
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21e17989-aeb3-3850-8fa1-cd573833c69a.roa
File: 21e17989-aeb3-3850-8fa1-cd573833c69a.roa (raw, json)
Hash identifier: dC1PE0nKlaPEmWQK01jutkwLWtVekYY5ITybH2z8wmw=
Subject key identifier: 41:5B:67:20:4E:6C:12:59:AA:75:01:21:29:EA:52:8C:24:0A:99:63
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584C9ACC596B63F07E2C4AF4DB00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21e17989-aeb3-3850-8fa1-cd573833c69a.roa
Signing time: Thu 22 Jan 2026 02:00:31 +0000
ROA not before: Thu 22 Jan 2026 02:00:31 +0000
ROA not after: Wed 22 Apr 2026 01:00:31 +0000
asID: 13335
IP address blocks: 2606:4700:4018::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:9a:cc:59:6b:63:f0:7e:2c:4a:f4:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jan 22 02:00:31 2026 GMT
Not After : Apr 22 01:00:31 2026 GMT
Subject: CN=32496af1-3da8-4156-91d9-f0dd90672448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:8a:6d:86:d3:2b:41:24:f4:df:8c:d8:39:
5c:39:0f:10:18:11:64:0b:8b:9d:fe:98:23:e0:b0:
21:90:6b:ea:48:9a:3e:7e:60:1d:c4:f1:86:e2:7b:
67:1d:e7:65:cd:8b:c7:43:86:2f:67:ee:04:73:b3:
21:b0:8b:e7:19:c8:5f:32:85:6d:af:ad:da:63:b4:
66:08:d9:d4:c3:0f:a8:ec:c2:9e:db:a9:be:0e:50:
33:33:e0:73:18:3c:32:a4:f2:fc:66:0a:e7:ff:2e:
c1:4b:d5:d5:1b:a5:aa:93:63:03:9f:af:bf:34:85:
d6:e5:55:6b:00:f8:91:d3:f3:3d:21:be:06:09:db:
2b:02:9d:79:5c:4e:11:2a:f2:b6:49:be:ca:de:0a:
97:fa:89:b0:d4:54:0f:87:f4:57:08:5a:13:4c:87:
15:2f:ac:cf:4c:26:0c:15:e2:d3:12:7c:d0:2b:0a:
05:0d:1f:d4:5e:b4:ab:5a:57:6c:2b:9e:eb:56:5c:
05:4f:ce:9a:7a:f8:b2:c5:38:f6:3a:c5:1d:7e:b4:
70:c1:19:9f:34:38:fd:aa:ef:fd:1c:6c:ef:26:71:
4d:11:ac:ca:39:05:a8:61:e4:aa:e6:3f:39:f6:9a:
81:a5:e0:47:ed:2e:21:49:44:5f:93:0b:c3:fe:8d:
46:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5B:67:20:4E:6C:12:59:AA:75:01:21:29:EA:52:8C:24:0A:99:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21e17989-aeb3-3850-8fa1-cd573833c69a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:4018::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:71:8f:3e:90:9a:7b:d0:3a:6d:bb:e5:0f:8e:f4:96:1e:98:
5b:de:bc:77:03:a3:94:5e:bb:ab:06:f5:16:e1:0a:07:4f:b0:
73:7b:91:58:2a:9e:2d:df:77:47:d3:11:f9:e0:bf:6b:be:70:
60:0e:52:c7:8d:68:56:af:1d:ec:50:73:2d:2f:3c:18:9e:f8:
55:29:fe:ce:0d:ce:af:21:16:37:3b:6a:d4:44:16:52:0c:7a:
c3:03:01:23:9e:94:3c:af:f1:1c:5e:5a:db:3d:a3:aa:71:00:
20:ab:26:6c:73:f1:14:3e:63:27:72:9d:82:a2:af:0b:0d:d9:
83:22:7b:70:57:e9:9a:39:8e:ed:66:63:cb:62:91:2a:ce:31:
08:b3:37:c8:7a:c5:ac:d2:b9:ec:43:fd:29:97:51:fd:14:e3:
0a:ba:ec:c2:14:8e:6f:c6:95:7a:a7:c1:cb:e9:b8:20:a9:19:
cb:ad:70:73:91:c0:9e:92:21:02:18:10:81:0f:d2:3c:ec:0c:
11:47:21:08:c0:9d:67:7c:e5:79:79:36:fd:f6:aa:4c:a5:09:
a4:91:8d:a0:d2:27:07:30:f4:3e:8f:7e:51:d5:08:aa:66:36:
2b:48:19:e0:80:ae:f4:52:16:8f:01:30:a4:95:e1:e4:0c:b8:
5b:01:ea:93
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyazFlrY/B+LEr02wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDEyMjAyMDAzMVoXDTI2MDQyMjAxMDAzMVowLzEtMCsGA1UEAxMk
MzI0OTZhZjEtM2RhOC00MTU2LTkxZDktZjBkZDkwNjcyNDQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+OKbYbTK0Ek9N+M2DlcOQ8QGBFkC4ud/pgj
4LAhkGvqSJo+fmAdxPGG4ntnHedlzYvHQ4YvZ+4Ec7MhsIvnGchfMoVtr63aY7Rm
CNnUww+o7MKe26m+DlAzM+BzGDwypPL8Zgrn/y7BS9XVG6Wqk2MDn6+/NIXW5VVr
APiR0/M9Ib4GCdsrAp15XE4RKvK2Sb7K3gqX+omw1FQPh/RXCFoTTIcVL6zPTCYM
FeLTEnzQKwoFDR/UXrSrWldsK57rVlwFT86aeviyxTj2OsUdfrRwwRmfNDj9qu/9
HGzvJnFNEazKOQWoYeSq5j859pqBpeBH7S4hSURfkwvD/o1GqwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEFbZyBObBJZqnUBISnqUowkCpljMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjFlMTc5ODktYWViMy0z
ODUwLThmYTEtY2Q1NzM4MzNjNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgZHAEAY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHdxjz6QmnvQOm275Q+O9JYemFvevHcDo5Reu6sG9RbhCgdPsHN7
kVgqni3fd0fTEfngv2u+cGAOUseNaFavHexQcy0vPBie+FUp/s4Nzq8hFjc7atRE
FlIMesMDASOelDyv8RxeWts9o6pxACCrJmxz8RQ+YydynYKirwsN2YMie3BX6Zo5
ju1mY8tikSrOMQizN8h6xazSuexD/SmXUf0U4wq67MIUjm/GlXqnwcvpuCCpGcut
cHORwJ6SIQIYEIEP0jzsDBFHIQjAnWd85Xl5Nv32qkylCaSRjaDSJwcw9D6PflHV
CKpmNitIGeCArvRSFo8BMKSV4eQMuFsB6pM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:17:48 2026 by rpki-client