
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/ea44ed2c-d782-3e86-b80c-6a141ef77c77.roa
File: ea44ed2c-d782-3e86-b80c-6a141ef77c77.roa (raw, json)
Hash identifier: GTkwvHOA56EG4eNeDH83BIv6HJ0JgK9QdTA9R+HE8qI=
Subject key identifier: 65:24:B2:CE:DC:8B:7B:6C:FA:3B:80:5A:DC:E5:50:69:FA:56:97:BA
Certificate issuer: /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial: 010D0C9F4328584F497607772657EAAD719AE700
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/ea44ed2c-d782-3e86-b80c-6a141ef77c77.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 18771
IP address blocks: 199.21.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:07:77:26:57:ea:ad:71:9a:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=06946d61-dc0d-4a25-8cbd-acf7ab64c842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:2a:94:14:e5:42:a5:db:45:8a:ef:69:bd:
9a:58:ac:13:ca:fa:b4:3e:9c:a3:36:08:05:a5:b9:
d6:39:dd:01:c8:dd:94:39:3d:9d:34:a1:58:ef:28:
74:ff:77:28:37:13:39:3d:16:d5:ef:0c:bf:2d:14:
a0:c3:ca:6c:e7:a3:28:07:05:95:03:a2:fc:01:86:
76:8d:19:eb:05:39:4c:4e:31:31:29:5f:a2:a1:43:
74:d5:1b:b2:fb:96:18:89:5f:1b:d8:6d:5a:67:8e:
62:13:d7:45:3e:4e:f3:ee:bd:f4:81:50:20:e5:2e:
fb:c0:b8:0d:77:90:5e:82:0c:62:e9:5c:61:eb:5e:
78:5d:24:83:32:87:4e:9e:ea:e1:b8:30:04:5b:b6:
54:23:e9:68:f2:29:c0:a1:87:d5:1f:e8:33:b1:85:
80:0e:29:e3:be:d8:33:43:75:54:d8:dd:e9:3d:c5:
b6:cc:f0:d5:69:89:3e:fc:ad:a1:a2:f7:4a:38:a3:
a0:14:58:a8:7e:ad:b9:11:69:55:62:35:f0:95:7c:
0f:9b:53:9c:af:3a:fe:50:8a:54:b7:e5:13:aa:aa:
20:aa:7a:36:ae:aa:52:39:1b:16:36:5d:f3:e9:40:
ca:01:7e:68:c5:c3:1e:c5:ac:cb:3c:8d:37:5d:fb:
0a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:24:B2:CE:DC:8B:7B:6C:FA:3B:80:5A:DC:E5:50:69:FA:56:97:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/ea44ed2c-d782-3e86-b80c-6a141ef77c77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
X509v3 Authority Key Identifier:
keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
sbgp-ipAddrBlock: critical
IPv4:
199.21.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:77:1b:2d:71:f9:d9:ec:15:d6:48:78:fa:ed:3a:5b:3e:32:
67:c8:04:cf:5f:d1:6d:bd:67:13:ca:be:11:73:75:7d:e0:b7:
98:97:b1:40:41:15:c7:04:83:e9:aa:8a:5c:cb:f6:91:25:5c:
a9:91:9c:6b:12:17:ed:e4:a4:a6:70:76:b4:80:50:7a:08:f8:
eb:ce:f0:92:8f:18:95:1b:55:08:4e:65:e0:16:e7:5f:2a:6f:
b2:fe:a0:2b:a7:4f:c5:61:b5:58:71:dd:3a:3a:14:83:1d:8a:
d9:a6:1f:ec:98:ad:97:fd:9e:e3:4b:66:17:e2:ac:a4:12:1d:
27:38:18:f9:ff:a9:76:3e:60:fb:6f:64:24:c4:e1:b7:ca:dc:
9f:f9:ab:50:01:53:85:8e:d0:4e:f2:19:84:88:b7:4c:9d:68:
8e:2d:6f:99:08:61:cb:fc:44:5f:1d:78:53:6d:74:8a:0a:14:
f4:25:1e:0b:61:4b:1c:ec:66:39:94:a4:f2:2c:63:92:0d:8d:
2b:2e:45:7a:ad:12:ad:75:99:98:2e:2f:72:ab:b1:ca:3f:51:
b2:d5:5d:9e:85:6f:b7:4f:ce:b7:58:f3:0d:58:a3:77:be:de:
35:87:84:a4:c9:93:f1:c8:67:95:bf:a0:cd:cc:29:a6:f5:2d:
24:20:47:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:17:08 2026 by rpki-client