
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa
File: 23821e89-69f1-35fa-8453-8f2195bf5679.roa (raw, json)
Hash identifier: 4Yl3N28V3VTjrabECGRe6EsaP+gP6LwaUzRObZPop4o=
Subject key identifier: 96:32:0F:7F:21:46:C9:9D:A3:C7:58:85:51:51:E0:50:E9:17:04:3C
Certificate issuer: /CN=21bc3777-de7d-4aed-88bc-9c652ed17843
Certificate serial: 010D0C9F4328584F51D2C5B776CBFCAD2F284AC0
Authority key identifier: 51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa
Signing time: Mon 28 Sep 2026 01:00:12 +0000
ROA not before: Mon 28 Sep 2026 01:00:12 +0000
ROA not after: Sun 27 Dec 2026 02:00:12 +0000
asID: 398576
IP address blocks: 199.21.176.0/22 maxlen: 22
199.45.28.0/22 maxlen: 22
208.93.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:51:d2:c5:b7:76:cb:fc:ad:2f:28:4a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bc3777-de7d-4aed-88bc-9c652ed17843
Validity
Not Before: Sep 28 01:00:12 2026 GMT
Not After : Dec 27 02:00:12 2026 GMT
Subject: CN=0d1f278e-1c7a-447a-9500-f6e18279e31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:57:77:05:da:ca:bf:eb:00:9f:48:a5:59:94:
db:49:a0:b1:30:34:a7:ee:d9:15:2d:a6:aa:04:5f:
64:d3:61:fb:7b:c4:e0:2e:ff:da:a9:6f:9a:ad:ab:
31:81:85:fd:5b:bc:a3:53:68:f4:02:e5:a1:50:28:
76:2d:ac:f0:75:30:59:a5:24:2a:b9:65:70:12:54:
bc:86:60:06:03:2c:22:df:6b:38:03:45:11:c7:85:
4a:ab:8e:c3:b5:d5:40:7b:4c:b8:04:48:04:bf:97:
b0:20:3f:49:8f:9b:64:96:8f:26:95:5c:2c:e1:c3:
90:0e:1b:a2:83:30:e8:93:06:82:73:62:a0:99:e0:
c6:d5:f3:4a:15:09:a7:99:e3:d0:69:a3:2d:a8:d3:
0a:16:ca:b7:1e:c3:e1:8b:dd:c7:89:34:ce:a9:9e:
58:c4:68:78:c5:5d:af:ca:84:94:db:bd:83:b3:66:
8e:68:6e:64:33:9c:ca:b1:8a:77:d2:09:fb:6f:a8:
8f:a0:46:d3:18:f1:1d:73:8f:b5:aa:b3:02:19:05:
d5:30:2f:6c:0e:8f:df:99:0c:50:9f:49:b4:43:0b:
c4:bd:61:81:39:4e:05:76:a2:04:42:e6:33:f4:4a:
69:11:03:e3:c5:1c:cf:26:09:42:ef:29:b1:3f:45:
62:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:32:0F:7F:21:46:C9:9D:A3:C7:58:85:51:51:E0:50:E9:17:04:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl
X509v3 Authority Key Identifier:
keyid:51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer
sbgp-ipAddrBlock: critical
IPv4:
199.21.176.0/22
199.45.28.0/22
208.93.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:50:04:72:09:11:93:3c:b6:fa:00:a0:bd:a7:45:99:c4:8e:
04:71:b0:93:5a:9e:8a:cf:1e:0f:30:a4:2c:95:8e:f2:5c:80:
d8:aa:75:6a:e3:40:45:52:8d:1e:df:1e:43:11:d7:4f:be:26:
0b:b1:28:6a:2f:b9:1e:32:fe:0f:7e:b6:53:60:98:90:9e:b2:
c4:1a:f4:4e:d8:4b:56:b0:85:cf:90:c5:f9:f0:d4:f2:f4:58:
a6:a9:cb:d7:41:7a:58:1a:6b:ab:c0:48:44:ea:a7:84:2f:9d:
56:51:50:ff:0e:02:c3:3e:8c:0d:2b:12:ae:0b:61:15:7d:00:
c1:b7:a2:df:3f:37:ea:f7:86:f9:71:f6:59:6f:64:cd:5d:2a:
11:69:cc:e3:91:65:83:94:1c:45:68:fe:4c:f6:66:ec:ee:a9:
37:ea:a3:dd:02:c2:2b:5b:16:a7:41:a9:86:bc:5c:ce:12:cd:
46:12:d9:d6:5f:0e:60:12:e8:e7:10:60:b4:1f:d3:d6:c8:95:
ce:60:39:e5:e5:0b:70:35:e8:47:f9:dc:f7:b9:23:53:f0:bc:
ad:52:04:b8:af:b8:64:9e:ba:ee:d0:cc:b0:b9:48:c7:fe:21:
b9:72:35:0d:06:79:e8:28:5b:3e:5f:0b:f9:e6:8c:43:d8:3b:
b4:27:51:80
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9R0sW3dsv8rS8oSsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjFiYzM3NzctZGU3ZC00YWVkLTg4YmMtOWM2NTJlZDE3
ODQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk
MGQxZjI3OGUtMWM3YS00NDdhLTk1MDAtZjZlMTgyNzllMzFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1d3BdrKv+sAn0ilWZTbSaCxMDSn7tkVLaaq
BF9k02H7e8TgLv/aqW+arasxgYX9W7yjU2j0AuWhUCh2LazwdTBZpSQquWVwElS8
hmAGAywi32s4A0URx4VKq47DtdVAe0y4BEgEv5ewID9Jj5tklo8mlVws4cOQDhui
gzDokwaCc2KgmeDG1fNKFQmnmePQaaMtqNMKFsq3HsPhi93HiTTOqZ5YxGh4xV2v
yoSU272Ds2aOaG5kM5zKsYp30gn7b6iPoEbTGPEdc4+1qrMCGQXVMC9sDo/fmQxQ
n0m0QwvEvWGBOU4FdqIEQuYz9EppEQPjxRzPJglC7ymxP0ViSwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFJYyD38hRsmdo8dYhVFR4FDpFwQ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWJj
Mzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1MmVkMTc4NDMvMjM4MjFlODktNjlmMS0z
NWZhLTg0NTMtOGYyMTk1YmY1Njc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFiYzM3NzctZGU3ZC00YWVkLTg4
YmMtOWM2NTJlZDE3ODQzLzIxYmMzNzc3LWRlN2QtNGFlZC04OGJjLTljNjUyZWQx
Nzg0My5jcmwwHwYDVR0jBBgwFoAUUdFMpVDQ0HIARr+cX+dFCH60WFEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWJjMzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1
MmVkMTc4NDMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCxxWwAwQC
xy0cAwQC0F0MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBACZQBHIJEZM8tvoAoL2nRZnEjgRxsJNanorPHg8w
pCyVjvJcgNiqdWrjQEVSjR7fHkMR10++JguxKGovuR4y/g9+tlNgmJCessQa9E7Y
S1awhc+Qxfnw1PL0WKapy9dBelgaa6vASETqp4QvnVZRUP8OAsM+jA0rEq4LYRV9
AMG3ot8/N+r3hvlx9llvZM1dKhFpzOORZYOUHEVo/kz2ZuzuqTfqo90CwitbFqdB
qYa8XM4SzUYS2dZfDmAS6OcQYLQf09bIlc5gOeXlC3A16Ef53Pe5I1PwvK1SBLiv
uGSeuu7QzLC5SMf+IblyNQ0GeegoWz5fC/nmjEPYO7QnUYA=
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:35:48 2026 by rpki-client