
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/7a378480-4798-3595-8334-ac92770121a5.roa
File: 7a378480-4798-3595-8334-ac92770121a5.roa (raw, json)
Hash identifier: mUdBhbT2XOdz0j9C3K72sEnHL3GlY8s6KGlm6CCDe8w=
Subject key identifier: 9D:68:09:C9:5B:30:A5:EB:1A:0A:FA:00:0B:CA:F0:86:02:21:A6:FB
Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e
Certificate serial: 010D0C9F4328584F90A2FB6BB60BAB95BF568C40
Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/7a378480-4798-3595-8334-ac92770121a5.roa
Signing time: Tue 20 Oct 2026 13:00:13 +0000
ROA not before: Tue 20 Oct 2026 13:00:13 +0000
ROA not after: Mon 18 Jan 2027 14:00:13 +0000
asID: 22805
IP address blocks: 72.21.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:90:a2:fb:6b:b6:0b:ab:95:bf:56:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e
Validity
Not Before: Oct 20 13:00:13 2026 GMT
Not After : Jan 18 14:00:13 2027 GMT
Subject: CN=5ca1b8f6-1ba0-49c1-9c3d-e61cdef20905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:e3:19:da:e4:ca:fd:81:41:04:1f:7b:e1:
53:89:f9:b0:a5:b1:27:62:6b:2c:8a:fe:1e:bd:73:
bf:1b:c3:23:c3:4d:41:69:85:8e:0a:4f:15:ed:c7:
e4:c0:3a:74:a3:18:5b:c7:fd:9a:e5:47:55:ca:ec:
1a:87:6f:97:63:96:62:35:f5:66:a4:bb:0c:12:b8:
67:f7:55:c6:fd:18:e8:10:34:2c:73:db:1a:af:5d:
d8:04:22:c2:8a:9e:ee:b5:a8:bf:24:7e:df:56:1b:
3a:5c:58:c9:3b:72:e5:f7:00:f7:9f:83:3e:ad:5e:
bc:bd:67:f7:21:4c:0f:2a:7c:11:69:5a:db:c2:20:
78:b0:df:a4:4a:94:27:c8:35:44:f0:38:2e:7f:63:
24:d2:8c:62:25:c9:13:27:0a:32:ae:3b:e4:56:7d:
bf:cf:7e:df:56:77:9d:ce:6e:25:73:d6:b2:3a:56:
af:d9:c0:4f:d7:83:fb:5d:6c:f4:db:07:2c:a3:ef:
86:83:5f:ab:5d:4a:b5:74:df:b4:c4:6d:75:7c:6c:
b1:a5:2c:27:15:8e:26:68:6f:47:31:4a:24:56:2a:
7d:4c:50:1e:36:90:3b:1b:1f:95:c3:ad:fb:15:c0:
46:02:ee:00:3e:33:7f:2b:9b:a6:09:0e:95:c9:b5:
00:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:68:09:C9:5B:30:A5:EB:1A:0A:FA:00:0B:CA:F0:86:02:21:A6:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/7a378480-4798-3595-8334-ac92770121a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl
X509v3 Authority Key Identifier:
keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer
sbgp-ipAddrBlock: critical
IPv4:
72.21.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:88:21:a7:1e:34:16:22:2a:02:4d:d8:3a:f7:ef:ab:85:e7:
1c:9a:e9:bd:82:61:aa:19:01:a0:87:c6:a7:90:78:43:3b:1b:
35:c3:99:25:38:87:0f:59:ac:28:c6:c2:90:5d:64:db:00:16:
f9:09:11:55:42:50:40:94:b1:17:80:bd:4f:79:b1:de:40:df:
a8:b6:80:7e:4a:42:11:d7:fa:b6:3a:d1:cb:84:7a:06:65:c1:
f2:e7:09:27:6d:a1:41:9c:56:dd:aa:c0:c8:7f:21:e1:8b:33:
d8:8b:4d:c5:30:88:bf:0f:ef:ac:e6:a0:36:01:67:f2:10:65:
ae:90:38:c1:66:2c:0b:af:de:aa:63:02:0a:ec:18:5b:e1:8d:
47:48:cc:07:28:ac:dd:a4:4e:c0:20:72:da:e7:79:e7:a0:86:
f9:d0:00:c6:37:f1:9b:13:dc:cc:36:82:20:73:40:0c:4f:76:
5c:b1:2a:fc:12:3e:69:d8:01:cb:a9:ae:d7:3b:72:fe:08:7f:
4f:5a:a7:36:d4:be:9b:9e:5d:36:ce:2f:06:14:d0:d0:a1:b7:
f0:31:29:8c:a1:45:f9:80:25:92:5d:13:d1:d0:07:50:91:84:
91:ac:b4:de:ce:a3:75:91:1b:80:21:79:4b:e4:d0:5d:bc:40:
07:17:b9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 23:20:54 2026 by rpki-client