
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/21c41157-4b40-3d37-ad30-675e86c76039.roa
File: 21c41157-4b40-3d37-ad30-675e86c76039.roa (raw, json)
Hash identifier: I5wGF1PLUfybdBsjN1Z0TxJyaTMXRNyp+BvK6GQ3Eso=
Subject key identifier: C9:44:67:EE:97:46:77:46:D6:51:3C:83:8E:A5:6C:06:A8:75:46:62
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F4328584CE097A9FB237992E89DD91900
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/21c41157-4b40-3d37-ad30-675e86c76039.roa
Signing time: Mon 16 Feb 2026 02:00:32 +0000
ROA not before: Mon 16 Feb 2026 02:00:32 +0000
ROA not after: Sun 17 May 2026 01:00:32 +0000
asID: 63179
IP address blocks: 69.12.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e0:97:a9:fb:23:79:92:e8:9d:d9:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Feb 16 02:00:32 2026 GMT
Not After : May 17 01:00:32 2026 GMT
Subject: CN=034c28fc-1272-4dfb-8169-84234cabf399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fa:66:ae:90:eb:aa:14:47:30:46:6e:63:75:
58:aa:94:dd:25:9c:6c:32:72:6a:23:68:f9:3d:e6:
7a:df:d3:46:82:0f:bc:df:48:04:2d:f2:3d:e9:89:
d6:11:84:c2:71:19:78:98:85:41:1d:c6:61:70:bd:
1f:b4:46:1d:5e:83:f3:b7:77:6e:bb:2e:67:9c:2e:
bb:f0:4a:83:d4:be:57:68:6f:f1:a0:15:fd:a4:a1:
cc:6e:4b:04:26:93:63:db:4f:df:8a:25:ee:d3:f7:
e6:0c:38:9f:a3:a9:77:35:bc:de:b5:d6:46:78:58:
73:2f:cd:11:1d:50:7d:2f:66:34:ba:22:34:a8:0d:
71:e3:06:57:de:09:da:9c:bc:ab:3d:1c:2f:ee:17:
79:29:66:e5:58:87:d1:92:18:65:9e:86:00:41:01:
e3:23:56:77:7a:3d:d0:19:73:f6:15:39:2f:17:6e:
7f:bb:99:9c:72:a7:98:35:46:66:d0:08:89:a5:68:
2f:d0:b4:cc:a6:9f:e9:99:f1:5f:ff:ba:7a:23:82:
a3:4a:17:41:7d:35:d4:be:f3:39:d1:1e:1c:b7:ee:
87:35:f0:85:4a:88:a4:0d:a9:bb:0d:0f:6c:ed:13:
61:39:73:fc:82:f2:4a:4f:33:9e:28:8a:c4:b2:e0:
93:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:44:67:EE:97:46:77:46:D6:51:3C:83:8E:A5:6C:06:A8:75:46:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/21c41157-4b40-3d37-ad30-675e86c76039.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
69.12.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:bd:e0:64:a8:ca:67:a2:15:76:24:45:02:72:68:c2:e7:f2:
70:70:98:dd:df:cf:ac:f0:44:cf:7b:55:68:5e:23:ba:bb:86:
cd:b7:f8:8f:c0:ed:3d:09:9f:70:d1:87:e4:89:99:a9:ff:da:
75:5c:68:b6:d9:1e:82:77:60:cd:84:62:27:b0:0a:fe:08:39:
90:29:58:4a:db:fc:5b:fa:a3:ce:dd:a4:9b:b8:a0:24:4f:77:
eb:f7:c1:c1:27:72:5d:2f:93:c8:e7:ba:54:36:ee:b7:30:98:
55:76:93:c7:e2:bb:6a:85:e8:4c:11:ae:9a:9c:f8:38:59:38:
48:3f:76:53:0b:bf:03:51:9d:e9:fa:0b:1d:d2:43:39:fb:18:
48:1d:da:8e:75:3b:08:49:5f:09:78:b8:27:af:9c:93:31:b6:
b9:a0:f3:94:45:22:cb:30:83:17:24:c8:43:0d:a9:ec:03:44:
37:94:82:c4:a4:c4:97:0c:6b:89:86:98:c8:a3:53:4c:34:b4:
52:26:27:54:5d:11:ae:c8:ed:c7:e6:52:a8:3e:b8:50:81:e0:
8c:a0:69:9b:9b:35:97:59:27:04:41:3c:b9:0c:6d:cc:fd:c1:
9c:ac:e7:58:a6:bb:16:60:16:80:ea:3b:9f:89:6d:f8:9e:df:
e4:b3:32:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:25 2026 by rpki-client