
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/e7a0037c-7c1d-35ec-a9cd-6935014b9093.roa
File: e7a0037c-7c1d-35ec-a9cd-6935014b9093.roa (raw, json)
Hash identifier: f+w5dBOckS46qhIZmLWzEelIO4SHDDQjZUmxYl0625k=
Subject key identifier: A3:6B:4D:7C:DD:4E:5C:86:38:41:E5:49:0C:A2:57:DE:63:19:C0:C2
Certificate issuer: /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Certificate serial: 010D0C9F4328584EA7872AD715C84A36A2414A00
Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/e7a0037c-7c1d-35ec-a9cd-6935014b9093.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 8030
IP address blocks: 161.151.112.0/21 maxlen: 24
161.151.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Sep 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:2a:d7:15:c8:4a:36:a2:41:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=7a920f26-dae0-46c4-899d-e5153ffb5ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3c:09:48:4e:73:4d:ad:eb:5a:b5:32:9c:51:
94:0e:8d:ee:9e:d5:9a:8e:94:42:dd:4d:1e:65:a4:
3e:83:50:ba:25:7d:80:fe:20:40:52:cd:55:0c:3c:
de:46:b2:55:d4:8e:18:c6:01:66:67:b5:b3:03:fc:
b3:6a:43:f9:9f:9c:37:45:7e:d2:08:5a:1d:ff:68:
aa:73:00:9b:f8:e7:de:31:34:15:24:9f:44:7e:aa:
73:24:3c:d6:87:ca:94:71:b1:96:e3:d6:18:98:e7:
04:46:6e:d6:f4:0c:a4:80:da:2b:97:8c:b6:26:87:
ef:e9:81:93:7b:56:bd:98:7c:6a:0a:71:e6:26:be:
cc:da:28:04:46:6d:0d:64:27:7e:ec:5f:b6:ea:50:
7f:49:f4:bc:f7:c0:9d:33:cf:75:61:a4:b4:b7:8a:
1c:68:7b:73:f2:d2:a3:aa:6e:65:5f:70:0d:42:20:
2e:0e:09:18:6c:9b:b4:38:1c:c7:d5:8e:0a:6b:ec:
5e:f0:fd:70:58:47:b1:ec:97:9e:6b:fe:32:70:2a:
6d:66:f6:b8:4a:0c:c7:b6:20:6c:cc:b9:66:64:e7:
28:d2:e3:de:2d:c0:e9:be:65:4b:a8:d8:06:7c:62:
a3:88:31:6b:06:e0:06:84:36:02:4f:92:6d:ff:4e:
42:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6B:4D:7C:DD:4E:5C:86:38:41:E5:49:0C:A2:57:DE:63:19:C0:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/e7a0037c-7c1d-35ec-a9cd-6935014b9093.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl
X509v3 Authority Key Identifier:
keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
sbgp-ipAddrBlock: critical
IPv4:
161.151.112.0/21
161.151.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:16:ef:fb:8a:b7:b7:af:bb:cb:34:2b:d3:53:fe:05:62:db:
25:3e:4b:8a:9c:1c:fb:82:0a:e8:07:7f:86:a7:ec:29:c0:1a:
7a:d5:8f:37:76:b8:61:ee:21:6b:e5:0e:48:e4:10:c2:b7:89:
4a:2f:0f:8d:6b:e1:91:03:11:e0:52:f3:95:b8:56:d1:d5:fd:
89:2e:9e:43:15:e7:13:f3:ba:8e:7c:aa:2f:1a:51:36:94:84:
44:84:75:e4:32:73:5b:26:b3:f2:b6:7c:9b:7d:1c:79:a3:fd:
c3:85:66:d5:31:bb:ff:bc:07:5c:9f:ab:fe:49:20:e1:43:a8:
d6:8d:c8:a8:f3:89:3c:2c:36:f6:f2:00:85:fe:4d:a2:47:bf:
f8:46:c1:78:14:13:11:76:ac:99:1e:9b:ed:eb:2a:82:67:5f:
f4:a0:0f:d4:4d:4c:de:db:f5:a0:0f:99:71:ca:bf:99:c8:a3:
84:fc:b6:37:d9:3b:5d:ce:89:17:51:c4:6b:79:1f:50:8e:e2:
7c:f2:1c:2b:44:0a:2f:77:88:72:7b:84:10:dc:8d:51:8d:c8:
6d:19:b9:c5:a7:a4:a8:9e:53:d0:75:ce:35:a9:46:22:c3:fa:
e2:36:e6:62:05:01:51:c0:bf:bc:60:ba:98:2f:ca:00:2a:6e:
6e:08:87:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 02:19:21 2026 by rpki-client