
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/995efe20-f339-3067-94d9-cb4ac509c5a8.roa
File: 995efe20-f339-3067-94d9-cb4ac509c5a8.roa (raw, json)
Hash identifier: pO+F4lNlaqtEb8+aVVQ0s+Q9+0nUN+MaOURs9gn9DbY=
Subject key identifier: 96:6A:6F:C6:61:CA:45:D6:24:EC:5C:C7:E6:62:5A:8B:48:3C:80:94
Certificate issuer: /CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Certificate serial: 010D0C9F4328584EE0C1E4CD6B8B6C92193779C0
Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/995efe20-f339-3067-94d9-cb4ac509c5a8.roa
Signing time: Tue 18 Aug 2026 13:00:12 +0000
ROA not before: Tue 18 Aug 2026 13:00:12 +0000
ROA not after: Mon 16 Nov 2026 14:00:12 +0000
asID: 16509
IP address blocks: 170.176.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e0:c1:e4:cd:6b:8b:6c:92:19:37:79:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Validity
Not Before: Aug 18 13:00:12 2026 GMT
Not After : Nov 16 14:00:12 2026 GMT
Subject: CN=485cb5b4-3f44-4740-ae4f-46ab015c5cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7f:96:86:7b:b3:11:1a:28:ef:87:94:18:95:
20:f2:b0:09:5d:a7:27:0c:c6:0c:30:22:c0:3e:fe:
72:03:3a:c3:fe:db:1a:0a:b3:ab:23:fc:69:f0:6b:
69:5c:b3:44:60:7e:2b:7b:5b:27:ac:f4:23:a0:69:
ad:dd:60:f7:43:d5:be:27:ce:d0:27:1f:d6:df:a4:
ed:d1:13:8b:66:df:73:ae:c5:cd:1c:81:af:ec:23:
4c:bc:33:28:df:a0:15:a3:fb:4d:5a:c0:96:24:96:
39:95:da:2e:83:da:67:30:63:bc:a1:b0:e5:d9:de:
8a:b4:22:b8:a8:62:f6:a4:1a:8e:45:a4:f1:6e:b4:
26:52:b5:3a:b4:fe:48:5b:bc:85:7f:9f:e1:63:d6:
5e:c3:86:ec:12:6f:da:61:95:15:65:03:fd:1a:ee:
18:4d:7a:3a:a1:9c:02:f4:63:c8:29:e5:a1:74:5c:
09:95:3a:cd:84:af:07:36:d8:2e:eb:62:7e:b1:68:
15:e1:e6:64:dc:34:f0:40:6d:ea:a6:ca:66:2a:46:
07:72:95:ef:eb:90:2b:f1:e3:ed:00:d8:e7:5a:fa:
39:0b:5d:cd:71:43:26:48:1e:0c:28:3f:5e:4d:87:
c0:29:fb:ee:fa:07:2d:cf:db:97:0f:1a:b6:02:01:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6A:6F:C6:61:CA:45:D6:24:EC:5C:C7:E6:62:5A:8B:48:3C:80:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/995efe20-f339-3067-94d9-cb4ac509c5a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl
X509v3 Authority Key Identifier:
keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
sbgp-ipAddrBlock: critical
IPv4:
170.176.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:2d:37:a9:3e:92:1e:31:20:0b:2c:98:14:ef:0c:da:b9:d0:
53:ad:dc:db:84:4f:f2:1c:51:16:17:a4:f3:63:07:a3:5c:5c:
20:b1:f5:4b:f4:3d:e6:cc:2e:35:b4:65:d4:b1:f4:8c:21:34:
d2:e1:79:00:6c:f8:1f:0e:5f:84:88:8a:fd:29:17:f3:ac:87:
0f:f5:ff:a3:5b:90:96:a1:26:32:01:33:6d:ec:5e:c4:f6:c0:
e5:70:17:d6:34:76:ca:49:49:4d:aa:88:e1:61:79:ae:ce:c8:
f2:b0:06:3c:ac:bd:08:90:cc:c7:84:a2:3b:2c:06:c2:ca:ea:
e0:00:2b:bb:12:04:1e:c8:6c:d8:b2:68:48:d7:d3:7d:e8:eb:
02:0f:e0:89:e0:fc:49:29:61:5e:02:be:d8:72:7f:7e:67:5e:
8c:53:19:d2:a8:4f:04:ba:36:f7:f3:8a:53:00:d5:a5:a0:28:
48:c2:03:d2:2c:77:b5:17:60:3d:f1:12:dd:55:1f:44:f2:be:
48:5c:68:ef:0d:e8:9f:31:34:bb:e6:47:41:08:b8:ba:84:d8:
48:c7:6c:5a:ee:fa:98:4f:29:02:12:07:69:7f:4a:8c:4c:e7:
d5:99:24:1d:46:c5:3b:5d:0d:e8:d2:36:f5:81:eb:57:8f:b3:
4b:7e:54:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:26:00 2026 by rpki-client