
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/81a2323d-f9d4-3b36-9d0b-0baf160211f4.roa
File: 81a2323d-f9d4-3b36-9d0b-0baf160211f4.roa (raw, json)
Hash identifier: NU2gD63ieFqCfXuNLI4nEoOKRKtq5YFoI2osIvPi9B8=
Subject key identifier: C6:18:E1:70:9C:96:03:64:81:F5:5A:EE:C2:F8:F5:CE:02:47:AA:A2
Certificate issuer: /CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6
Certificate serial: 010D0C9F4328584E78FF827307917E9EC2E23CA0
Authority key identifier: 0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/81a2323d-f9d4-3b36-9d0b-0baf160211f4.roa
Signing time: Sun 12 Jul 2026 09:00:11 +0000
ROA not before: Sun 12 Jul 2026 09:00:11 +0000
ROA not after: Sat 10 Oct 2026 09:00:11 +0000
asID: 14618
IP address blocks: 209.51.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:78:ff:82:73:07:91:7e:9e:c2:e2:3c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6
Validity
Not Before: Jul 12 09:00:11 2026 GMT
Not After : Oct 10 09:00:11 2026 GMT
Subject: CN=bd1dfe3b-19fc-4d05-8014-81335deba9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:11:51:63:83:33:94:b0:62:2d:be:98:47:73:
93:75:6d:26:73:20:45:3a:9b:42:df:3e:88:79:9d:
c2:f0:41:79:17:12:9f:c8:49:e4:d9:79:41:a1:d4:
61:5e:54:b9:07:b8:2e:72:8a:5d:33:8f:bf:a4:c7:
40:2a:b2:5b:ec:c5:ed:3a:81:b7:38:16:4b:b3:f0:
c9:be:13:fa:a7:34:5c:ff:cf:b9:d2:2c:9f:bb:e1:
0f:94:92:42:a2:4a:3e:8d:14:7b:80:c8:9e:2d:9d:
80:38:2f:a7:3f:9e:19:27:6b:fb:96:a4:0c:a8:21:
01:bd:64:60:8f:25:e9:b2:46:98:75:57:84:59:e8:
05:fa:f3:35:8b:84:43:3a:2a:7e:ef:64:d1:09:e3:
02:c5:17:4f:0e:63:5b:50:c2:cb:56:70:62:61:91:
a0:79:6a:4c:5b:4f:ad:d3:ee:6b:48:5a:ea:c0:2e:
cb:a8:ca:1e:ee:e3:97:9a:ec:93:2e:e7:4e:ee:e7:
fa:1b:29:d7:cc:3d:2c:52:ca:24:00:a4:13:b8:15:
e2:f5:6d:49:16:ad:fe:cd:ab:91:86:74:57:37:63:
55:94:01:02:8a:08:39:d3:c1:61:f0:ae:1d:aa:24:
be:a7:63:17:52:09:6b:3f:82:e5:57:9b:b6:04:55:
cf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:18:E1:70:9C:96:03:64:81:F5:5A:EE:C2:F8:F5:CE:02:47:AA:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/81a2323d-f9d4-3b36-9d0b-0baf160211f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl
X509v3 Authority Key Identifier:
keyid:0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer
sbgp-ipAddrBlock: critical
IPv4:
209.51.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:38:12:4c:7e:42:d4:f6:a8:b7:0e:34:13:58:78:ff:d8:cf:
58:70:2e:03:38:4a:33:80:21:17:40:cd:51:32:bf:62:b3:c5:
33:b1:03:49:94:b0:60:f4:22:e0:6c:4a:4f:5d:84:44:2b:06:
7b:87:66:ae:ae:35:3e:31:16:9a:e2:ac:fc:e2:c3:dc:88:ea:
d5:e6:4a:42:6c:61:13:7e:b7:33:a2:ba:5b:c5:03:d3:18:71:
8a:84:c0:a5:08:6f:e0:14:34:71:bb:47:6c:31:74:8e:0d:8f:
94:05:27:d2:04:dc:85:ec:c2:56:43:8d:bc:32:b8:c0:eb:f4:
de:d0:ea:e0:b7:5d:04:76:e8:85:5c:8f:05:2c:03:d5:1f:3c:
d5:5a:7d:91:d9:bb:8b:99:81:8e:11:50:75:01:cb:27:93:f4:
78:8e:40:c4:6a:37:72:a7:60:17:56:93:65:e7:59:6a:29:d6:
ef:67:63:53:b0:81:19:b2:a8:dd:54:c1:a8:d1:1d:85:ef:79:
0e:2d:0e:e5:1e:ba:9d:2f:69:57:14:34:14:6c:ff:78:e1:8f:
b4:fa:fb:8a:ef:a0:cb:12:99:04:03:f4:4a:14:c0:b1:9c:22:
08:d1:50:7d:5c:f9:2d:26:30:0a:6b:8b:8a:71:d2:77:35:3c:
ec:47:22:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:55:05 2026 by rpki-client