
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/dcf9e65a-be83-3af7-9131-27213172cafc.roa
File: dcf9e65a-be83-3af7-9131-27213172cafc.roa (raw, json)
Hash identifier: 6Kax7Nt+2forORdH6++denWf+W8Y6vWkQho5dqRUxVQ=
Subject key identifier: 80:94:1E:48:C0:8E:01:A0:16:1F:86:D4:BF:0C:EB:6E:78:48:D4:22
Certificate issuer: /CN=66610284-035b-4928-833d-55f67bcdadc1
Certificate serial: 010D0C9F4328584D6AAA8CB32A69638D1EB92580
Authority key identifier: 32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/dcf9e65a-be83-3af7-9131-27213172cafc.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 400587
IP address blocks: 121.127.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:8c:b3:2a:69:63:8d:1e:b9:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66610284-035b-4928-833d-55f67bcdadc1
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=df9f807f-4fb4-435d-be74-349dfb2143b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7e:c2:a9:72:e9:dd:47:d2:be:78:ea:cb:fc:
40:ee:8d:0b:0a:61:3f:c9:d9:51:2b:2f:d5:e2:2e:
f4:99:8b:2e:57:5d:48:11:0f:ff:6b:8d:e8:3a:13:
64:2d:74:1b:02:aa:53:83:1b:62:a1:dd:6c:a9:94:
6a:e3:9a:90:82:8d:3c:f8:05:79:df:a9:1f:27:05:
eb:fa:7a:19:7b:c1:9e:71:1e:68:61:33:c1:34:bd:
02:f5:53:93:09:ba:fb:dd:a7:77:4f:6a:b6:0a:75:
2e:70:2c:23:52:bd:e6:b4:5a:6f:b3:88:21:d0:38:
eb:67:47:4a:83:7e:d9:ee:a6:28:d2:27:f6:22:1e:
7e:c4:5e:96:b3:52:7e:70:81:93:91:97:47:53:6a:
60:dc:0a:f8:a9:46:eb:1f:f8:b7:d9:52:6a:7b:e9:
3f:68:88:fe:f6:68:b0:78:91:c9:13:5f:76:2d:db:
72:87:66:96:f4:6d:97:aa:ef:ff:4b:ee:ad:d2:ef:
7a:f6:f8:0c:d2:bf:78:e9:39:a1:d9:e0:52:47:d9:
98:4b:e5:c3:87:1e:a2:73:e3:a1:57:88:1c:ce:a1:
db:8b:0b:17:66:83:ea:53:d1:70:84:83:be:9e:d6:
b5:86:c9:78:f0:6c:1e:d7:61:c7:41:93:9f:17:3c:
df:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:94:1E:48:C0:8E:01:A0:16:1F:86:D4:BF:0C:EB:6E:78:48:D4:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/dcf9e65a-be83-3af7-9131-27213172cafc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl
X509v3 Authority Key Identifier:
keyid:32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
sbgp-ipAddrBlock: critical
IPv4:
121.127.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:c6:1a:72:76:ba:e1:9b:8b:3d:10:1b:2d:b6:0f:ca:9c:e2:
84:0b:4b:71:24:2b:1a:42:1c:92:b7:69:49:1e:e4:e9:af:65:
18:85:01:13:cb:cf:04:32:35:b1:11:90:cb:c6:65:7c:b6:3f:
a8:3a:97:91:a3:e0:c9:c0:3b:03:72:69:1c:7b:d3:ab:64:33:
a7:0d:d8:e8:de:d1:9a:67:25:86:67:84:9f:79:bc:30:c5:e2:
31:cf:9d:73:47:17:17:41:de:32:58:48:df:0f:0c:86:eb:c5:
7e:47:1e:ef:e8:72:94:b5:38:ec:58:c5:fc:8d:66:3e:02:79:
c8:e5:26:f9:78:79:f5:43:56:c2:bd:de:b0:6f:5d:b2:35:82:
b9:dc:bc:98:27:0c:eb:72:da:8c:e9:fd:3c:cb:e8:5f:e0:8a:
16:cb:a5:54:4c:47:c9:8c:bb:1e:70:7c:3d:b1:e2:64:c5:da:
56:f5:e6:5f:62:84:69:fa:3b:8c:27:66:1b:67:8f:62:0d:5b:
af:d0:63:b1:23:8e:7d:15:66:86:6c:49:4c:eb:eb:c5:d5:01:
7c:13:9c:fe:68:13:75:ef:0b:aa:1b:66:31:c1:06:5c:f9:14:
1c:11:40:7b:87:0c:71:cf:1e:ba:43:a6:87:b8:2b:4b:9f:db:
2d:cb:8c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:25:50 2026 by rpki-client