
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd/21b758c9-e698-35f4-b007-715f1166d50d.roa
File: 21b758c9-e698-35f4-b007-715f1166d50d.roa (raw, json)
Hash identifier: gmpvtIQONw1xBvWoEvFaj/BRARw13Adv9/WCFhmH8o4=
Subject key identifier: 46:D7:F3:3A:E9:DB:39:FB:66:F5:FF:CD:68:E7:C4:1C:16:AB:C9:3A
Certificate issuer: /CN=d3510324-7081-47df-ae57-12a0470696dd
Certificate serial: 010D0C9F4328584ED4325B71896E432EB070DD80
Authority key identifier: 22:11:82:48:4A:13:E0:AE:9C:5D:2A:A3:1A:92:A0:5A:75:CB:B5:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd/21b758c9-e698-35f4-b007-715f1166d50d.roa
Signing time: Fri 14 Aug 2026 01:00:13 +0000
ROA not before: Fri 14 Aug 2026 01:00:13 +0000
ROA not after: Thu 12 Nov 2026 02:00:13 +0000
asID: 23089
IP address blocks: 9.128.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd/d3510324-7081-47df-ae57-12a0470696dd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd/d3510324-7081-47df-ae57-12a0470696dd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d4:32:5b:71:89:6e:43:2e:b0:70:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3510324-7081-47df-ae57-12a0470696dd
Validity
Not Before: Aug 14 01:00:13 2026 GMT
Not After : Nov 12 02:00:13 2026 GMT
Subject: CN=70868fc4-8289-4b11-8560-b1e11fafc826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c4:a5:44:73:bf:25:53:9c:c1:98:8d:8a:66:
de:f3:59:a6:f6:21:36:8e:c9:93:f4:ed:f9:bb:3b:
d8:4f:49:50:17:5e:98:ea:98:2c:72:75:09:95:0b:
a0:06:f9:5e:b5:c1:49:f8:c8:5a:29:6b:32:ed:08:
9b:04:bb:55:ce:26:01:48:be:7c:ae:1c:79:e4:45:
8e:a1:8e:af:e0:93:b4:73:e8:ef:69:d3:01:95:d0:
d5:9f:c1:31:4a:88:6c:1b:1e:d7:7d:53:d2:40:c8:
90:cd:ec:2f:60:9b:c6:08:ee:8b:38:ac:97:30:a8:
5f:99:61:4a:10:28:fc:69:ec:86:0c:91:bf:63:55:
02:e8:ce:75:3d:ce:0a:c5:9b:ea:7f:ee:26:dc:e8:
6f:e1:20:ed:fe:c3:0d:ce:74:f0:b4:c0:f1:3c:3e:
10:c1:9c:32:c9:08:75:07:3a:5d:74:70:1c:0a:37:
f0:da:75:b3:4b:19:96:8a:61:c4:53:3e:6e:37:5d:
15:4d:da:84:10:76:23:b3:27:22:70:c9:54:b1:76:
ee:3e:f8:8a:36:e5:fb:99:0e:df:b9:a3:4c:8e:0c:
bd:3b:04:53:2a:62:e5:8f:d5:c2:f7:9e:75:65:fc:
e5:1d:9f:bc:a9:5d:7b:02:eb:1e:ae:9e:35:99:2a:
db:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D7:F3:3A:E9:DB:39:FB:66:F5:FF:CD:68:E7:C4:1C:16:AB:C9:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd/21b758c9-e698-35f4-b007-715f1166d50d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd/d3510324-7081-47df-ae57-12a0470696dd.crl
X509v3 Authority Key Identifier:
keyid:22:11:82:48:4A:13:E0:AE:9C:5D:2A:A3:1A:92:A0:5A:75:CB:B5:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd.cer
sbgp-ipAddrBlock: critical
IPv4:
9.128.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:98:48:05:fe:7b:b5:b4:08:e4:56:84:c5:58:64:1d:c0:62:
a4:63:49:67:25:e0:c8:e9:fd:66:3a:be:16:bb:a0:83:22:ea:
99:65:1e:14:0a:69:f3:21:c0:b2:98:92:95:16:fe:59:64:54:
55:34:c3:be:8c:76:f1:a0:ed:4b:39:48:e8:26:d0:3b:e8:a5:
e1:06:a8:c6:68:54:aa:13:6e:5d:de:41:d2:9a:04:bf:72:26:
95:0b:ad:1e:c0:06:2c:16:01:02:1e:7c:83:6a:34:33:95:60:
7d:8d:93:21:6f:9f:6e:3c:27:0e:46:05:eb:ef:6c:c2:4e:a6:
c1:db:7c:2f:a2:bb:f0:00:ff:24:e6:5a:2c:1b:ca:f4:b2:90:
69:a1:7c:00:f3:7d:e4:3c:cb:85:a7:0b:f9:89:22:6d:44:f7:
ec:44:10:28:74:cf:9b:39:30:d0:43:ff:58:ed:ad:ff:e0:f1:
0e:a2:48:c8:60:1d:93:71:37:83:87:58:23:49:8b:7a:38:c1:
d5:f3:a9:69:5d:23:ea:e5:d1:4d:1c:17:28:dd:13:e7:3d:9c:
fb:67:b5:58:d1:2a:47:37:57:a2:53:70:d8:41:bf:99:bb:39:
ba:35:2f:df:eb:c4:54:8d:33:32:ba:e8:8e:83:aa:fb:f1:37:
c3:f8:d7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:36:22 2026 by rpki-client