
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/7a378480-4798-3595-8334-ac92770121a5.roa
File: 7a378480-4798-3595-8334-ac92770121a5.roa (raw, json)
Hash identifier: EV5HdwjUIw9uwcGvhgwr/ZjA+6oSYt8TjUVd7FaFrgo=
Subject key identifier: DD:5E:BE:85:E1:50:4F:CD:03:4F:66:6E:5B:98:96:1C:86:C5:5D:99
Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e
Certificate serial: 010D0C9F4328584BABFD3BC955D7EB3014A08700
Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/7a378480-4798-3595-8334-ac92770121a5.roa
Signing time: Tue 28 Oct 2025 13:00:38 +0000
ROA not before: Tue 28 Oct 2025 13:00:38 +0000
ROA not after: Mon 26 Jan 2026 14:00:38 +0000
asID: 22805
IP address blocks: 72.21.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ab:fd:3b:c9:55:d7:eb:30:14:a0:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e
Validity
Not Before: Oct 28 13:00:38 2025 GMT
Not After : Jan 26 14:00:38 2026 GMT
Subject: CN=79587e83-e20f-4a53-921c-09eaded34f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:b0:4c:f4:29:63:c3:59:7a:19:e8:36:3a:
5e:32:78:19:2d:89:27:72:ba:cd:7f:0a:5a:07:f8:
30:cb:9b:83:b0:93:b3:18:69:f0:5c:21:e1:72:48:
e0:d6:e2:c5:18:f1:c1:b7:22:48:df:5e:b6:0f:ba:
3a:59:1b:45:59:16:2e:6c:33:38:8d:a4:5c:9c:7b:
1f:3b:01:6b:4b:86:17:8f:a0:ef:ee:88:ca:8b:5a:
8a:64:ff:85:f3:f9:5a:a0:36:11:15:7c:59:2f:86:
14:77:ee:79:69:4e:7a:87:75:be:16:77:ae:36:8e:
9b:9c:4c:41:ab:1a:96:cd:1b:14:d3:8b:4c:b4:90:
4c:e6:44:af:d5:51:70:c5:0f:84:08:29:9d:85:72:
ef:62:4b:ba:65:03:66:d0:38:8d:c2:b5:1b:de:9f:
73:ff:cc:cb:22:3c:d2:ac:54:cc:e0:ea:bc:fc:ca:
f4:69:8c:9d:a9:da:fc:b8:93:20:50:92:4e:2d:c8:
fd:ba:d1:55:9c:c6:cc:21:56:d3:f0:85:8f:ca:2a:
42:f6:ef:5e:6d:8d:7d:6c:25:d1:63:03:16:85:cf:
df:34:4f:27:7e:ad:21:a1:6f:81:ce:62:a2:ef:a0:
5e:d1:73:e0:bc:8e:af:f6:3a:5c:8d:16:40:af:07:
9a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5E:BE:85:E1:50:4F:CD:03:4F:66:6E:5B:98:96:1C:86:C5:5D:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/7a378480-4798-3595-8334-ac92770121a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl
X509v3 Authority Key Identifier:
keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer
sbgp-ipAddrBlock: critical
IPv4:
72.21.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:9b:a6:d1:d4:9a:53:3b:58:b9:95:6c:e3:73:c0:f7:f7:45:
dc:43:d6:1c:1b:f9:9d:e4:36:28:4f:3d:80:cf:cc:cd:6f:68:
c0:70:05:13:be:41:1d:b4:1e:fe:19:7c:32:93:1a:f8:03:2f:
5e:76:a4:8a:cc:99:11:7a:ff:7d:de:21:4a:b4:6f:19:2d:61:
d5:1b:62:da:56:2b:5d:78:b6:30:b7:44:07:98:80:46:c3:0d:
1a:69:50:ca:7a:83:d8:23:94:46:ee:4d:6f:28:09:6e:6e:14:
2a:4a:03:98:fe:2d:75:5c:12:74:fa:59:3b:d4:a8:8c:b5:25:
c2:0f:d9:fd:54:63:78:78:c3:26:25:cb:99:5a:68:1f:4c:9e:
6f:30:0d:dd:46:04:13:7d:11:b9:8a:7e:09:77:2f:8f:9a:6c:
44:2b:1e:37:a2:01:93:bf:8c:c0:7f:e0:f9:42:17:b7:8f:f1:
0c:a3:e1:02:0a:f0:00:b1:8f:e0:62:bd:6f:92:04:7b:5f:36:
91:bf:b8:9c:22:3d:93:76:6e:72:7d:e8:43:97:78:65:44:ab:
a9:b8:f7:e8:a6:48:e5:17:0a:63:6b:e4:14:95:da:d7:cf:2d:
28:19:72:3b:af:b5:f8:9d:ed:9e:d2:e1:35:ee:a5:db:9d:e0:
d2:f8:66:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:13:36 2025 by rpki-client