
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa
File: 536a1a59-e74e-326e-909f-14a772e3d7fe.roa (raw, json)
Hash identifier: msYhqCBnGUtL5qX+h6QckiQZhF68J/gucEvUg9HUTqA=
Subject key identifier: 65:BA:65:F9:25:67:DB:FB:75:FB:B4:70:77:BE:7A:3B:23:CD:A6:92
Certificate issuer: /CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
Certificate serial: 010D0C9F4328584EE38C9498356CEAF01ADDF300
Authority key identifier: 1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa
Signing time: Wed 19 Aug 2026 13:00:11 +0000
ROA not before: Wed 19 Aug 2026 13:00:11 +0000
ROA not after: Tue 17 Nov 2026 14:00:11 +0000
asID: 16509
IP address blocks: 161.199.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e3:8c:94:98:35:6c:ea:f0:1a:dd:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
Validity
Not Before: Aug 19 13:00:11 2026 GMT
Not After : Nov 17 14:00:11 2026 GMT
Subject: CN=61cc5828-b1ec-49b6-ae64-970af7a7d614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:c4:b0:b3:a1:5c:fa:0f:08:c5:42:db:bb:
97:e5:27:7f:20:16:da:33:fe:04:90:4f:ea:10:b4:
7e:67:55:ae:34:45:ba:a1:57:7f:d4:b6:28:7c:b3:
ca:02:8d:65:1b:a4:64:53:a6:d8:f2:b8:e9:24:7a:
9a:94:54:f2:d4:bf:55:f3:37:53:0c:18:73:d3:62:
89:c7:74:64:a8:6d:c5:be:cc:27:e7:fd:dd:92:c9:
86:57:29:d2:46:6d:e3:9b:35:c1:17:e8:f0:35:09:
69:2d:63:3a:0a:06:43:7a:39:d6:a4:10:b7:85:bf:
ed:a5:1d:c4:8d:0c:f2:6c:07:7b:5f:41:c1:8b:5a:
04:5c:23:4a:65:db:15:8f:6e:f8:ee:e6:09:af:43:
67:f3:62:3f:17:30:3a:d2:1c:79:0d:87:2d:57:25:
e9:5b:9e:e7:28:6c:0a:bd:1e:e9:17:3a:62:f5:06:
fa:2f:78:7a:96:ad:af:8b:d7:35:9e:8f:16:7f:40:
c5:af:f9:40:d7:d0:0d:9d:63:ef:83:03:92:39:40:
b2:43:0d:8c:0c:6a:41:90:67:e6:90:39:0a:d5:5b:
58:21:8f:a4:1d:06:8f:6b:b3:ad:0b:79:81:0e:0b:
1f:76:ba:af:9e:b8:62:94:44:24:8d:ff:37:38:8a:
44:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BA:65:F9:25:67:DB:FB:75:FB:B4:70:77:BE:7A:3B:23:CD:A6:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl
X509v3 Authority Key Identifier:
keyid:1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
sbgp-ipAddrBlock: critical
IPv4:
161.199.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:09:53:9e:35:4b:61:cb:f0:29:82:6f:83:b6:ee:80:52:03:
86:4e:de:75:b9:5b:88:42:ab:9d:22:26:00:3b:f7:eb:36:cc:
6b:23:52:25:1c:e1:f1:c2:80:93:95:17:6c:84:6b:90:48:ee:
2e:65:22:79:22:a4:6f:e2:35:48:7d:37:7b:14:2a:f9:69:9c:
cf:31:99:79:be:b4:10:fa:4a:63:24:45:58:01:5e:db:86:71:
26:9c:a7:cc:66:22:b8:eb:6e:3a:06:26:72:cf:18:15:14:f0:
28:1b:7c:23:92:46:ee:dd:40:6f:5f:3a:92:42:de:be:d0:8d:
16:f6:1e:7b:be:c3:8f:40:7d:7c:6d:a9:72:46:19:bc:84:33:
bb:aa:d2:ab:b8:84:3b:92:ee:23:65:2b:4d:29:7f:47:03:41:
80:54:0f:2d:6c:7c:ed:a4:70:f6:d0:73:bf:bc:a3:28:53:b1:
1b:84:86:93:91:ec:53:05:52:6d:9f:c3:fb:c4:92:34:4f:98:
58:0c:57:48:06:f5:68:7b:41:90:89:37:68:73:f4:e9:c5:6f:
55:8f:40:6c:5a:f4:c8:ba:e7:da:dc:f7:a0:ab:2b:b1:e9:c1:
33:e5:ef:12:4a:61:8d:e8:3a:a8:64:f8:77:2f:18:20:4f:c2:
5f:b2:2a:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjJSYNWzq8Brd8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjliNzk0NDctZGE4OC00NTI4LThmZjctMGQzNjdkMmQ3
NmU4MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk
NjFjYzU4MjgtYjFlYy00OWI2LWFlNjQtOTcwYWY3YTdkNjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsHEsLOhXPoPCMVC27uX5Sd/IBbaM/4EkE/q
ELR+Z1WuNEW6oVd/1LYofLPKAo1lG6RkU6bY8rjpJHqalFTy1L9V8zdTDBhz02KJ
x3RkqG3Fvswn5/3dksmGVynSRm3jmzXBF+jwNQlpLWM6CgZDejnWpBC3hb/tpR3E
jQzybAd7X0HBi1oEXCNKZdsVj2747uYJr0Nn82I/FzA60hx5DYctVyXpW57nKGwK
vR7pFzpi9Qb6L3h6lq2vi9c1no8Wf0DFr/lA19ANnWPvgwOSOUCyQw2MDGpBkGfm
kDkK1VtYIY+kHQaPa7OtC3mBDgsfdrqvnrhilEQkjf83OIpEGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGW6ZfklZ9v7dfu0cHe+ejsjzaaSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iOWI3
OTQ0Ny1kYTg4LTQ1MjgtOGZmNy0wZDM2N2QyZDc2ZTgvNTM2YTFhNTktZTc0ZS0z
MjZlLTkwOWYtMTRhNzcyZTNkN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjliNzk0NDctZGE4OC00NTI4LThm
ZjctMGQzNjdkMmQ3NmU4L2I5Yjc5NDQ3LWRhODgtNDUyOC04ZmY3LTBkMzY3ZDJk
NzZlOC5jcmwwHwYDVR0jBBgwFoAUHiwkM9lMpkRaA/NOR07DQO2LIoIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iOWI3OTQ0Ny1kYTg4LTQ1MjgtOGZmNy0wZDM2
N2QyZDc2ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoceAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAsJU541S2HL8CmCb4O27oBSA4ZO3nW5W4hCq50iJgA79+s2zGsjUiUc
4fHCgJOVF2yEa5BI7i5lInkipG/iNUh9N3sUKvlpnM8xmXm+tBD6SmMkRVgBXtuG
cSacp8xmIrjrbjoGJnLPGBUU8CgbfCOSRu7dQG9fOpJC3r7QjRb2Hnu+w49AfXxt
qXJGGbyEM7uq0qu4hDuS7iNlK00pf0cDQYBUDy1sfO2kcPbQc7+8oyhTsRuEhpOR
7FMFUm2fw/vEkjRPmFgMV0gG9Wh7QZCJN2hz9OnFb1WPQGxa9Mi659rc96CrK7Hp
wTPl7xJKYY3oOqhk+HcvGCBPwl+yKt0=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:10:58 2026 by rpki-client