
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/21e3a72f-a534-3aad-93cf-310e92f025b6.roa
File: 21e3a72f-a534-3aad-93cf-310e92f025b6.roa (raw, json)
Hash identifier: hhOs/gh+M8elR+wyhiDJxpILUqtOo+h//yPyPAPgTNc=
Subject key identifier: DA:60:8C:5C:52:6D:09:AD:DC:D1:59:A3:EB:78:C6:36:99:36:86:F9
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D0EA64D46887094003A922E00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/21e3a72f-a534-3aad-93cf-310e92f025b6.roa
Signing time: Fri 26 Dec 2025 15:00:11 +0000
ROA not before: Fri 26 Dec 2025 15:00:11 +0000
ROA not after: Thu 26 Mar 2026 14:00:11 +0000
asID: 273280
IP address blocks: 38.236.174.0/23 maxlen: 24
204.157.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0e:a6:4d:46:88:70:94:00:3a:92:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Dec 26 15:00:11 2025 GMT
Not After : Mar 26 14:00:11 2026 GMT
Subject: CN=0360f17e-5bd3-40ee-9829-d26b727281d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:ba:f7:b4:25:ca:b6:d1:db:a4:80:59:1d:
22:1a:81:98:76:5f:bb:15:42:93:a9:b0:19:3c:5d:
e0:3d:0f:53:24:eb:17:39:83:ee:76:bd:25:73:2c:
e5:78:30:db:3a:5f:d0:d8:f9:07:82:73:46:db:bb:
2c:36:b5:b7:db:a4:2d:f4:c6:c4:0a:1b:17:b0:a9:
12:a6:e1:59:53:1b:cb:99:83:2b:aa:63:d3:fe:b0:
cc:42:00:29:be:f7:43:20:74:21:da:5f:fb:47:ab:
db:bd:65:a6:a2:37:65:e3:8d:86:03:7c:83:d7:98:
43:71:c2:69:94:f4:3a:c7:69:cc:82:d3:89:7f:af:
ee:51:54:29:7b:8a:7b:20:cc:88:46:bd:52:2a:a5:
a6:c5:02:ff:33:10:28:00:2c:51:be:b5:7a:d5:46:
58:ff:6b:f8:13:35:a9:fa:8a:b5:3b:32:bc:46:bc:
6c:32:d8:13:81:ed:06:2f:54:b9:4e:ac:78:8f:77:
66:17:23:15:b1:d3:b4:52:bb:ff:73:56:c9:c4:e2:
20:91:46:a7:bb:5a:7b:bf:67:a7:4f:0b:69:62:14:
b8:21:50:7c:75:6e:d8:69:36:3c:96:b7:f1:c9:37:
18:78:0f:b4:20:5a:e4:e4:a1:2b:33:7e:bc:e5:8c:
97:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:60:8C:5C:52:6D:09:AD:DC:D1:59:A3:EB:78:C6:36:99:36:86:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/21e3a72f-a534-3aad-93cf-310e92f025b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
38.236.174.0/23
204.157.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:c5:fc:9b:59:b1:03:87:f1:63:b6:90:01:0a:2c:c3:65:fa:
4b:fa:2c:05:76:8f:cd:f4:61:3e:17:e0:5b:16:a8:33:91:5e:
2e:e3:4f:59:9a:6e:74:13:ef:59:ed:d2:f4:dc:f0:e7:f3:c1:
8c:c0:65:84:0b:12:1d:12:ae:24:03:3d:66:06:aa:ce:3f:d8:
d0:a9:79:4e:43:0c:b7:bf:7f:de:8e:28:eb:97:84:58:1f:86:
2e:f9:c1:70:26:ed:f7:43:6f:e9:fc:e1:7d:0a:e3:0f:8f:98:
2f:73:96:b1:37:48:ee:d6:58:a7:90:f1:27:85:8d:e5:d4:58:
fe:e3:29:99:b9:d3:1b:e4:1f:41:12:3e:19:3b:1f:79:80:f8:
95:8e:99:19:a4:09:dc:c4:e2:bd:bb:2d:bf:ce:b5:dc:a3:cd:
27:68:15:83:b9:2b:37:3d:5b:bd:57:78:f1:2f:50:12:ea:ae:
b4:e0:37:da:ef:d3:1b:ef:35:85:8b:e4:dc:3d:67:4b:14:f6:
aa:c5:d1:b8:94:5c:40:80:aa:3d:18:f3:94:a5:28:15:65:fa:
b4:3c:be:5c:8b:7d:b6:0b:49:a5:87:ec:3a:3a:ad:d0:00:f6:
d0:a0:7c:a7:bf:42:35:4c:b8:50:9a:d3:84:36:20:2a:83:c6:
15:20:5b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 18:25:07 2026 by rpki-client