
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/15426059-319f-322c-95e8-198a3ab84115.roa
File: 15426059-319f-322c-95e8-198a3ab84115.roa (raw, json)
Hash identifier: XuzUz9Xu+LouvYFuozYthNtzkqN6xIJBYz+uL66d6Cw=
Subject key identifier: 1A:65:28:2F:47:5C:A3:AF:F0:14:51:3A:64:50:35:26:5E:91:F5:88
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584F4975C7A551983D894D5C9C80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/15426059-319f-322c-95e8-198a3ab84115.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 3949
IP address blocks: 131.103.21.32/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:c7:a5:51:98:3d:89:4d:5c:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=ad06c25e-02eb-4b0e-b817-fd2476ab00a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:92:82:bc:84:c5:4e:06:c5:3e:a7:03:ca:30:
bb:c3:23:8e:37:c5:c7:af:84:c4:f0:7b:30:23:03:
07:4a:67:bb:f2:71:e5:bb:96:70:50:f7:3f:55:0e:
15:ab:d4:a9:fd:b5:ec:eb:0b:ba:72:c5:96:97:b8:
8c:bd:e5:b8:c5:05:4b:6b:09:80:76:83:b2:cd:03:
83:2d:8f:51:22:32:8a:9f:2e:f7:69:e3:e3:79:b1:
5c:df:d9:06:4b:e2:55:ed:06:70:ef:4c:0b:ff:00:
97:7c:9b:4d:80:2a:c6:11:04:c9:80:5d:87:1c:64:
4a:64:aa:6b:1c:b8:05:18:e4:6a:54:1e:67:f1:c8:
4f:3b:39:f9:f1:47:44:59:fa:87:6c:16:74:34:a6:
1b:35:92:4e:bc:ba:4b:82:d8:9e:a7:63:75:97:2e:
d1:d9:94:70:ab:3a:90:0d:93:56:f8:5e:3e:45:07:
d4:b0:e2:60:99:ad:a2:40:82:2a:95:46:d7:8f:88:
7c:04:e2:bc:00:ad:f6:e2:e4:3f:57:57:fb:89:a8:
c3:3f:56:49:7d:a9:00:b2:e1:62:8e:dd:74:ed:08:
f9:da:1c:aa:10:fd:12:d6:98:c4:35:93:c7:d3:54:
a4:8c:47:14:81:af:d1:14:25:b7:8e:65:60:70:0e:
08:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:65:28:2F:47:5C:A3:AF:F0:14:51:3A:64:50:35:26:5E:91:F5:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/15426059-319f-322c-95e8-198a3ab84115.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
131.103.21.32/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:1f:c3:54:d0:07:65:e2:6c:c2:89:78:62:92:9f:83:40:db:
f8:48:f4:c9:c4:72:f9:7b:54:76:e3:71:51:fd:bc:be:70:13:
c5:61:74:f6:78:60:8f:d5:a3:13:4f:94:b1:74:f9:87:08:e4:
08:f5:4f:85:3c:57:b8:60:3b:46:c2:39:b1:a7:09:71:97:69:
e9:3a:39:b6:7c:16:25:e8:af:b7:55:11:d5:20:15:3c:b9:90:
64:17:c1:09:b0:af:91:67:d2:51:81:71:28:ed:e7:1a:bb:51:
5b:92:52:1c:26:ef:3a:02:32:37:b7:83:df:37:de:ec:0c:5a:
c4:a6:82:2c:21:80:a8:2b:a8:24:7f:15:5c:20:9c:40:28:20:
ca:ec:d6:5e:9e:0d:17:6f:07:86:e3:2a:be:0f:7c:70:0d:46:
c5:5e:82:f5:33:65:ea:18:8b:cd:26:c5:24:39:39:43:77:f4:
68:6e:3e:39:a9:8b:33:7e:c1:de:d5:bf:11:72:71:89:bc:18:
fb:12:1c:7b:6e:1a:80:cb:0a:2a:b2:d0:70:12:57:67:ac:8f:
d6:08:c4:dd:9d:0b:58:63:12:ca:22:6d:65:ef:54:ad:24:ca:
49:f3:d5:5e:dd:e7:21:1f:2b:a6:ea:ee:ab:11:b1:cb:9a:ef:
c2:5d:29:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:18:59 2026 by rpki-client