=
Subject key identifier: 92:30:07:37:4D:B8:E6:02:2A:84:3E:5C:17:2A:2B:A0:6C:AC:CB:48
Certificate issuer: /CN=5a060f48-6584-4864-ba80-2bac55c51550
Certificate serial: 010D0C9F4328584F4976928B4809471D0C8FDC80
Authority key identifier: 3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/13ad9c53-2bea-3d0b-af1f-09c18fdfea58.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 22363
IP address blocks: 216.168.20.0/24 maxlen: 24
216.168.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:92:8b:48:09:47:1d:0c:8f:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a060f48-6584-4864-ba80-2bac55c51550
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=19d27aca-6ba5-49f9-8327-7391b12ac6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c7:f5:2a:df:9a:ac:f6:d1:3e:c9:80:eb:9a:
12:96:d9:d6:a2:35:0d:b2:a9:f7:a8:20:3e:2f:3a:
ab:89:13:30:fa:1d:18:c8:b4:0a:53:54:da:16:16:
fc:20:63:60:91:b6:83:99:b1:ee:4f:ab:4c:48:d6:
2e:38:56:67:b9:7b:7d:40:87:2f:c1:31:c7:7a:b0:
4a:98:f7:85:70:24:1c:b7:56:c6:a8:a2:5b:39:9b:
eb:06:4e:aa:6e:48:45:8b:a9:f1:b1:35:47:62:e1:
4a:1e:d0:c7:4f:7a:a0:31:07:ed:2e:5a:e5:79:32:
64:d5:fe:99:37:59:49:90:14:e3:ed:14:b4:05:81:
6d:af:86:0b:b1:f9:90:4d:d9:8e:d6:77:9d:73:80:
26:7d:0b:c4:b2:69:7a:21:c2:60:69:d5:4e:82:68:
10:a9:a8:33:bc:59:54:3a:18:1a:95:f7:2e:44:21:
08:4e:fd:cf:72:47:81:fe:f4:51:18:7b:c8:c1:2b:
d7:7d:3e:68:c0:e7:31:fd:d6:9d:c1:4b:45:d5:68:
d0:30:92:11:02:94:34:d4:62:b9:8f:fc:89:67:8c:
e8:90:ce:3f:d4:be:b1:c8:93:2f:c3:d6:b1:b9:bb:
78:6d:3f:11:5a:2c:d5:7f:74:bf:a1:c8:1b:aa:6b:
08:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:30:07:37:4D:B8:E6:02:2A:84:3E:5C:17:2A:2B:A0:6C:AC:CB:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/13ad9c53-2bea-3d0b-af1f-09c18fdfea58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.crl
X509v3 Authority Key Identifier:
keyid:3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:2f:f5:73:a5:96:3d:b7:dd:f5:28:b7:15:93:98:9c:4b:5e:
ee:d1:01:53:19:13:99:c9:2e:fb:91:0a:1e:71:a7:be:82:7e:
f3:98:0b:4b:ab:70:24:03:e7:25:ee:5a:43:7d:9b:b7:12:49:
d6:a0:1c:85:a6:86:d6:16:ef:4b:c8:59:63:55:7c:61:03:76:
fe:bb:fb:7f:14:c5:0a:a8:c1:e6:fc:d5:cd:49:b2:d5:c4:3e:
35:43:b8:28:5e:e6:b9:e0:61:e3:45:5d:e7:e0:f8:8f:7b:4c:
fd:8c:2f:3f:29:10:24:06:cb:b6:dd:00:32:c1:ad:d4:f5:b6:
3c:d1:f9:70:26:a0:ec:33:ee:8d:06:6f:23:68:d9:eb:fb:4b:
36:9b:e6:e8:eb:7d:04:bb:eb:1e:17:04:35:92:c9:5a:b8:a4:
5e:bb:4b:bd:07:ac:31:0f:56:20:80:bb:72:c3:1e:1d:f2:7d:
47:a7:52:3a:8c:a3:dc:2f:7e:e0:8e:d1:a6:a1:d1:84:c4:1e:
d4:cd:ac:2f:23:3b:de:3a:39:03:b4:fd:38:eb:57:e1:2f:9f:
b1:3f:5f:7a:04:30:25:a8:de:eb:1c:37:bc:f3:8a:ea:c2:b3:
66:3d:a4:52:65:4d:99:d3:8c:bb:ae:73:68:e4:e3:d6:2f:19:
d0:d3:20:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:31:29 2026 by rpki-client