
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/42ad508a-1d9b-3416-b900-7d41869eb2b5.roa
File: 42ad508a-1d9b-3416-b900-7d41869eb2b5.roa (raw, json)
Hash identifier: RY/0p68NZo7IZk4ITD0Ds43hqNOZiB22qxf9tZPmsTo=
Subject key identifier: 94:CD:68:21:F5:15:EF:21:64:FC:C7:C3:6A:EC:A9:06:81:C7:AD:74
Certificate issuer: /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
Certificate serial: 010D0C9F4328584EAD1C558F982729F0A98F0DC0
Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/42ad508a-1d9b-3416-b900-7d41869eb2b5.roa
Signing time: Fri 31 Jul 2026 01:00:11 +0000
ROA not before: Fri 31 Jul 2026 01:00:11 +0000
ROA not after: Thu 29 Oct 2026 01:00:11 +0000
asID: 14217
IP address blocks: 64.21.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 21 Aug 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ad:1c:55:8f:98:27:29:f0:a9:8f:0d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
Validity
Not Before: Jul 31 01:00:11 2026 GMT
Not After : Oct 29 01:00:11 2026 GMT
Subject: CN=d0ddc99d-9a0d-49f3-b639-087f3d7c5c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b3:bd:72:dd:fa:55:cc:6a:4f:c4:47:ff:62:
b1:4a:c7:4b:e8:4c:7b:ba:a0:36:7d:f6:64:9d:6d:
8b:ed:e4:e1:1a:19:ab:c5:78:fc:de:c7:e9:77:ef:
00:a5:a2:fd:cd:3e:0e:f7:92:78:10:91:3b:25:59:
71:ad:b1:17:57:e4:70:f0:f1:4a:0b:af:47:d5:fc:
4c:d2:2c:ff:12:f9:d8:55:db:11:db:c2:60:64:20:
a4:ec:00:6b:80:99:b0:93:c2:f8:67:68:81:81:66:
db:57:8a:67:91:88:4e:bf:dc:d9:4f:55:cd:95:5d:
d9:eb:31:13:1e:09:a2:a6:a4:ea:1d:77:00:9e:8a:
a1:eb:61:92:95:c0:05:14:29:ac:dc:ab:eb:c5:7d:
52:bf:17:a9:ba:88:7d:5b:80:8e:21:d3:7c:9b:18:
d2:a3:73:f7:0e:4b:79:b3:26:78:1f:6c:18:47:ff:
86:d8:4e:fa:45:14:18:b1:29:ef:df:1a:7d:e2:4c:
70:e4:ba:c6:85:7e:36:61:d2:1a:d7:84:94:ac:bf:
07:12:c3:be:f0:c0:ce:31:23:12:b2:41:4d:e1:db:
49:d2:2e:86:6d:d6:7b:d8:58:fc:2b:4a:44:de:4b:
36:f1:49:56:9a:54:e7:e9:38:64:ec:38:b3:ef:39:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CD:68:21:F5:15:EF:21:64:FC:C7:C3:6A:EC:A9:06:81:C7:AD:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/42ad508a-1d9b-3416-b900-7d41869eb2b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl
X509v3 Authority Key Identifier:
keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
sbgp-ipAddrBlock: critical
IPv4:
64.21.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:cc:40:da:52:e5:19:6e:18:ad:8e:32:59:3e:be:bd:7f:a9:
ad:c3:26:d1:0c:ba:ff:19:8a:02:49:da:09:65:24:6a:09:84:
e5:1c:16:f3:25:5e:ab:e7:51:a7:b6:0c:65:a8:e4:1c:9d:62:
4a:e4:3a:12:1e:0c:da:c2:1b:73:25:65:2e:f4:c1:54:d5:2b:
cc:b9:fe:7d:31:bd:4c:69:fc:a7:86:71:bb:7c:57:e3:47:a4:
37:57:7c:66:17:d6:38:a6:8a:2e:6a:e6:21:e1:46:2e:bd:0d:
60:19:c5:3c:98:c1:53:12:4a:cd:28:26:73:50:92:3a:e7:cc:
1e:61:a9:5d:f8:7e:9e:76:ca:a9:19:3a:93:d8:37:5b:51:17:
bb:5b:9d:07:61:6b:b0:f8:d1:38:1e:03:82:d4:87:ef:45:0d:
c5:a2:54:d4:49:49:76:ab:44:c0:ad:eb:42:4f:40:e3:1e:63:
06:de:30:17:98:f5:45:01:f5:af:7a:32:02:43:fe:5f:82:7f:
da:5c:00:41:c7:31:7b:1d:df:9e:29:5f:d4:d6:56:63:32:e5:
b0:2a:d4:2a:97:50:fb:a6:9d:9f:8e:52:06:ff:9f:c6:47:f8:
e0:52:de:88:49:06:5d:0f:92:b7:66:38:24:04:83:b0:d3:ca:
fc:de:43:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:07:56 2026 by rpki-client