
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/f3db20f8-aa5b-3355-afea-84b3a6993e4b.roa
File: f3db20f8-aa5b-3355-afea-84b3a6993e4b.roa (raw, json)
Hash identifier: QHNy5r5aufIehShVQpCDKKhd5cpZzcnZxmODkOuObiA=
Subject key identifier: E6:CA:D5:E7:CF:88:F2:C0:66:45:0D:5B:8E:35:B2:81:ED:54:10:E7
Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial: 010D0C9F4328584E709F6F6E46C61289A5B05300
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/f3db20f8-aa5b-3355-afea-84b3a6993e4b.roa
Signing time: Thu 09 Jul 2026 09:00:13 +0000
ROA not before: Thu 09 Jul 2026 09:00:13 +0000
ROA not after: Wed 07 Oct 2026 09:00:13 +0000
asID: 15296
IP address blocks: 199.216.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:70:9f:6f:6e:46:c6:12:89:a5:b0:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Validity
Not Before: Jul 9 09:00:13 2026 GMT
Not After : Oct 7 09:00:13 2026 GMT
Subject: CN=577918d5-3c79-48bb-83d8-8eeea0cd9106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:df:4a:1b:82:24:46:8e:23:d7:eb:d7:e0:95:
2d:33:6c:0c:99:9f:fd:e1:a8:dd:e6:d1:62:d8:ee:
1b:9e:d9:f9:62:07:fc:53:cf:2d:85:40:df:b6:96:
45:86:59:83:15:ef:b4:b0:af:7e:42:f6:36:1c:d8:
1a:26:c5:25:45:d2:67:15:96:b5:fe:f5:4d:c0:ef:
4a:7a:22:dd:8c:68:35:29:fd:e1:c8:2a:84:0e:e3:
26:5f:2b:39:55:97:23:22:a5:de:e1:8a:3e:fd:66:
c6:58:fd:60:9f:f1:6e:44:2e:c9:d4:29:93:1c:52:
dd:21:be:6b:15:3c:dc:53:d5:b3:55:c1:cf:5a:37:
08:f1:6e:2e:45:98:e4:b4:63:cc:04:41:c6:7c:f2:
7a:4b:51:c0:2a:75:84:a9:23:e0:3e:3f:53:f0:e1:
5a:87:e4:4d:f9:c9:40:d8:fd:45:43:38:d7:00:ae:
c9:12:81:c9:d6:0d:88:9d:f3:02:03:a0:c5:30:b7:
71:cd:a6:50:de:fd:17:26:d7:5a:6c:09:ae:e6:58:
4c:b5:8d:84:0c:09:ee:62:21:cd:d8:48:88:52:21:
95:7f:f7:f5:79:c3:8a:d4:f2:48:d5:ab:8c:ba:b6:
0a:df:5c:cd:d2:2c:05:f5:1e:f3:db:f4:5b:db:b5:
b6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CA:D5:E7:CF:88:F2:C0:66:45:0D:5B:8E:35:B2:81:ED:54:10:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/f3db20f8-aa5b-3355-afea-84b3a6993e4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
X509v3 Authority Key Identifier:
keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
sbgp-ipAddrBlock: critical
IPv4:
199.216.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:37:0f:03:b6:f9:79:68:d3:f5:f1:3c:ef:57:c6:16:53:67:
5e:62:48:92:0a:c6:c2:4d:59:1a:a5:ea:b8:a1:6b:fc:d7:6b:
d4:4f:39:77:d2:be:e4:33:57:a9:91:42:c2:b5:3e:d1:8a:a9:
c2:a7:a5:cb:e9:f8:b0:a0:0e:b3:13:fa:bc:fd:fd:23:20:39:
c8:b2:ed:e2:72:71:b5:53:f7:88:cc:50:f1:62:2e:5d:25:bf:
fb:94:10:b9:1c:e0:bf:d6:9b:12:83:22:ab:e5:a7:34:2f:9f:
88:eb:17:4d:61:23:89:66:50:e0:3d:23:39:ba:59:07:87:e4:
e1:32:63:d2:e8:5b:5b:f4:5a:ed:ef:6c:6e:e2:46:91:f2:56:
c9:68:d3:57:15:55:5b:ce:44:80:48:4c:ec:9f:34:97:09:a8:
37:d1:e9:ef:cc:27:cf:c1:5b:a5:f7:31:01:bc:33:1e:61:bf:
c6:e4:58:1e:ef:26:85:05:61:03:64:4f:be:41:c7:ff:e4:03:
6d:cf:ab:9f:a7:e0:4a:34:cd:f8:c3:80:30:34:70:92:b8:55:
e5:a4:ef:17:63:2e:60:ea:3b:6d:04:5b:a5:c5:ff:16:ee:c5:
4e:aa:9e:ee:70:c3:cf:8f:49:03:0d:f0:50:41:ac:14:d9:60:
8a:0b:68:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:56:46 2026 by rpki-client