
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d4a09bdc-1a34-32e9-95c1-afcba7627345.roa
File: d4a09bdc-1a34-32e9-95c1-afcba7627345.roa (raw, json)
Hash identifier: mC837XP0l6euWTKQhsgxifL4nnPpcIB35/9Ywe3YmHE=
Subject key identifier: 06:3E:76:69:76:3F:01:9B:B2:BF:AB:6C:63:B7:25:BA:3E:48:13:CD
Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Certificate serial: 010D0C9F4328584F5A32DA347730814E067BA280
Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d4a09bdc-1a34-32e9-95c1-afcba7627345.roa
Signing time: Thu 01 Oct 2026 01:00:12 +0000
ROA not before: Thu 01 Oct 2026 01:00:12 +0000
ROA not after: Wed 30 Dec 2026 02:00:12 +0000
asID: 701
IP address blocks: 81.199.64.0/20 maxlen: 24
121.91.208.0/20 maxlen: 24
121.91.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Nov 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5a:32:da:34:77:30:81:4e:06:7b:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Validity
Not Before: Oct 1 01:00:12 2026 GMT
Not After : Dec 30 02:00:12 2026 GMT
Subject: CN=20a06117-5efc-4c54-9713-d0f99f910648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3a:21:4f:65:76:e9:95:05:69:3b:f0:66:fa:
cd:73:0e:91:88:eb:c4:ee:53:f4:bc:69:f5:f1:cb:
ee:a2:e6:aa:34:55:8f:ac:92:0a:00:15:e4:e7:10:
b4:7d:af:53:2f:db:77:71:0f:c0:4c:63:df:cf:de:
86:21:43:fa:b8:10:4a:22:81:48:fc:26:cf:2f:1c:
5f:50:83:b3:33:6a:fc:a6:78:a7:e1:60:00:47:4c:
58:ee:bc:98:28:c6:db:48:a3:b0:c4:02:5c:b4:28:
e1:f2:3e:07:d5:81:7c:b6:b2:0d:eb:1c:87:94:cd:
a4:e9:f9:37:d6:82:36:42:19:07:61:ec:21:0a:1d:
b5:b8:44:5a:5f:60:e8:ce:ba:55:4e:71:e9:46:e0:
42:13:48:9d:d7:27:f4:26:b3:f0:24:6f:86:1a:4b:
3d:a7:6e:f7:c8:95:d0:6e:a7:34:e3:56:d8:3a:41:
cf:f5:16:0f:42:4c:a6:d2:34:5e:8d:45:f6:94:92:
9b:d8:d8:70:78:c1:de:b3:f5:54:98:61:5c:47:58:
c1:5e:fa:78:19:25:1c:d8:d0:0c:71:42:b0:25:d3:
83:39:8f:87:bf:49:8e:a0:89:45:98:ff:91:be:f0:
d9:37:6b:63:63:e1:f0:2d:30:c9:a1:65:28:b5:98:
1c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3E:76:69:76:3F:01:9B:B2:BF:AB:6C:63:B7:25:BA:3E:48:13:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d4a09bdc-1a34-32e9-95c1-afcba7627345.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl
X509v3 Authority Key Identifier:
keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
sbgp-ipAddrBlock: critical
IPv4:
81.199.64.0/20
121.91.208.0-121.91.255.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:4e:d5:be:49:f1:ab:11:a3:fb:4d:32:31:3a:8d:3e:1c:20:
6f:44:cb:8d:94:89:ea:06:14:b1:f3:6c:09:c2:83:a1:89:1b:
ac:23:50:ee:9b:e6:16:c8:76:0c:b7:11:08:a8:e7:54:46:c1:
1b:eb:2e:35:a3:f7:d6:72:53:14:1f:7d:89:ab:64:9a:12:bc:
a3:c0:1c:80:60:6d:5a:77:6e:4a:4a:22:7d:ce:39:94:82:7b:
a6:e2:19:c3:3f:aa:12:be:54:d1:f6:56:f8:05:b8:24:d1:b4:
aa:00:03:00:72:07:d3:e1:f7:ff:cd:69:2a:6d:b1:fd:ae:67:
d4:12:84:e0:b8:9b:b9:e2:09:85:71:46:68:5e:3a:c8:4d:8f:
05:bf:c6:63:7d:d2:bf:c4:54:c6:20:35:22:2c:ba:d1:7d:3e:
3a:5e:41:6b:da:a0:09:9b:7d:d1:63:9c:94:ff:06:0b:78:13:
77:41:15:83:b1:71:dd:6a:c2:84:77:09:3b:e1:fa:e5:f2:ad:
dc:64:c6:21:5c:37:3e:e7:ac:7c:ee:5e:98:92:97:51:dc:0a:
db:75:96:4c:9b:91:d9:19:19:65:c6:7d:3b:68:cb:c3:b2:d8:
e9:22:40:37:0f:c3:a0:c0:21:5f:6e:1e:b6:d3:28:07:64:e1:
4f:93:19:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:32:58 2026 by rpki-client