
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/9fd8e954-ac6a-394d-83c7-c653d26da49c.roa
File: 9fd8e954-ac6a-394d-83c7-c653d26da49c.roa (raw, json)
Hash identifier: lZoEmvodplFfirBwiXMUfauLcVPj4RZxdCgmUVB4l0U=
Subject key identifier: B3:84:4A:C5:5C:8B:E4:9B:7F:DD:61:1F:FD:1B:53:FF:F1:8D:FC:58
Certificate issuer: /CN=2a576405-6d12-4321-8aff-11069dafb9f1
Certificate serial: 010D0C9F4328584F66CEC5494923EF8DAE077280
Authority key identifier: BB:4D:83:61:A4:90:4F:28:37:18:5F:95:D5:B1:1A:01:1F:4B:15:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/9fd8e954-ac6a-394d-83c7-c653d26da49c.roa
Signing time: Mon 05 Oct 2026 13:24:31 +0000
ROA not before: Mon 05 Oct 2026 13:24:31 +0000
ROA not after: Sun 03 Jan 2027 14:24:31 +0000
asID: 214933
IP address blocks: 199.19.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 15 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:66:ce:c5:49:49:23:ef:8d:ae:07:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a576405-6d12-4321-8aff-11069dafb9f1
Validity
Not Before: Oct 5 13:24:31 2026 GMT
Not After : Jan 3 14:24:31 2027 GMT
Subject: CN=3d327c67-b968-459a-96c4-896cf497aadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:22:31:2c:91:e2:bc:36:0a:d3:e5:c8:dd:
5b:1e:a8:11:1e:0e:a8:4a:7b:73:e0:0a:24:9c:8b:
2e:4b:eb:e6:41:5a:a7:4e:e4:c4:d3:e0:6e:02:cf:
65:73:79:4f:e0:a0:0b:82:99:55:62:02:c5:0d:6f:
d7:48:65:91:3c:5a:d4:fd:76:5c:20:5e:b5:27:84:
e9:07:fd:c9:31:be:c4:5c:7c:c0:62:19:6a:50:74:
1f:7c:21:af:4e:96:f5:e5:16:54:8b:12:b0:ea:cf:
37:6b:23:26:ca:30:c2:ae:de:1c:7b:f1:c1:b9:48:
3a:6b:5f:c4:ed:ae:48:9d:d3:09:e3:73:a7:17:ad:
4f:67:f6:69:3b:13:45:28:e9:84:fa:33:0f:18:e9:
70:44:5a:e7:18:e9:ea:c9:e7:cd:23:a8:9b:82:a1:
5e:44:fc:6d:d1:0c:4e:9e:0c:5a:17:30:02:9f:ce:
12:0c:e9:eb:77:92:17:7d:0d:1b:9c:68:b5:de:f1:
9c:79:94:3b:40:cc:d7:d5:af:9e:53:18:aa:27:8c:
ea:dd:88:ff:40:5d:3a:e6:6c:1a:bb:57:e5:16:48:
15:63:5b:93:db:61:a3:21:23:04:26:f6:1f:14:4e:
22:c6:64:e9:13:73:d7:c9:35:ce:d3:ce:ce:76:53:
f3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:84:4A:C5:5C:8B:E4:9B:7F:DD:61:1F:FD:1B:53:FF:F1:8D:FC:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/9fd8e954-ac6a-394d-83c7-c653d26da49c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.crl
X509v3 Authority Key Identifier:
keyid:BB:4D:83:61:A4:90:4F:28:37:18:5F:95:D5:B1:1A:01:1F:4B:15:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer
sbgp-ipAddrBlock: critical
IPv4:
199.19.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:47:82:a7:5e:70:02:90:6f:b5:f2:a5:52:bd:23:54:be:50:
4d:d4:6c:1c:4d:42:c5:05:76:cc:5a:79:ed:42:47:fe:e7:c8:
84:00:1c:f5:ea:95:d9:69:8d:db:b1:93:91:f4:3e:59:a2:6a:
d9:20:f8:82:50:78:e1:c6:2e:44:98:38:5e:fa:0e:24:0f:c0:
81:2e:e5:60:be:a4:82:55:7a:b0:27:10:69:b6:c2:dc:b3:58:
d8:cc:2d:84:1c:4d:93:a6:04:74:5f:e6:a8:db:5c:34:2d:4a:
f3:fb:04:29:3e:32:c9:08:bb:55:19:bb:f7:80:d2:f3:49:2d:
25:f6:62:2c:00:ac:52:ee:c4:d5:0b:fe:62:3c:97:f6:a2:12:
d9:e7:67:81:d2:9c:30:a5:c8:25:ae:a6:94:e2:b6:62:62:92:
60:e8:0e:ca:5a:bb:ad:f1:8f:6a:16:ff:72:bd:f5:79:86:fb:
6d:8f:9b:5e:21:14:bb:a3:69:e7:61:a7:73:62:a2:ca:83:56:
6f:1f:c9:17:b7:65:74:f6:25:8a:de:ba:92:38:62:2e:b8:ac:
6b:d8:85:d0:ff:c3:86:b4:78:c8:90:ba:f3:54:80:34:e1:a7:
fb:95:d9:15:5d:1d:39:4d:69:5b:f8:9a:6e:63:a2:a3:e9:ec:
fb:de:1d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 07:54:14 2026 by rpki-client