
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21f8915c-07b5-326b-96d6-556ac5ea5929.roa
File: 21f8915c-07b5-326b-96d6-556ac5ea5929.roa (raw, json)
Hash identifier: xkbmaRL3iCyeW/D6cnRPKBxViAJT19xJpw5IbRNB5Js=
Subject key identifier: E3:6D:58:42:9A:D2:43:CF:D6:E6:5D:7F:2A:BD:EF:9F:4D:D9:27:F5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584CD4077792B53017CAD79EF300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21f8915c-07b5-326b-96d6-556ac5ea5929.roa
Signing time: Wed 11 Feb 2026 14:00:41 +0000
ROA not before: Wed 11 Feb 2026 14:00:41 +0000
ROA not after: Tue 12 May 2026 13:00:41 +0000
asID: 396573
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d4:07:77:92:b5:30:17:ca:d7:9e:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Feb 11 14:00:41 2026 GMT
Not After : May 12 13:00:41 2026 GMT
Subject: CN=995badad-2423-42e0-8c36-3b06d5a1c9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:30:a6:b0:e5:54:63:0f:20:44:f3:80:58:
3f:4e:98:77:5d:e8:f6:4d:a2:19:90:0a:52:84:03:
da:b1:14:ab:b0:49:fc:5f:bb:69:5f:72:8b:b5:b3:
64:2d:01:e3:c4:3e:8b:46:b2:f7:b1:bf:96:32:51:
6e:bb:ee:59:b8:89:5d:6c:35:a4:f4:f0:56:47:cd:
a7:34:88:fe:9e:da:6c:21:d0:df:ed:7e:41:7f:a6:
ed:82:b7:9e:8a:89:79:8d:28:8a:b1:5a:45:05:0b:
75:29:2f:f7:c2:e7:2f:e7:cc:de:a9:f7:24:25:69:
6e:fb:bf:c7:d7:e2:4f:c2:6b:2d:4c:ba:21:80:9c:
b6:07:14:ec:ca:32:e7:11:06:97:1c:20:4c:bb:e9:
fc:68:53:45:fc:70:72:50:9b:ca:71:8b:e7:ab:b9:
a0:89:62:2e:2b:01:fb:bf:8b:2b:83:c4:12:2d:a5:
ec:67:db:a1:da:46:46:d1:8a:5c:e9:fe:f5:db:5a:
27:a7:2f:e7:7a:61:b1:3e:ec:cc:5e:0e:1c:27:cf:
6c:7a:78:5d:ee:b7:6d:08:c2:9e:d8:93:df:7d:06:
2f:fe:b3:2d:f7:e7:63:26:da:54:82:67:74:6d:7f:
ab:e5:c9:53:94:c8:a5:dd:37:a1:47:63:6e:28:45:
d4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6D:58:42:9A:D2:43:CF:D6:E6:5D:7F:2A:BD:EF:9F:4D:D9:27:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21f8915c-07b5-326b-96d6-556ac5ea5929.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:7d:73:aa:40:9d:13:90:ba:b5:6b:e0:eb:5f:fa:f7:8b:8a:
71:05:2a:16:f4:a8:f6:51:f4:04:97:d0:cc:69:52:35:a9:4d:
4f:7c:58:fc:da:d0:21:1a:1a:bb:4b:ee:ba:4a:08:a6:01:d1:
a7:04:3a:39:3d:e6:a5:52:c4:5b:8c:1c:bb:cf:b5:4c:88:25:
55:e0:be:c5:75:48:06:2a:ca:5b:00:5d:c5:b4:b7:3b:41:fd:
40:d1:8c:de:a0:3a:81:ad:91:b7:30:be:b7:3b:c9:4b:58:09:
58:1d:21:72:0b:e5:d0:41:2f:72:e8:64:ae:dd:ca:1f:1f:17:
f9:97:58:0a:28:a6:c5:3f:43:d9:24:56:47:d4:cc:58:fe:e2:
4a:b2:02:b3:00:65:ca:0e:ba:31:ff:dc:32:53:bf:55:52:12:
00:e5:a1:86:19:ce:67:37:1f:07:d9:d6:08:f2:e0:be:1f:1f:
d1:af:4c:35:a8:6c:5a:90:d2:49:87:fb:f6:aa:ac:42:ed:75:
37:56:02:e7:b8:bb:e3:02:e7:0c:b3:5c:93:8c:1b:0e:47:bf:
11:9e:57:07:90:e9:f0:07:f9:3e:9f:7f:43:dc:42:f6:25:f3:
cc:d6:bd:c3:df:c2:02:57:c6:b5:51:c2:d5:7d:6a:18:5a:64:
e1:27:3f:8a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzUB3eStTAXytee8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk
OTk1YmFkYWQtMjQyMy00MmUwLThjMzYtM2IwNmQ1YTFjOWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArswwprDlVGMPIETzgFg/Tph3Xej2TaIZkApS
hAPasRSrsEn8X7tpX3KLtbNkLQHjxD6LRrL3sb+WMlFuu+5ZuIldbDWk9PBWR82n
NIj+ntpsIdDf7X5Bf6btgreeiol5jSiKsVpFBQt1KS/3wucv58zeqfckJWlu+7/H
1+JPwmstTLohgJy2BxTsyjLnEQaXHCBMu+n8aFNF/HByUJvKcYvnq7mgiWIuKwH7
v4srg8QSLaXsZ9uh2kZG0Ypc6f7121onpy/nemGxPuzMXg4cJ89senhd7rdtCMKe
2JPffQYv/rMt9+djJtpUgmd0bX+r5clTlMil3TehR2NuKEXU2wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFONtWEKa0kPP1uZdfyq9759N2Sf1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjFmODkxNWMtMDdiNS0z
MjZiLTk2ZDYtNTU2YWM1ZWE1OTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBWfXOqQJ0TkLq1a+DrX/r3i4pxBSoW9Kj2UfQEl9DMaVI1qU1PfFj8
2tAhGhq7S+66SgimAdGnBDo5PealUsRbjBy7z7VMiCVV4L7FdUgGKspbAF3FtLc7
Qf1A0YzeoDqBrZG3ML63O8lLWAlYHSFyC+XQQS9y6GSu3cofHxf5l1gKKKbFP0PZ
JFZH1MxY/uJKsgKzAGXKDrox/9wyU79VUhIA5aGGGc5nNx8H2dYI8uC+Hx/Rr0w1
qGxakNJJh/v2qqxC7XU3VgLnuLvjAucMs1yTjBsOR78RnlcHkOnwB/k+n39D3EL2
JfPM1r3D38ICV8a1UcLVfWoYWmThJz+K
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:53 2026 by rpki-client