
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ef167bf0-e97f-3b1d-8343-53f8aceab489.roa
File: ef167bf0-e97f-3b1d-8343-53f8aceab489.roa (raw, json)
Hash identifier: leSjhI9wOZvqsrRoEZRaXfJ2J9NtiHKp7Tfid8J1J+w=
Subject key identifier: 83:41:14:E8:9F:B6:E6:21:24:B0:B5:E9:38:46:80:BF:61:18:60:E8
Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
Certificate serial: 010D0C9F4328584F02421C9D1862987D661A2220
Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ef167bf0-e97f-3b1d-8343-53f8aceab489.roa
Signing time: Sun 30 Aug 2026 13:00:11 +0000
ROA not before: Sun 30 Aug 2026 13:00:11 +0000
ROA not after: Sat 28 Nov 2026 14:00:11 +0000
asID: 174
IP address blocks: 216.21.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:02:42:1c:9d:18:62:98:7d:66:1a:22:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
Validity
Not Before: Aug 30 13:00:11 2026 GMT
Not After : Nov 28 14:00:11 2026 GMT
Subject: CN=6293acf0-2851-4d47-b9d4-e48e4f317c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cf:3c:af:cf:36:e8:e6:11:9a:f3:6e:be:ad:
d7:76:d8:18:28:9c:d2:83:11:ff:27:d7:82:ba:5f:
03:5d:dc:49:dc:15:c7:37:50:45:6a:66:9c:6d:2e:
bd:fa:58:03:52:7d:3d:c9:0f:48:18:2e:49:fc:f9:
22:41:fa:1f:f2:51:85:1c:fe:44:ef:0a:84:25:35:
51:85:3e:ba:da:f7:ff:3e:c6:f5:6c:2a:b2:f0:bd:
73:9a:ce:30:b3:ac:80:68:0a:96:33:c0:28:7e:e7:
10:19:23:0b:5c:62:7e:c7:18:2e:ed:57:78:b1:ac:
e6:54:49:c3:18:2d:1d:73:10:61:36:ff:4f:48:5f:
fa:8a:34:b1:cd:45:37:1f:b3:f5:40:f5:8a:06:8a:
d4:14:49:00:4e:ec:61:b3:43:f9:bb:52:c2:6e:68:
00:ba:29:47:0c:f7:66:09:a7:82:4a:68:a7:fb:6b:
51:a2:d9:4a:4e:8b:7d:28:6b:4c:6b:ab:75:76:58:
cf:40:66:b4:c0:4d:79:3f:33:02:01:c7:99:96:bd:
7a:8e:46:60:0b:73:8d:99:16:00:15:7d:29:d6:e9:
e2:0a:da:04:af:2f:47:6f:c8:d5:47:95:bc:25:98:
64:a7:55:ed:72:67:d5:6d:f4:4a:da:ab:48:a1:8e:
dc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:41:14:E8:9F:B6:E6:21:24:B0:B5:E9:38:46:80:BF:61:18:60:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ef167bf0-e97f-3b1d-8343-53f8aceab489.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl
X509v3 Authority Key Identifier:
keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.21.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:d9:9b:62:a1:e1:2b:27:41:8e:2d:57:69:ad:03:d8:8b:e6:
1e:e1:c4:c4:08:15:0f:72:cd:1a:62:6f:d0:a3:b2:e6:53:76:
b8:12:35:33:7a:d5:bb:ed:99:1f:e5:c0:5a:41:ed:09:71:d2:
58:c2:28:4d:16:ae:03:de:81:95:39:db:42:53:0b:74:b5:1f:
e6:a3:48:78:f0:85:ba:d3:10:e7:39:5a:3d:f1:b0:7b:69:36:
da:73:12:1e:af:28:ad:b1:ae:21:a3:ee:ce:8a:fe:53:89:eb:
0e:93:d7:00:60:2f:93:5d:ee:c1:cb:a1:d5:7b:e9:0c:da:1b:
b2:67:fc:b7:29:18:1c:6d:9e:92:d5:c5:f3:dc:ff:9c:f1:e4:
df:27:45:49:e7:20:9a:b4:1d:fe:e4:a5:d5:5a:8a:fe:ca:30:
83:fc:8d:91:70:99:b2:25:f9:2d:4a:3c:63:c2:9a:97:4f:2d:
c8:8e:43:fc:06:53:9d:85:d2:65:62:b7:9f:84:0a:2d:7d:05:
ea:5a:15:0b:44:23:36:6e:94:68:bc:8e:96:11:6c:f9:54:56:
aa:e4:d2:7f:2c:29:12:eb:65:6f:31:3a:25:6b:5f:46:36:7f:
3b:7b:f9:07:4a:05:21:34:28:e4:0a:46:c4:97:aa:fc:ca:d3:
df:eb:9c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:21:53 2026 by rpki-client