
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/ebb0be46-5340-3989-b64b-7de27da0d802.roa
File: ebb0be46-5340-3989-b64b-7de27da0d802.roa (raw, json)
Hash identifier: 3ZZ3qpl7dPeDw0vJ3HeE7dhq5HX3OgMiEPAyIATl8G4=
Subject key identifier: 38:1D:72:9E:35:1E:92:06:0B:AA:B3:F2:84:68:BF:7A:24:96:E5:9D
Certificate issuer: /CN=21f498b5-84f8-4255-a971-76e62e3a212d
Certificate serial: 010D0C9F4328584E8DEFB5077DBAB9BBCB3A8960
Authority key identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/ebb0be46-5340-3989-b64b-7de27da0d802.roa
Signing time: Sun 19 Jul 2026 21:00:12 +0000
ROA not before: Sun 19 Jul 2026 21:00:12 +0000
ROA not after: Sat 17 Oct 2026 21:00:12 +0000
asID: 29803
IP address blocks: 23.136.100.0/24 maxlen: 24
2602:f6ab::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8d:ef:b5:07:7d:ba:b9:bb:cb:3a:89:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21f498b5-84f8-4255-a971-76e62e3a212d
Validity
Not Before: Jul 19 21:00:12 2026 GMT
Not After : Oct 17 21:00:12 2026 GMT
Subject: CN=8d491d00-d05c-4219-a851-f7f2a0d6177b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:84:6a:13:9a:c3:39:99:03:c4:c2:41:60:4b:
b0:3f:a6:7f:2d:89:d1:1f:26:a5:ef:dc:01:3c:76:
50:f7:0d:fc:67:ef:13:cf:ee:80:1a:ec:33:b6:a9:
4e:0e:c8:47:bf:b6:0b:5e:ed:08:74:0e:75:70:33:
bf:15:27:7a:7c:ce:34:10:6e:59:8a:8b:12:07:12:
55:38:85:53:11:99:6e:91:54:c9:18:06:b5:6f:fa:
88:0d:92:b7:4e:0d:e2:36:c4:5e:bb:87:63:e8:d0:
07:8f:bf:fc:7b:1e:fe:7a:3b:af:4d:9b:7a:d6:f4:
d8:87:e8:2a:cf:9e:e9:5a:1f:47:a5:79:7d:65:d3:
da:85:88:1e:24:97:b6:50:c6:66:5b:3a:ed:61:da:
a5:0a:77:1e:10:d9:40:98:36:8c:1f:8a:a1:a2:bc:
6e:84:f9:88:e8:34:73:14:80:5c:6b:02:46:3a:a6:
7e:62:ae:01:fa:96:6c:a4:b3:38:5b:e4:ff:04:ee:
87:25:2d:ca:88:ce:9a:8b:8d:09:d4:d8:da:dc:c3:
5c:9d:cb:86:ff:eb:70:59:96:c8:d0:1f:58:1d:74:
c3:f0:a9:de:81:86:ef:05:cf:60:b3:ee:96:ee:96:
0d:fe:d3:25:0e:63:0b:ca:9d:36:fc:db:dc:94:11:
6f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1D:72:9E:35:1E:92:06:0B:AA:B3:F2:84:68:BF:7A:24:96:E5:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/ebb0be46-5340-3989-b64b-7de27da0d802.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl
X509v3 Authority Key Identifier:
keyid:9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.100.0/24
IPv6:
2602:f6ab::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:67:18:db:4a:bd:da:46:55:ee:85:74:e7:e3:a3:e7:d1:22:
1d:6a:d8:06:e3:53:51:a0:b2:38:09:e3:73:ef:3d:13:b4:f8:
51:4d:20:4b:c2:7d:bf:5f:a3:ce:0e:61:a2:2a:8c:83:da:08:
bf:7d:5e:b3:0a:ec:51:5d:cb:aa:8e:4a:a7:4b:b0:05:0f:f7:
a5:89:76:b7:f3:dc:9d:24:ae:99:fa:48:ae:5d:33:3d:bf:cd:
da:59:72:db:50:fc:92:d0:d1:e1:60:87:e2:8a:d3:36:5b:f8:
e3:1b:73:b5:18:a4:63:0d:6d:b6:6e:c6:dd:5a:97:6a:08:40:
7f:7f:0c:27:7b:9f:5c:15:6d:f8:bf:b9:b3:ef:17:d6:3e:b5:
76:14:e3:e2:a1:3d:91:9c:61:77:82:9b:cc:ef:af:1d:6d:21:
09:12:64:be:a2:4f:41:26:6c:e6:e9:21:1c:6f:20:84:01:9a:
d0:97:19:92:3d:93:4b:7e:7f:c8:f9:52:61:b4:99:ab:f8:7b:
c6:35:95:ba:96:a6:11:81:7c:51:36:c2:f7:35:b4:8b:83:09:
c3:84:4b:a5:b2:1b:2f:75:03:13:47:b1:f1:67:22:34:48:27:
48:57:76:5b:fd:4c:c2:61:27:85:7e:fb:10:40:e7:bc:07:3f:
d0:a9:2c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:27:51 2026 by rpki-client