
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/4c26d07a-6a10-3283-bc4c-d335313f9d53.roa
File: 4c26d07a-6a10-3283-bc4c-d335313f9d53.roa (raw, json)
Hash identifier: cA59hlf6TbZTm0AePldbi20B4Z6oEA04xgx+qBxv3AQ=
Subject key identifier: 69:54:B5:F9:07:AC:4D:CC:9A:AD:8E:2C:37:AB:85:D8:A0:FE:BB:EE
Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Certificate serial: 010D0C9F4328584B99D79A2171986639C1131540
Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/4c26d07a-6a10-3283-bc4c-d335313f9d53.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 7922
IP address blocks: 121.91.208.0/20 maxlen: 24
121.91.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Oct 2025 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:9a:21:71:98:66:39:c1:13:15:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=70439388-03a2-4a1d-b09a-2fc97916039e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:e0:e0:6e:5b:31:bd:a9:60:d5:02:da:31:
78:88:e4:d2:fa:aa:a8:b4:46:02:3d:7c:30:a6:1f:
aa:04:41:cc:e0:02:83:28:0e:90:d1:e0:07:39:b2:
e1:ad:24:73:1a:0d:40:8a:e2:f7:57:1d:9a:ac:b0:
0e:dc:53:6e:46:90:c2:af:68:25:3d:ec:d9:83:40:
3a:cd:2d:3f:16:70:85:4b:54:60:46:e7:70:30:5b:
bc:1f:85:95:cc:30:59:31:81:3f:d7:01:a8:fa:87:
a4:96:98:24:33:ab:09:c1:cd:bf:25:d1:01:3e:95:
64:71:30:44:46:ad:e4:32:fd:f2:e0:1d:ca:c2:f9:
49:73:a2:27:45:96:d2:6e:46:9e:54:0a:fc:89:db:
6f:f9:17:0c:2a:82:b1:fb:59:eb:65:60:0f:c6:e0:
99:b4:2f:e0:31:23:fd:54:1e:3e:5e:1e:3a:b6:dd:
93:5a:2d:b4:eb:cd:dd:d1:b3:9d:c7:84:13:05:1e:
8b:1b:82:d8:3c:e8:f3:2e:69:95:2d:66:cb:1e:07:
cc:3f:16:c2:de:23:b3:aa:20:2a:41:d1:83:1d:e0:
60:7b:4f:47:ac:df:e4:c7:2d:fe:bb:cb:ed:1c:b2:
73:27:38:5e:ec:58:74:1f:f9:4b:16:d8:4c:d6:53:
c9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:54:B5:F9:07:AC:4D:CC:9A:AD:8E:2C:37:AB:85:D8:A0:FE:BB:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/4c26d07a-6a10-3283-bc4c-d335313f9d53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl
X509v3 Authority Key Identifier:
keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
sbgp-ipAddrBlock: critical
IPv4:
121.91.208.0-121.91.255.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:98:bc:14:89:0d:07:b7:70:c0:a1:38:5a:f0:e8:37:db:37:
90:f3:cc:48:54:ec:94:64:12:af:e4:00:2d:04:63:29:61:a3:
9b:4f:b8:ae:f1:c1:9a:a2:60:f3:5a:9b:d4:a7:54:74:aa:1e:
96:61:38:6f:87:d8:61:60:91:97:cc:bc:0b:b3:1d:04:3a:d4:
79:6e:5c:c3:b9:11:8e:a1:c8:1a:72:86:21:ed:91:2b:9c:ef:
87:e5:f4:86:ee:d1:96:3a:08:10:38:b5:67:42:c3:ff:6b:a1:
ef:c5:cb:90:86:de:02:46:9f:17:72:e8:4a:32:7f:1e:87:77:
5e:d1:46:73:aa:29:91:14:e8:60:6b:4c:25:ab:5d:e4:5b:de:
ef:3c:d5:3d:b9:d9:2f:bf:85:53:7f:b8:c5:7d:98:e6:2c:fd:
04:44:28:a2:95:9e:4a:c9:c5:c4:52:e8:95:72:85:b0:3a:12:
47:3e:da:f1:f2:b2:4f:bf:25:97:92:df:4c:76:c2:18:c7:4a:
e3:00:23:e4:d5:53:c7:61:9d:b4:f6:fc:4a:4e:b2:0a:3c:7e:
5e:4b:d1:f7:fa:79:66:a9:3d:bf:ce:11:6c:f8:8c:fe:ea:5f:
11:e7:cc:15:2b:20:38:31:82:b1:33:57:bb:29:0b:ab:9c:d1:
b1:4f:89:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 05:52:39 2025 by rpki-client