
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/e21aefd6-472c-3930-aa58-debd99be2072.roa
File: e21aefd6-472c-3930-aa58-debd99be2072.roa (raw, json)
Hash identifier: SZpNId+1DBwaGxtVlRIrMgf0tuBloX38BoRzc78AgcY=
Subject key identifier: 85:B5:09:88:ED:C3:97:45:36:C8:38:FA:B7:59:A9:46:3B:8F:4B:24
Certificate issuer: /CN=9970d52c-d3a1-4687-a712-212a44ee0fb2
Certificate serial: 010D0C9F4328584EA5AA6DCF56E554BF2BA256C0
Authority key identifier: 56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/e21aefd6-472c-3930-aa58-debd99be2072.roa
Signing time: Tue 28 Jul 2026 09:00:11 +0000
ROA not before: Tue 28 Jul 2026 09:00:11 +0000
ROA not after: Mon 26 Oct 2026 09:00:11 +0000
asID: 395035
IP address blocks: 216.150.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a5:aa:6d:cf:56:e5:54:bf:2b:a2:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9970d52c-d3a1-4687-a712-212a44ee0fb2
Validity
Not Before: Jul 28 09:00:11 2026 GMT
Not After : Oct 26 09:00:11 2026 GMT
Subject: CN=a1b75bea-0b49-45df-a90f-1f638c05d615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:06:a0:e9:54:12:28:86:09:f1:bd:93:ae:f5:
23:24:f1:2f:14:58:23:49:ec:8e:a6:df:e9:41:17:
3b:12:b2:9e:77:3f:97:8b:78:e0:ee:ec:53:20:22:
5f:0c:95:cd:1e:c7:5d:ac:bb:f7:32:ae:ff:7d:9a:
e6:b3:5a:09:bc:61:ff:eb:b3:50:9e:3f:02:df:4e:
c4:4d:98:64:29:ee:32:04:3c:f8:58:b8:d5:63:53:
58:4a:06:4b:98:70:74:1b:49:df:36:f8:d2:21:3d:
fd:41:68:fd:ad:0c:5c:d7:b5:86:e7:0b:92:63:f7:
dc:48:99:73:93:7f:69:9e:a3:ed:d2:29:30:6c:dd:
23:5f:79:62:c7:32:3d:b8:d1:31:59:64:1b:0f:5f:
46:c4:f6:45:9c:78:0c:65:dd:a7:96:9a:13:cb:8d:
0c:83:55:5f:83:4e:e1:b2:c4:2f:cd:4d:01:1b:39:
af:ba:37:39:a5:1f:aa:fb:8a:31:24:26:6e:35:81:
9b:60:7b:da:16:91:cb:ff:98:4d:43:19:fc:e9:1c:
43:a1:cd:ec:f1:7d:23:ed:35:82:bc:67:47:6f:3f:
22:87:26:7c:b5:0c:b3:8b:9e:39:37:ac:44:ca:4a:
22:57:ac:e0:8d:59:88:76:71:c1:b6:0b:00:cd:a5:
bb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B5:09:88:ED:C3:97:45:36:C8:38:FA:B7:59:A9:46:3B:8F:4B:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/e21aefd6-472c-3930-aa58-debd99be2072.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl
X509v3 Authority Key Identifier:
keyid:56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer
sbgp-ipAddrBlock: critical
IPv4:
216.150.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:96:bd:fc:09:d2:86:d5:97:2e:96:95:c1:dd:d3:0e:bc:0f:
8b:2b:3f:78:51:5d:d8:f7:40:07:3e:b4:6f:44:99:4d:6a:c4:
b0:7e:d2:42:1c:8d:4f:be:57:cf:12:aa:0a:58:83:c8:b5:21:
25:b8:d8:6e:c2:07:2c:7a:b9:bb:fb:08:e1:8b:0a:09:45:0c:
7a:d9:1f:f2:98:25:16:34:ba:27:e2:f3:69:2c:5f:3b:60:4a:
00:58:eb:bc:93:48:80:e9:dc:45:cf:c0:ad:c9:eb:db:3f:44:
ec:de:7c:a2:b4:3b:8f:41:4d:83:13:f8:09:9a:93:e2:b9:c1:
43:1e:51:f9:ba:ef:ef:15:6c:f2:5b:fd:74:2c:3f:25:48:0e:
89:8d:05:b7:aa:ad:37:77:a0:b5:1f:98:31:38:c3:1b:2f:05:
78:6f:6f:fb:e0:45:b8:13:37:2c:5d:b9:91:e1:ac:7c:b7:7b:
bd:1d:7d:2c:f1:21:87:31:ae:1c:f8:a2:81:2f:71:32:ce:91:
ac:7e:95:e9:39:0a:4f:5b:7d:02:36:eb:21:7d:e6:91:13:52:
a1:ca:de:c6:24:39:68:98:9c:df:65:91:77:72:4a:ec:ac:c5:
21:a3:d7:32:93:30:ef:d8:dc:d7:10:96:89:36:ef:9d:e4:37:
8c:2a:1a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:07:54 2026 by rpki-client