
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/a48abf00-c06c-348f-93b5-677951e2c9f1.roa
File: a48abf00-c06c-348f-93b5-677951e2c9f1.roa (raw, json)
Hash identifier: Fji9094x9HItysjoT72McmZtDtD73jwJnAEVKi9zBCg=
Subject key identifier: D3:F8:27:CB:56:9D:EF:8D:38:4E:4C:57:52:5C:60:B6:E1:E5:66:D0
Certificate issuer: /CN=21f498b5-84f8-4255-a971-76e62e3a212d
Certificate serial: 010D0C9F4328584F225D0624C7884031BC29B4F0
Authority key identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/a48abf00-c06c-348f-93b5-677951e2c9f1.roa
Signing time: Fri 11 Sep 2026 01:00:12 +0000
ROA not before: Fri 11 Sep 2026 01:00:12 +0000
ROA not after: Thu 10 Dec 2026 02:00:12 +0000
asID: 13335
IP address blocks: 23.136.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:22:5d:06:24:c7:88:40:31:bc:29:b4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21f498b5-84f8-4255-a971-76e62e3a212d
Validity
Not Before: Sep 11 01:00:12 2026 GMT
Not After : Dec 10 02:00:12 2026 GMT
Subject: CN=21837f31-5004-437f-9957-55c045ff88bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9a:cc:e9:39:1d:f2:0a:1a:b1:ad:31:61:fd:
45:f4:f8:61:7b:96:5e:0a:a7:de:08:7e:7e:7d:a5:
b8:dc:26:fe:59:13:88:b9:e5:96:38:d8:f7:aa:ae:
ff:e1:10:d0:a8:c1:1f:80:44:21:ec:4b:d1:c4:46:
4d:85:c1:e4:6f:f4:56:32:e8:f0:d2:c4:5e:31:0a:
43:d2:a1:fd:f2:17:a5:00:22:d2:04:40:fc:dc:fa:
13:86:4f:fd:78:96:b9:5d:31:76:3c:ea:cd:0a:5f:
d0:85:47:d7:f9:47:b6:ee:2f:9d:c2:28:b4:9d:07:
5c:70:1a:42:9a:61:c9:82:e9:56:e8:ee:46:9d:7e:
86:60:8d:c0:a0:71:34:d0:25:6f:5a:7a:85:6c:0d:
07:30:2e:9f:2b:13:4a:59:06:6a:62:19:15:ef:79:
4e:39:94:66:b5:57:29:6d:9c:5c:0d:67:e9:34:f4:
6e:d0:8d:5f:fa:b1:0a:70:80:f3:ad:57:2e:e4:26:
58:09:39:36:c6:36:4e:aa:48:79:96:c7:97:03:97:
04:53:7a:c0:83:55:82:b4:3e:7c:f2:92:f7:e0:e6:
91:da:2b:09:9a:be:2a:9c:e2:3e:40:39:05:ab:ff:
f7:5f:0c:7f:1c:1d:5c:5e:2c:dc:9d:b4:94:b7:84:
ad:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F8:27:CB:56:9D:EF:8D:38:4E:4C:57:52:5C:60:B6:E1:E5:66:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/a48abf00-c06c-348f-93b5-677951e2c9f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl
X509v3 Authority Key Identifier:
keyid:9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:07:a7:c6:41:9f:94:81:23:cc:27:33:de:65:03:21:a6:22:
b4:fa:56:0a:17:21:8f:bb:4b:3b:b1:f0:35:4f:7a:75:e1:8a:
a4:01:3b:a3:d7:9e:b9:ec:f1:ed:f9:c8:ae:de:e4:86:fe:28:
1e:18:11:d0:96:c1:33:1c:3e:40:60:1d:b0:5f:0b:03:e3:fb:
e4:b6:4e:47:11:82:97:18:99:0e:66:c8:58:33:9d:80:e4:5b:
5b:23:94:86:74:69:f1:e0:05:ea:cb:60:6a:60:54:57:02:5f:
ff:a4:f8:a7:ed:ca:6d:66:bf:c4:43:ec:3c:a7:9e:ce:ad:44:
f4:52:38:80:62:1c:6c:06:5c:3d:db:a1:ac:fa:ce:3f:ca:5e:
3f:9a:64:58:1b:26:46:94:4c:13:ed:10:1f:74:ec:23:6c:b0:
50:25:b8:21:5c:46:60:ea:b5:5a:b6:98:8b:20:1d:d3:15:88:
1c:0e:3d:00:9b:65:b1:22:4e:3b:bd:72:62:e3:00:c2:c1:3b:
73:51:11:ab:74:1d:fb:b7:84:ad:6d:60:cf:2f:e3:2e:36:07:
d1:ce:12:a9:8b:8b:4f:7c:c9:92:34:a3:f1:c3:ff:e2:3a:99:
7a:ef:58:84:bc:fc:32:fe:c3:de:50:b6:8c:d1:44:bc:c9:d8:
19:80:6d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:51:35 2026 by rpki-client