
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/dcf9e65a-be83-3af7-9131-27213172cafc.roa
File: dcf9e65a-be83-3af7-9131-27213172cafc.roa (raw, json)
Hash identifier: CaT6bzXgmrzAy/vgVcseBCphiHUZGVFpq+8qS++HPlY=
Subject key identifier: 61:D2:34:7A:A5:73:ED:88:A6:31:C6:68:AF:3A:EC:A1:D0:34:8F:47
Certificate issuer: /CN=66610284-035b-4928-833d-55f67bcdadc1
Certificate serial: 010D0C9F4328584EED5221289CB5034481A311C0
Authority key identifier: 32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/dcf9e65a-be83-3af7-9131-27213172cafc.roa
Signing time: Sun 23 Aug 2026 01:00:12 +0000
ROA not before: Sun 23 Aug 2026 01:00:12 +0000
ROA not after: Sat 21 Nov 2026 02:00:12 +0000
asID: 400587
IP address blocks: 121.127.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ed:52:21:28:9c:b5:03:44:81:a3:11:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66610284-035b-4928-833d-55f67bcdadc1
Validity
Not Before: Aug 23 01:00:12 2026 GMT
Not After : Nov 21 02:00:12 2026 GMT
Subject: CN=b2af589c-76f4-433a-b8c4-c810ed870135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d0:14:8c:2b:50:b1:f6:05:6e:4c:c2:62:86:
40:12:3c:25:70:2d:09:09:47:0b:18:ea:96:b6:8a:
3f:6a:35:93:8f:eb:d3:16:b6:d2:a0:23:cf:fe:f7:
02:1b:26:2a:23:f6:7e:7a:68:fd:0c:f9:7d:18:26:
88:9c:e4:dd:03:31:a6:e3:86:5c:ed:0c:eb:8d:ad:
98:a2:0c:42:53:36:bb:43:c5:55:d7:64:d7:2a:57:
29:c7:aa:01:9d:f5:f5:92:e6:74:73:a7:eb:6f:35:
26:31:07:56:5a:2b:ca:f8:24:48:b8:86:ec:4a:ec:
c7:81:a4:6d:46:62:b8:47:0c:88:e4:44:58:2c:03:
b8:76:73:0d:6f:32:e2:07:9c:02:6a:73:25:4d:f2:
fb:3b:d0:33:96:51:ff:22:86:35:ed:95:f0:85:2c:
8e:83:2d:23:b7:86:11:d4:7f:1d:11:48:27:a1:fb:
94:0b:16:6b:e1:33:04:71:f5:dc:b0:b2:f7:cf:42:
4e:00:a6:e6:a8:77:b8:6d:a0:df:4f:af:6a:45:86:
8b:47:c8:a2:03:a9:02:07:cf:0b:ed:8a:58:69:00:
a6:25:9d:39:dd:ed:51:e5:c4:87:a3:de:84:c6:ed:
4d:e5:16:0b:c1:b6:19:2d:58:28:f4:16:ac:8d:a4:
27:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D2:34:7A:A5:73:ED:88:A6:31:C6:68:AF:3A:EC:A1:D0:34:8F:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/dcf9e65a-be83-3af7-9131-27213172cafc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl
X509v3 Authority Key Identifier:
keyid:32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
sbgp-ipAddrBlock: critical
IPv4:
121.127.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:c8:30:d0:39:63:c6:ac:ae:c5:62:e4:25:0d:5a:7e:b4:73:
00:6e:ca:6e:5a:94:d6:4d:38:10:5b:84:18:2d:7b:f0:a9:41:
c1:6e:a9:5e:dd:d3:d8:50:71:07:e8:f2:f8:ee:61:b2:db:9a:
43:c3:75:cb:4b:2e:bd:17:e8:07:75:80:79:e3:10:64:86:94:
49:be:79:e6:76:60:b1:6d:1d:16:37:65:a5:f2:dc:7b:c0:88:
98:73:1e:3e:de:cb:e6:9a:23:9e:8f:a4:54:dc:08:b7:07:3f:
4b:c7:40:44:83:74:5a:ac:09:07:3f:97:99:75:85:2f:26:09:
cb:ad:74:88:e7:f7:00:08:17:ee:9a:68:65:7a:31:05:7c:d5:
c9:13:6e:da:3a:af:c1:68:09:79:39:bd:69:d7:5a:b0:e4:16:
b2:f5:8a:be:70:b0:65:e8:43:9e:da:78:c6:62:01:81:17:d1:
ff:76:6f:73:c1:d9:10:2a:a3:00:79:a6:26:c2:e8:7b:11:62:
a5:84:04:df:70:5f:7e:68:ed:77:48:2b:6f:b5:3d:3d:fb:67:
bb:cf:e3:8e:16:4a:8d:94:88:02:7f:a3:46:26:fe:9c:c3:28:
9e:4a:74:7f:99:a7:96:f2:19:68:68:ae:c9:2b:3e:2d:1a:62:
f6:18:cb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:07:13 2026 by rpki-client