
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5b8063c-6bab-367d-97b7-b0134fb5b2b4.roa
File: c5b8063c-6bab-367d-97b7-b0134fb5b2b4.roa (raw, json)
Hash identifier: YcvIWucKfh21IwJw2iCNNKu5YVGAExWVASv9XoPxUSc=
Subject key identifier: 25:63:E6:F7:72:9D:2E:3C:82:30:CC:6E:3E:23:FF:49:70:F7:E8:6D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584F0672368200AEA87B242E8680
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5b8063c-6bab-367d-97b7-b0134fb5b2b4.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 36522
IP address blocks: 204.101.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:36:82:00:ae:a8:7b:24:2e:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=a6d5a80b-9996-43b7-b559-914915521f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:6a:d1:14:e2:76:43:9f:6a:f5:c3:4c:8f:
d7:bf:27:fa:ab:ff:b7:3a:72:38:db:00:7c:f0:39:
16:90:b5:4a:ae:3b:34:45:f4:16:33:f0:6f:04:ab:
d6:95:b8:c2:f0:51:0a:73:5d:60:8b:f8:22:57:49:
22:c6:25:e4:ef:1d:ec:19:c4:47:5e:21:5b:b6:65:
36:56:c5:7b:e9:ad:06:6c:43:55:e0:96:a0:ca:cd:
f7:96:42:62:9d:22:73:75:97:09:1c:a4:1a:bc:4d:
44:10:a8:5e:15:fa:e6:57:c5:90:5a:1e:0e:9e:4b:
c2:d8:89:9d:b0:ed:8e:75:7e:08:83:98:ab:48:f3:
4c:1e:36:ff:d5:f9:43:b1:8d:1e:7c:85:f7:dd:51:
fb:bb:83:48:60:13:e5:39:35:36:b8:e6:1f:fc:22:
22:06:fc:7d:bc:3e:a4:5c:ad:f8:fb:48:cb:41:78:
15:12:73:a8:34:44:6e:91:b2:20:cf:82:67:b7:e6:
4e:a9:86:b5:17:0f:20:3c:eb:7c:f2:52:89:86:d3:
8b:1d:b2:e9:fb:07:e1:1f:23:40:e4:47:e5:42:ed:
ea:52:c7:bc:eb:27:7c:6d:e7:96:46:58:45:d1:7c:
41:02:7a:dc:6c:2b:2d:47:55:0f:07:58:74:4f:91:
36:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:63:E6:F7:72:9D:2E:3C:82:30:CC:6E:3E:23:FF:49:70:F7:E8:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5b8063c-6bab-367d-97b7-b0134fb5b2b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:15:5a:09:95:5c:f0:9c:33:27:df:7e:ac:9c:c6:3a:7c:12:
d6:29:d5:97:df:55:d9:1c:32:48:73:c9:b1:64:69:38:96:46:
af:a2:49:57:fd:16:2e:47:88:48:68:c5:12:75:09:9a:67:5c:
c1:a4:df:b9:cc:3e:96:df:51:b0:bc:5d:be:8a:73:68:fc:5f:
6b:36:e7:8f:13:60:93:f4:82:12:f7:53:07:19:be:60:68:34:
9f:87:fd:e4:9c:11:39:aa:08:1e:ac:22:16:f2:55:f5:92:a5:
4b:53:45:59:03:41:e8:9b:df:b3:c4:bf:cb:69:28:f7:87:5b:
95:b1:a4:79:b6:2f:71:fd:af:5f:e0:bb:29:a5:4c:d5:ea:ab:
79:ad:dd:49:95:f6:fa:1a:fe:9b:d5:07:78:84:c1:c7:96:6a:
cb:43:b6:a0:2a:eb:0d:56:5c:b9:8f:4c:35:73:e6:3b:95:72:
95:f2:e0:47:90:2a:07:54:26:6c:0b:9e:b9:e8:bf:3e:1a:d1:
ac:3b:6e:fc:e6:07:71:58:4d:71:06:00:56:8b:32:c6:64:86:
e5:bd:d5:e7:fd:17:9b:39:9b:1a:07:7f:99:0e:89:4e:7b:54:
aa:8e:0a:eb:d9:35:19:36:50:6b:b5:70:5b:c9:48:d4:89:09:
f5:31:c4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:40:21 2026 by rpki-client