
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/21ed9c33-b646-337e-9363-ff7e1a1cf097.roa
File: 21ed9c33-b646-337e-9363-ff7e1a1cf097.roa (raw, json)
Hash identifier: T/a5Oz0RuCrr3SO9HDhwo6//OHtvWLSUEltGlBuZ4so=
Subject key identifier: BF:9B:28:F8:90:EB:B3:58:52:42:CB:EC:BD:C4:27:3B:31:5D:56:57
Certificate issuer: /CN=d862b5c6-40a1-4249-a26e-11938a702985
Certificate serial: 010D0C9F4328584CCBA75E3774F0E99BA17360C0
Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/21ed9c33-b646-337e-9363-ff7e1a1cf097.roa
Signing time: Sun 08 Feb 2026 14:00:41 +0000
ROA not before: Sun 08 Feb 2026 14:00:41 +0000
ROA not after: Sat 09 May 2026 13:00:41 +0000
asID: 15257
IP address blocks: 173.195.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:cb:a7:5e:37:74:f0:e9:9b:a1:73:60:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985
Validity
Not Before: Feb 8 14:00:41 2026 GMT
Not After : May 9 13:00:41 2026 GMT
Subject: CN=c9199b33-f407-432c-a13a-a7010fd2e30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:72:a8:f5:22:ed:a5:a5:9a:49:71:d5:4e:f5:
0c:ec:e7:46:8e:e1:52:ea:cb:e1:52:b1:ae:37:d8:
a1:96:4d:27:a1:7f:ed:07:85:58:2e:8a:b7:50:f3:
ad:ae:f2:5a:89:b4:29:8d:dd:21:b0:14:cb:d3:52:
a9:b3:ab:8f:ee:7b:bd:43:e0:e1:f6:57:62:3b:c5:
f3:22:94:c3:3f:b4:5d:54:16:b2:20:09:3f:7f:7a:
cb:f2:04:c3:75:7f:ed:15:90:a3:37:7c:a1:84:44:
d6:a6:6c:6c:3d:db:f0:77:42:43:2f:e0:01:23:c2:
c5:27:53:d0:44:e8:0b:76:cb:54:fe:09:dc:aa:bc:
3a:e6:46:15:57:04:d9:48:8a:d0:54:3f:1d:79:27:
83:42:7f:3a:70:ef:d7:fd:a2:94:ac:a3:1a:19:2b:
39:e7:a5:e0:9f:36:b5:43:6d:cf:3c:83:e2:85:2b:
41:f6:0d:ec:f8:c4:da:81:65:95:52:f8:f6:31:97:
38:1f:05:cf:b8:01:86:13:a6:e8:9b:df:74:24:4f:
32:3c:e3:9e:da:ec:24:12:4a:71:f0:ff:40:5e:29:
9f:8f:40:9d:aa:ba:5f:d3:09:be:aa:f4:f6:1d:f2:
e3:6b:06:45:2c:b8:ad:10:14:10:f6:7a:2e:ac:74:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9B:28:F8:90:EB:B3:58:52:42:CB:EC:BD:C4:27:3B:31:5D:56:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/21ed9c33-b646-337e-9363-ff7e1a1cf097.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
X509v3 Authority Key Identifier:
keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
sbgp-ipAddrBlock: critical
IPv4:
173.195.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:f2:2a:b2:98:0d:d2:f0:44:97:9a:74:f1:13:ce:45:fa:b3:
30:d3:3f:7f:6c:e9:7b:d7:9b:82:a3:d3:2a:a7:7e:b6:ac:cc:
c7:08:25:64:cc:44:ac:fd:05:26:a7:90:3e:92:04:d2:59:da:
47:98:86:68:f7:12:b5:a7:9c:47:27:ee:61:7d:05:27:de:0c:
83:ae:43:ba:ea:27:e4:1f:39:c7:1c:cd:f3:58:0f:34:ec:18:
c0:ab:8d:41:1b:87:16:43:92:f6:cf:b5:30:1d:c6:cd:f5:26:
2a:a3:c6:2b:24:e5:74:66:63:e1:0a:57:7f:7d:2d:e2:11:ce:
5a:a2:20:7f:a4:66:62:af:9f:82:82:aa:1f:cd:04:74:50:55:
74:c2:89:60:e7:4e:4b:a6:1e:5e:3e:47:fd:bb:ca:79:da:86:
0d:b9:15:c2:99:68:11:c3:70:17:c1:a6:c5:75:6a:a3:63:9c:
99:b9:24:a0:e1:5c:e0:73:7e:1c:b7:21:5e:e0:58:e1:0c:80:
33:aa:14:d7:5d:e1:bd:7e:e5:ab:01:1e:68:a8:c4:15:98:28:
e9:cc:2e:6a:df:a4:1c:58:12:b8:31:ed:e1:44:55:63:2c:40:
1c:00:4d:18:a1:81:33:3f:d5:1a:e5:ca:43:67:4e:cb:57:f6:
ed:43:fd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:54:55 2026 by rpki-client