
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa
File: 0f216025-08f0-3ed8-84c5-9f7904503c8e.roa (raw, json)
Hash identifier: EckE6im1RQEUxhlDZ4ilqDXmyP4cxjiQxrFqgW/NVJw=
Subject key identifier: F9:7A:59:CB:9B:6A:43:61:DD:7E:8B:8C:09:68:8E:8B:8B:AD:C9:BB
Certificate issuer: /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05
Certificate serial: 010D0C9F4328584F6F22DAB4BA28A2E7F1270BCC
Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa
Signing time: Thu 08 Oct 2026 13:00:12 +0000
ROA not before: Thu 08 Oct 2026 13:00:12 +0000
ROA not after: Wed 06 Jan 2027 14:00:12 +0000
asID: 14717
IP address blocks: 72.21.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 15 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6f:22:da:b4:ba:28:a2:e7:f1:27:0b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05
Validity
Not Before: Oct 8 13:00:12 2026 GMT
Not After : Jan 6 14:00:12 2027 GMT
Subject: CN=6bfcc97f-2422-4fe6-a1b8-6043c3e955b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:89:3a:14:f8:05:3a:ec:46:47:3e:89:57:3f:
7d:c4:d5:01:df:20:db:6c:a2:10:7f:cd:ac:81:7d:
21:a2:88:fb:4b:c7:d6:b8:80:c1:b6:34:b4:bb:61:
93:98:02:c8:80:93:ba:52:cb:a9:4d:13:6a:ab:08:
45:b5:7d:c2:f8:55:50:95:1c:2e:65:af:4a:19:0d:
17:13:bc:a4:38:dc:b0:a3:ac:97:15:9e:91:2d:0d:
72:fa:45:d7:78:a3:33:ee:44:57:32:31:4b:8a:2c:
0f:8b:ba:67:65:3d:98:bd:46:d0:f1:85:82:38:ef:
46:4a:4e:27:f2:57:0c:01:47:e5:af:c8:fe:07:1c:
bc:fa:d1:9b:9e:ba:5a:cb:88:0c:f4:97:f2:73:1a:
c6:20:69:99:7b:a3:b9:67:bf:55:1a:85:8c:28:54:
9c:58:a4:a3:d3:81:a4:c7:dd:2b:c1:15:89:64:36:
ef:2c:06:ef:df:bc:86:ea:9a:71:ee:18:14:3f:37:
67:91:73:96:61:9f:c2:4e:81:8f:96:76:98:33:16:
95:bc:7d:c5:79:38:24:0f:ac:6d:1f:b3:f7:c4:96:
df:05:d1:58:1e:4c:85:5f:0d:b9:7e:58:c8:80:32:
68:7f:8a:2d:35:6c:79:85:ad:9c:83:b5:4c:07:25:
85:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7A:59:CB:9B:6A:43:61:DD:7E:8B:8C:09:68:8E:8B:8B:AD:C9:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl
X509v3 Authority Key Identifier:
keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer
sbgp-ipAddrBlock: critical
IPv4:
72.21.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:a5:fd:f8:05:af:da:3d:0f:1b:4f:fb:b9:91:7a:d4:f8:c3:
88:9d:c6:ce:87:38:eb:31:59:92:e9:4a:f4:c6:98:7b:31:db:
16:b2:00:b4:6f:b8:49:53:1a:13:a1:14:66:38:6a:32:5a:82:
b9:78:22:e3:ca:84:6b:2b:15:dc:c1:1a:5c:a8:2f:73:d0:2a:
7e:da:d2:f1:7a:8e:19:e1:6d:ee:89:9d:ef:b8:f2:a4:98:cf:
b3:d0:78:43:a5:ba:c1:51:61:a3:5a:48:11:dc:09:75:fa:c4:
07:a9:de:eb:b9:fe:08:f4:4f:7d:de:3d:50:82:13:49:a7:cd:
6d:1f:b1:40:29:97:9d:0d:d7:d6:bd:14:82:93:67:06:2c:a2:
2c:e0:fe:86:5e:4e:41:13:00:1f:0a:6c:e6:77:b6:eb:bb:00:
65:4b:be:67:6e:b5:bc:62:47:e8:83:f9:35:ca:12:39:09:f6:
86:6c:cb:30:36:2d:07:2c:94:83:29:54:e9:46:1d:1d:55:2a:
56:b6:50:b0:76:d4:08:aa:a5:6f:d4:b3:e1:3f:bf:d1:58:89:
46:3b:18:df:c5:c0:0b:0d:d7:f8:10:63:19:89:d6:3f:28:1f:
c2:cd:5c:3e:db:81:42:b6:0d:d6:dc:63:ad:3a:7a:d4:6c:e5:
99:7b:2d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:08:33 2026 by rpki-client