
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/245081f2-effd-35ab-aee8-d10c19f48000.roa
File: 245081f2-effd-35ab-aee8-d10c19f48000.roa (raw, json)
Hash identifier: Hu100Ryfx0oYQUzmz4mESG7ZGIR0PLcZkUcVLwfXnd0=
Subject key identifier: 6B:D7:6C:F9:32:98:37:71:21:1E:84:90:92:86:ED:79:1C:0F:D1:04
Certificate issuer: /CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6
Certificate serial: 010D0C9F4328584CB81C8F17F85C6858C8578410
Authority key identifier: 0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/245081f2-effd-35ab-aee8-d10c19f48000.roa
Signing time: Sun 01 Feb 2026 14:00:40 +0000
ROA not before: Sun 01 Feb 2026 14:00:40 +0000
ROA not after: Sat 02 May 2026 13:00:40 +0000
asID: 16509
IP address blocks: 209.51.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b8:1c:8f:17:f8:5c:68:58:c8:57:84:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6
Validity
Not Before: Feb 1 14:00:40 2026 GMT
Not After : May 2 13:00:40 2026 GMT
Subject: CN=a343d9b1-7ab2-470c-9c06-19436b2798b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f2:3b:fa:88:5e:4e:7e:ed:8e:0e:d7:90:2d:
7d:0d:6e:b9:04:66:f7:14:91:c4:14:28:e7:38:a0:
e1:97:99:02:cc:48:fc:3c:85:a5:7a:13:32:2f:6a:
93:70:12:98:78:57:08:ba:5c:00:b1:ee:af:e4:73:
89:54:c8:40:fc:0c:b0:63:4a:59:59:1c:c4:78:83:
f8:be:b2:fc:24:32:51:e8:ac:04:dc:1e:68:95:f4:
90:54:43:d3:08:7b:39:2f:73:15:7f:03:71:24:a9:
a4:94:3e:d6:e4:a6:20:03:99:90:fd:fc:4f:8e:7e:
03:c9:f3:1e:7b:e6:48:1b:f5:52:9e:7e:d5:52:d3:
a7:6d:1c:f0:9e:52:24:ce:b2:bf:e2:64:5f:63:fb:
83:2a:58:cf:d9:fe:2f:96:06:2d:77:d3:f4:62:75:
df:d6:68:27:ec:71:db:ce:7c:a0:2a:03:c5:0f:47:
6b:4c:85:f8:7c:f2:17:35:57:20:97:0b:90:2b:19:
ed:4b:d7:2f:12:a2:4a:7c:cd:6b:a2:10:bb:98:65:
16:1c:0a:3a:43:66:fd:e6:03:dd:aa:67:ba:74:fd:
6e:7a:9f:fd:2f:1f:b1:3b:f1:7c:52:c2:59:bb:a6:
71:67:16:0f:7d:42:45:d1:dc:1d:0b:cc:cf:d9:93:
75:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D7:6C:F9:32:98:37:71:21:1E:84:90:92:86:ED:79:1C:0F:D1:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/245081f2-effd-35ab-aee8-d10c19f48000.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl
X509v3 Authority Key Identifier:
keyid:0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer
sbgp-ipAddrBlock: critical
IPv4:
209.51.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:b2:75:81:b0:58:fd:d6:cf:6d:69:0d:2a:df:a2:5a:19:99:
14:7d:fa:76:95:68:4d:bc:7a:98:28:e9:82:e7:5c:a0:01:74:
ac:70:b2:14:5f:17:d3:4a:87:71:5d:6f:4e:3c:9d:2f:ea:54:
55:f1:bf:32:95:bb:84:f7:06:52:b6:37:cc:a9:b9:27:a4:80:
b9:55:4e:79:1d:21:88:1b:d1:3b:e0:82:0f:22:4c:cb:25:6a:
2e:e1:b0:f8:2e:af:7d:69:59:c5:da:dc:5f:6d:1c:06:a3:f1:
c8:bb:a9:ea:58:5d:fe:52:d1:40:09:4a:f0:60:82:5d:c2:e5:
01:e3:9b:6a:b2:9f:35:29:fe:16:61:40:c2:ea:64:5c:04:2d:
d8:be:af:7f:a0:62:4b:0f:e0:ea:34:25:c2:90:4e:21:22:04:
31:cf:4b:75:19:ba:43:f9:8a:d1:da:3c:e7:24:2a:18:36:02:
26:56:ab:d6:f9:0a:32:66:26:4c:fe:52:af:6a:fb:c3:75:6a:
7c:c4:be:fc:a3:23:9a:b9:32:33:85:51:99:0e:65:9e:7c:cc:
db:47:82:36:e7:b9:43:c2:7b:b8:c9:c5:38:54:ae:0f:33:13:
3d:12:e0:8f:32:41:38:dd:44:37:6d:c3:a6:a7:ea:02:37:66:
54:7b:63:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:28:28 2026 by rpki-client