
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c42140bb-6b45-3666-ab69-b0e1171139f1.roa
File: c42140bb-6b45-3666-ab69-b0e1171139f1.roa (raw, json)
Hash identifier: AVa3o7Jyi1+DAbzhbXvs8dW7UQCtHoV76JqG6+doQrI=
Subject key identifier: 1E:E1:49:E5:EE:A3:6C:E6:52:25:FF:E2:43:E1:31:26:49:06:BB:65
Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial: 010D0C9F4328584D300A55E7C9D9CC1094363CA0
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c42140bb-6b45-3666-ab69-b0e1171139f1.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 213122
IP address blocks: 161.129.32.0/24 maxlen: 24
161.129.33.0/24 maxlen: 24
161.129.36.0/24 maxlen: 24
161.129.37.0/24 maxlen: 24
161.129.38.0/24 maxlen: 24
161.129.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:55:e7:c9:d9:cc:10:94:36:3c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=ee1c611e-1328-4044-be6a-530217a733b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:e1:77:9b:8d:56:39:94:1b:67:ae:9a:aa:
7c:81:03:d4:bb:bd:7d:b3:e4:fb:34:c3:1d:7c:d8:
34:af:1e:a8:b5:cb:58:7c:a7:d8:fc:65:9a:9a:e9:
a7:a9:a4:a4:4e:22:25:8b:1f:07:8e:cc:73:a4:8f:
5a:d4:11:85:b1:0e:b0:e9:5d:54:ae:a2:48:64:b9:
e1:f6:01:5b:27:94:0c:be:5e:8d:a3:d4:2a:86:b8:
ee:b8:44:c8:92:d8:2c:90:3c:8c:81:d5:81:3b:4c:
c3:8d:a9:6b:95:2d:cb:3a:d6:58:4e:1a:ef:79:63:
16:ef:23:20:6b:0f:75:60:20:df:0a:d8:8e:d4:27:
f8:11:6a:83:b5:32:fa:07:11:ea:d9:18:02:23:4b:
2c:60:c7:21:f6:31:63:61:b8:7b:32:c7:de:7c:3a:
29:96:4d:5f:93:5a:a7:b7:ac:7c:87:81:09:aa:3b:
05:e6:72:fb:35:17:85:56:f2:61:f5:97:dc:a7:73:
58:e1:9e:d7:d2:c2:50:20:98:ee:58:d2:66:af:e8:
6e:46:7b:47:d2:36:fa:ab:51:1f:97:1b:6b:96:cd:
d6:8f:c1:14:fd:97:05:5d:ac:14:11:c7:e3:95:30:
fe:e8:95:ea:1e:02:71:bc:ae:a1:91:0c:a1:99:8d:
94:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E1:49:E5:EE:A3:6C:E6:52:25:FF:E2:43:E1:31:26:49:06:BB:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c42140bb-6b45-3666-ab69-b0e1171139f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
X509v3 Authority Key Identifier:
keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.32.0/23
161.129.36.0-161.129.38.255
161.129.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:5e:f9:55:c6:1c:5a:bb:c8:52:d7:b3:55:cd:64:35:2d:7b:
4c:58:fa:1d:e1:4a:fd:e3:ff:76:42:e8:2b:ae:80:c5:81:5e:
1a:7b:a6:b3:cf:17:5b:34:12:15:0d:d0:53:b3:30:2b:68:f7:
06:f1:c2:e7:15:a5:e0:0f:9b:39:7d:af:0a:c6:2b:ea:52:76:
81:cd:57:82:93:85:cc:c4:23:89:33:b7:0a:c2:ff:b6:6b:08:
fd:d8:13:d8:03:db:1c:62:52:02:b7:51:63:0c:5b:29:12:c7:
b8:ce:12:0c:3f:f6:d0:a1:80:4a:3f:6d:4a:f4:80:e3:5a:76:
61:83:fd:2f:d6:d5:5a:ce:aa:48:92:93:15:2a:ad:6b:ec:d9:
a6:51:c9:2d:68:f3:9c:53:7d:5c:59:20:23:ea:02:7d:30:a6:
3c:d6:d6:ce:17:27:96:3c:e9:b5:ec:e6:50:e6:f0:36:fe:88:
d0:a1:5e:85:f0:be:ef:8b:3c:65:c3:28:35:8e:1a:6e:e6:0d:
2f:d6:9b:c9:43:4d:33:57:3e:41:cf:ab:0b:2a:b8:dc:68:f8:
26:bb:01:93:39:dc:ac:8d:a9:72:50:bc:f5:48:a7:4a:88:df:
f9:3d:35:9a:de:a4:42:c2:32:b3:21:2a:e0:e6:c7:5c:65:ee:
ab:6e:94:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:30:08 2026 by rpki-client