
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/cd7e78c2-e9ef-31ea-ad38-26ac3051983f.roa
File: cd7e78c2-e9ef-31ea-ad38-26ac3051983f.roa (raw, json)
Hash identifier: MVXHXC3O1HL2HgXr2vfBx0I+ho4cz+E/MGICTWCINN4=
Subject key identifier: 0F:95:65:B3:F9:3A:09:B0:C2:74:E5:1F:C2:23:6C:30:72:D3:DB:5A
Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial: 010D0C9F4328584E54B49A955D025015E848E0A0
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/cd7e78c2-e9ef-31ea-ad38-26ac3051983f.roa
Signing time: Mon 29 Jun 2026 09:00:12 +0000
ROA not before: Mon 29 Jun 2026 09:00:12 +0000
ROA not after: Sun 27 Sep 2026 09:00:12 +0000
asID: 8075
IP address blocks: 161.221.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:54:b4:9a:95:5d:02:50:15:e8:48:e0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Validity
Not Before: Jun 29 09:00:12 2026 GMT
Not After : Sep 27 09:00:12 2026 GMT
Subject: CN=c852f5bc-d532-4930-81f1-8912d4358690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:78:0f:fe:77:96:b4:a0:8f:e8:55:d2:0f:19:
09:2d:29:6b:c2:1d:5c:71:a6:a4:8d:63:05:f3:8b:
34:cb:95:94:28:cf:54:3e:07:9f:13:4c:75:77:e6:
56:9c:2f:1d:44:b8:cc:e4:0f:82:26:ce:46:b7:57:
2c:8f:2c:ea:f2:b4:57:fb:2d:1e:b2:1e:d9:48:c4:
40:1b:fc:c5:f2:56:ea:70:9b:15:d2:8c:db:62:f6:
6d:1b:59:f4:67:31:99:88:bb:b3:88:58:b8:81:8e:
b9:99:4f:b5:83:78:d8:47:40:49:8a:ea:be:ca:46:
e8:77:af:d0:73:15:69:d8:3e:f8:ef:92:c3:28:c2:
6c:17:53:fc:a1:c7:b0:7e:43:73:e9:41:69:7d:c4:
66:af:b4:05:c5:5a:49:38:1b:98:bc:27:8d:fd:2a:
5a:8c:4f:1f:68:90:38:84:9c:4a:78:69:03:d8:9b:
c7:61:6e:5d:49:76:07:86:25:0c:3c:56:3b:a2:5f:
1c:73:51:b0:f1:cb:fe:19:1a:25:e3:58:b8:a4:00:
c2:2f:00:b1:75:93:15:6b:42:73:e6:48:3f:8d:14:
ae:3f:6b:97:aa:f7:ca:6b:67:2a:66:3c:0b:15:55:
ad:1b:06:30:52:86:eb:64:24:83:a2:0d:07:f3:9b:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:95:65:B3:F9:3A:09:B0:C2:74:E5:1F:C2:23:6C:30:72:D3:DB:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/cd7e78c2-e9ef-31ea-ad38-26ac3051983f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
X509v3 Authority Key Identifier:
keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
sbgp-ipAddrBlock: critical
IPv4:
161.221.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:dd:c3:e6:65:5d:52:d3:50:b8:b9:bb:85:d8:6b:ad:ec:99:
36:3b:e4:ec:39:55:d9:55:74:0c:52:11:70:f4:aa:0b:f8:4f:
18:5d:e5:d0:47:8f:e2:e4:90:6c:c2:24:cc:54:92:19:e2:d4:
7d:33:47:f0:3f:02:c1:90:bb:da:1a:b3:cc:b5:18:32:c7:a5:
8c:fc:b7:55:bb:48:ab:6a:bf:93:66:3c:a6:37:04:97:16:87:
0a:63:d3:dc:8d:c9:a4:02:f6:85:11:76:96:02:54:ac:bb:21:
83:0e:bd:3f:a8:3c:12:da:38:a7:09:7c:08:83:de:b0:90:a7:
20:2f:30:11:4e:b1:a8:c4:79:6e:3d:bb:3e:1d:28:42:81:18:
3b:26:e7:5e:93:05:32:3b:66:15:74:98:52:d8:8b:97:68:c5:
79:02:2c:32:3d:b3:98:81:cc:28:c9:30:26:0a:cf:ca:ba:d2:
9a:82:07:e7:30:fb:1d:f4:59:dd:b1:5e:be:ad:86:cb:5f:58:
cc:e9:52:6f:4b:6e:5f:20:09:06:db:27:0a:88:63:3b:ad:0e:
b7:52:9c:33:b0:7b:46:02:e2:62:e4:e8:32:df:fd:53:93:c1:
c8:f0:e0:fc:23:bb:96:d0:4d:88:31:f2:09:59:fb:70:57:6b:
d9:6c:82:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:25 2026 by rpki-client