
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/39ad8a08-e7a1-32ce-9fc4-dc5264944584.roa
File: 39ad8a08-e7a1-32ce-9fc4-dc5264944584.roa (raw, json)
Hash identifier: OnLfLMcWpKnIDR26n/9QF5QtAXsZJH4VjfpEiEvVSJI=
Subject key identifier: 21:D7:C6:FA:C1:95:6B:CC:2C:3A:8A:08:5B:4F:40:B2:19:BC:35:10
Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial: 010D0C9F4328584E5619EF298C86B1210D0B7700
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/39ad8a08-e7a1-32ce-9fc4-dc5264944584.roa
Signing time: Mon 29 Jun 2026 21:00:12 +0000
ROA not before: Mon 29 Jun 2026 21:00:12 +0000
ROA not after: Sun 27 Sep 2026 21:00:12 +0000
asID: 3356
IP address blocks: 161.129.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:56:19:ef:29:8c:86:b1:21:0d:0b:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Validity
Not Before: Jun 29 21:00:12 2026 GMT
Not After : Sep 27 21:00:12 2026 GMT
Subject: CN=4e9e1d33-9bbc-4c67-8c23-13d2c7a13608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:55:01:8c:99:86:24:a3:c8:12:95:f9:99:72:
f9:33:a9:5f:1c:61:76:60:76:32:ba:b5:d3:94:54:
a8:96:32:f1:65:88:8d:2e:88:e1:aa:06:6a:0a:ca:
c1:82:b7:75:23:3a:ab:1b:cc:51:74:b5:1c:8d:88:
05:55:64:50:a7:18:48:f3:77:f1:53:d3:96:f5:d2:
d5:7e:aa:02:20:12:47:53:28:87:8b:f7:51:6e:7d:
66:98:48:25:67:15:a0:6b:65:29:14:f2:d0:49:8e:
66:cb:1e:35:87:44:b1:88:47:55:71:5f:de:d2:e2:
6c:3b:4b:33:94:77:41:ac:05:7f:11:d7:c1:f7:b8:
ae:ed:95:5c:59:dc:c1:c9:f4:d7:47:b7:ab:4a:c1:
81:24:8d:30:5d:84:9b:24:2a:d7:46:01:38:f8:6c:
80:69:f2:5e:12:d7:32:61:5b:f2:68:4c:0b:76:80:
64:de:ad:ec:a4:25:e2:26:83:02:24:e6:83:5e:cc:
7e:40:72:fd:9e:83:b6:e5:e3:2c:30:05:ee:6a:dc:
b7:44:62:10:eb:a6:3c:9b:0c:7f:36:83:d2:b5:e0:
10:e6:b8:27:42:fd:be:59:f5:69:54:d0:9f:e6:90:
89:42:6b:c1:a0:95:21:21:24:8a:46:4b:17:c2:a3:
e9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D7:C6:FA:C1:95:6B:CC:2C:3A:8A:08:5B:4F:40:B2:19:BC:35:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/39ad8a08-e7a1-32ce-9fc4-dc5264944584.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
X509v3 Authority Key Identifier:
keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:d1:a7:70:e2:60:6c:ad:94:49:de:18:76:28:34:45:da:13:
02:f8:b4:eb:68:46:ad:20:01:05:44:c1:65:35:c2:00:ba:f1:
3a:38:b4:fe:5b:81:07:97:2d:30:ab:af:48:75:34:a4:6b:7e:
46:a8:7d:48:cf:f6:1b:75:54:4b:0f:a2:d8:94:cd:f6:65:af:
c6:87:ff:e4:62:5c:c1:54:f0:4b:16:8d:49:98:ba:08:de:3e:
fd:7b:0d:22:4f:21:fe:04:2d:1c:f8:f7:c2:0d:d7:52:ea:90:
9f:7b:8e:1e:b9:64:e8:24:24:8c:9a:07:a5:b9:d6:ba:71:83:
55:f1:dd:a4:99:c1:58:56:ed:3c:02:27:0d:d2:9f:9c:af:b9:
ec:ec:5c:f8:f1:df:97:b0:3d:42:33:57:5a:c8:2a:f8:85:9a:
8a:5c:48:06:4e:74:4f:e1:4c:07:e2:0a:9b:70:cd:56:ec:45:
9e:d4:31:7a:c7:2b:79:08:56:69:3f:ea:c7:fb:a9:ee:b8:dc:
e7:e4:3f:5c:58:e0:b2:08:e7:0d:a1:4f:2e:96:9f:32:07:e8:
35:b3:88:1e:63:ec:52:57:7f:59:88:02:c9:54:b6:be:2f:1a:
75:6b:7f:31:ad:11:e6:57:84:4a:8f:ba:22:26:20:ea:87:6b:
47:ce:3b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:04:39 2026 by rpki-client