
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3d0587fb-7521-3040-b8ce-e34178b2fbca.roa
File: 3d0587fb-7521-3040-b8ce-e34178b2fbca.roa (raw, json)
Hash identifier: FqBPyb8gpRN7gdHwBBXTxFwWskpvQqaIYgTiE+NPWsM=
Subject key identifier: 30:F4:07:B8:3A:24:C5:F8:E3:20:81:C2:9F:81:87:F4:82:E8:1E:C9
Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial: 010D0C9F4328584EA79B4491CA96FE4BFF983A00
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3d0587fb-7521-3040-b8ce-e34178b2fbca.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 10794
IP address blocks: 171.161.96.0/21 maxlen: 21
171.161.96.0/24 maxlen: 24
171.161.97.0/24 maxlen: 24
171.161.98.0/24 maxlen: 24
171.161.99.0/24 maxlen: 24
171.161.100.0/24 maxlen: 24
171.161.101.0/24 maxlen: 24
171.161.102.0/24 maxlen: 24
171.161.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9b:44:91:ca:96:fe:4b:ff:98:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=904b0c50-fc46-41cc-b4a1-8a88d33aa5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:6d:3c:aa:9d:b5:d9:d1:ec:e7:b8:f1:93:
9e:b9:48:f4:ab:ef:d6:4a:c9:03:c7:4b:fc:f3:13:
67:6d:aa:93:af:21:c5:16:1e:73:4f:86:f9:b6:35:
10:91:a6:15:c4:01:a5:dd:ae:8f:96:9b:ab:cb:7f:
91:fd:65:60:ad:71:8c:6b:d6:dc:bb:34:6d:e5:a3:
cf:90:c9:63:8b:90:1d:10:bf:73:0c:af:b5:fe:4a:
c3:eb:73:aa:94:9a:50:d6:ed:79:cd:e9:95:50:1b:
c2:90:6c:14:0f:43:f1:12:03:5e:b4:b9:48:82:a0:
fb:75:18:25:56:04:78:d1:56:3f:a1:21:dd:0b:f5:
c1:a5:9b:d3:2e:77:67:fe:cc:c4:e0:48:f4:08:6f:
e7:5c:df:a6:52:41:8b:e1:7e:a9:12:49:cf:81:a1:
e3:cb:3c:f1:0a:d0:d6:9e:8e:b7:77:38:11:9a:90:
d4:59:39:a4:19:3f:6a:9a:f8:1e:66:66:cf:84:30:
f2:39:e7:3c:90:65:1a:d6:e6:15:a0:72:5a:e6:4c:
9b:e3:7c:35:bf:17:76:8a:85:62:0c:47:11:a4:0a:
19:59:b2:b9:16:6d:d1:d9:ab:a4:dc:46:17:67:a3:
65:93:aa:11:5a:0f:16:25:9b:70:d5:de:78:0e:e8:
13:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F4:07:B8:3A:24:C5:F8:E3:20:81:C2:9F:81:87:F4:82:E8:1E:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3d0587fb-7521-3040-b8ce-e34178b2fbca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
X509v3 Authority Key Identifier:
keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
sbgp-ipAddrBlock: critical
IPv4:
171.161.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:df:01:05:37:0f:fb:a9:09:65:be:97:ec:6f:8b:3c:01:e1:
38:cd:6c:5f:e3:85:cf:a4:08:8b:bc:6f:10:b8:e2:88:a7:7c:
f5:74:6f:92:bf:b2:4d:8c:bc:b8:00:de:b3:10:2e:d6:c3:1c:
a3:52:67:22:08:10:fc:3c:d0:2c:22:f6:af:2a:16:4e:29:dd:
2e:a3:4e:ca:16:5c:9a:eb:36:c3:98:16:ad:58:d0:94:cb:03:
a0:51:80:81:50:a0:39:39:a9:1e:6a:2e:d0:9e:c4:bb:60:1d:
a1:80:28:8e:bc:1d:57:70:ec:f6:d9:0d:13:04:04:d7:5d:e5:
4e:eb:12:ec:3a:0b:3b:d4:2d:00:5e:bf:8b:96:13:0a:6d:0e:
59:78:ac:85:6e:3a:4f:2d:b3:af:e3:9c:62:e6:e4:4a:c4:b9:
44:d4:dc:fa:e1:84:16:db:bd:23:69:9a:f6:e9:0a:62:6a:2a:
77:d8:34:fd:2e:bd:cd:11:e7:94:48:1e:13:82:4f:f2:8b:02:
15:d1:d5:66:4c:01:b2:ae:57:4d:6e:8e:94:28:3f:ec:f6:ef:
51:ed:2e:93:79:b7:5f:1d:1f:68:84:1e:ff:63:2b:73:2a:e9:
65:65:ea:c4:d5:2d:b9:bf:ab:8d:09:67:f3:bc:6f:82:3e:19:
3b:62:41:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:51:53 2026 by rpki-client