
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/0ea7e4d7-09c6-3ffa-8dee-902326476334.roa
File: 0ea7e4d7-09c6-3ffa-8dee-902326476334.roa (raw, json)
Hash identifier: hdUD0nGELjX6qEcNR61VeolDyKKNmGBiUkOzAy2iZH8=
Subject key identifier: C7:C2:32:8F:E4:9E:17:80:49:01:59:FB:7E:CC:88:72:E0:C9:DB:0B
Certificate issuer: /CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc
Certificate serial: 010D0C9F4328584EFB475E8B6F12F61864A7E280
Authority key identifier: 00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/0ea7e4d7-09c6-3ffa-8dee-902326476334.roa
Signing time: Fri 28 Aug 2026 01:00:12 +0000
ROA not before: Fri 28 Aug 2026 01:00:12 +0000
ROA not after: Thu 26 Nov 2026 02:00:12 +0000
asID: 38551
IP address blocks: 161.121.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 01 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fb:47:5e:8b:6f:12:f6:18:64:a7:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc
Validity
Not Before: Aug 28 01:00:12 2026 GMT
Not After : Nov 26 02:00:12 2026 GMT
Subject: CN=4a4ddc58-0384-453f-9f9b-ee19d5634af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e6:9c:e1:73:0a:cc:6e:f6:8a:41:c1:5f:1a:
ed:4c:62:ff:0c:b1:f2:e7:32:c1:69:2f:f6:00:ea:
86:9f:5c:b7:cc:36:e6:f5:46:e5:ec:cb:e2:37:ed:
37:7e:82:7d:e3:e2:cc:d3:23:00:8c:d9:0e:cf:c0:
f3:62:8d:ef:05:3d:7b:6c:d1:db:9b:3c:b7:79:aa:
65:a1:ed:35:ca:b6:d1:e7:77:3d:3f:83:95:58:1f:
10:c7:14:bc:fe:a0:4e:38:ad:7d:a6:db:59:b2:db:
37:01:f5:ff:70:aa:7f:2e:a3:ce:b3:7e:2d:7c:68:
ae:97:06:56:40:5e:c7:9c:62:69:4e:46:ff:b7:ce:
09:e9:59:e5:11:1a:96:f4:90:7f:30:ae:76:aa:4d:
03:58:11:6f:6a:21:3e:2c:0e:c7:c5:9b:89:3a:6d:
31:73:2c:7f:7c:b9:93:02:59:fe:0f:ee:0c:97:95:
c6:c2:6f:58:8a:ec:cf:fe:d4:30:ba:b0:7c:64:0a:
06:58:52:cb:57:0f:f0:ac:60:39:b4:12:d9:7c:cb:
6a:12:ef:79:f2:1f:c2:38:cf:a4:0b:ee:5b:b4:fb:
43:6b:59:46:97:e8:d1:e7:2f:17:91:c8:1b:39:d5:
10:75:42:07:67:be:1e:92:a7:69:ec:95:3b:58:a7:
ed:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C2:32:8F:E4:9E:17:80:49:01:59:FB:7E:CC:88:72:E0:C9:DB:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/0ea7e4d7-09c6-3ffa-8dee-902326476334.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl
X509v3 Authority Key Identifier:
keyid:00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.121.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:c9:56:f1:31:be:eb:64:d4:07:0a:09:32:f4:64:7c:57:e2:
99:54:4d:34:71:98:7c:12:e2:87:0a:74:b9:b1:96:01:cc:bf:
e6:4a:ed:6b:2f:0a:51:6c:9f:68:42:6b:01:45:02:b8:41:5a:
bf:13:05:83:bf:ce:d0:26:28:b8:e3:26:f8:15:86:77:c9:16:
0b:ee:cf:49:bf:dd:5e:ca:00:af:51:80:c3:ce:dd:c2:1a:ea:
6c:d1:c3:57:98:e4:5d:46:09:f9:57:10:46:d0:f2:26:07:ab:
fd:5e:36:b8:51:fd:a0:bb:e7:8c:e8:13:02:ee:c1:3e:1b:c3:
be:c7:1e:25:0e:da:83:2e:f8:17:9d:61:5a:4c:96:d1:29:78:
cd:c4:4f:67:c8:93:c4:2a:fe:93:43:4d:aa:98:ff:af:8c:21:
96:db:42:f6:8e:ed:b8:15:5c:8a:a5:d0:ef:56:65:e4:c5:14:
4c:8e:63:c3:be:c1:fc:79:f4:d0:64:73:31:7c:bc:4c:e4:9d:
36:b2:ca:08:8f:09:6a:a7:36:d1:63:f3:ae:6f:c2:e9:6d:36:
75:c7:93:fd:65:70:e1:81:d7:28:d1:7d:ba:20:e9:91:44:97:
c2:a7:33:df:12:c1:30:4b:01:3c:07:9b:14:fc:95:71:c0:f7:
e5:04:ee:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:24:15 2026 by rpki-client