
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/ae7a87ea-09e3-37ff-a1a2-19775fb24ccc.roa
File: ae7a87ea-09e3-37ff-a1a2-19775fb24ccc.roa (raw, json)
Hash identifier: dTDNRIh9lRiKB8KiTae5vcVG2jwhY21Ulko5rKol/Hk=
Subject key identifier: 42:40:A3:D2:54:46:1A:85:99:39:26:1C:FA:64:40:9E:76:65:30:D6
Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial: 010D0C9F4328584CF8525A92A94A3E20BBC4FA80
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/ae7a87ea-09e3-37ff-a1a2-19775fb24ccc.roa
Signing time: Tue 24 Feb 2026 14:00:41 +0000
ROA not before: Tue 24 Feb 2026 14:00:41 +0000
ROA not after: Mon 25 May 2026 13:00:41 +0000
asID: 401585
IP address blocks: 161.129.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f8:52:5a:92:a9:4a:3e:20:bb:c4:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Validity
Not Before: Feb 24 14:00:41 2026 GMT
Not After : May 25 13:00:41 2026 GMT
Subject: CN=95f41534-0932-4792-a4f1-0d8b67199584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:49:01:a2:78:87:34:21:c5:6a:ce:4c:01:38:
a6:6b:dc:dc:bb:86:71:d9:a8:4a:61:ba:6e:ac:a8:
fa:05:2e:3d:c4:15:14:ff:75:ba:73:ed:98:e0:08:
40:7d:c4:4d:f0:3b:16:f0:79:56:7e:c2:aa:2a:a5:
4c:36:69:b3:21:8a:d4:2a:8f:69:83:8a:aa:9f:62:
cf:66:9e:a9:e9:1e:c8:58:3d:60:04:da:45:99:66:
c1:11:21:fe:6c:20:7f:f2:3b:24:04:c5:61:ca:d9:
6d:14:fb:a1:03:0d:86:29:2c:a1:cc:ba:5c:33:e7:
38:32:c9:e1:50:5e:38:a6:f2:9b:bc:ea:44:70:77:
a8:32:3c:59:bf:1a:9c:8a:0d:c5:e3:c7:c1:af:45:
e3:b5:56:76:4a:96:ae:89:41:64:25:44:83:0e:f7:
04:9d:ca:95:4f:4b:6f:be:46:f7:c3:6d:5a:54:ef:
06:32:8e:2b:7e:a4:fc:c6:f4:d9:3e:46:79:5c:36:
db:6c:f2:58:98:7e:a9:77:33:0e:96:dd:a4:ab:d8:
2b:b0:07:a0:92:20:07:5c:3f:e1:a0:9f:a9:60:29:
d4:12:f0:b9:34:e6:fd:3d:c9:2a:d6:64:84:a1:73:
2f:9b:75:54:e0:cf:30:37:be:2b:04:91:6e:d7:67:
f1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:40:A3:D2:54:46:1A:85:99:39:26:1C:FA:64:40:9E:76:65:30:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/ae7a87ea-09e3-37ff-a1a2-19775fb24ccc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
X509v3 Authority Key Identifier:
keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.34.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ce:fb:3e:06:4b:90:3c:76:9b:40:ca:a3:b9:67:aa:e2:a0:1d:
c0:6d:ac:42:57:1d:7a:5f:69:12:ca:85:01:03:aa:e6:eb:49:
23:4a:ba:ab:fa:07:3e:78:8e:70:96:a1:92:58:ab:e3:6c:85:
b6:d6:37:4d:97:7a:fb:c3:72:86:bb:37:05:7f:e2:82:1d:18:
03:4d:27:b4:f2:d1:8a:e0:c9:d9:c1:84:3b:4a:24:34:53:fb:
df:73:c3:29:1d:f8:2d:32:bb:19:41:ba:f8:e1:a8:92:f6:ed:
19:6b:15:46:be:bd:4e:56:e2:88:91:47:2a:56:24:1a:68:d5:
c2:c9:59:1f:37:51:05:67:c4:b3:6c:2f:d4:59:25:de:ab:aa:
0c:3a:f7:14:56:0d:88:46:e1:d1:56:5f:df:f6:6d:76:76:f4:
54:e3:85:9e:c1:5c:6e:53:39:ed:f2:4c:99:4c:63:59:7f:6a:
72:8e:f7:7e:3b:46:88:47:50:ec:82:86:f6:61:ed:be:9e:59:
30:2d:c9:ca:e1:bf:11:ea:84:a2:a0:a3:64:90:18:f8:75:0b:
33:36:03:e7:ea:b6:4f:58:3f:1e:57:2b:e3:6c:84:90:47:d1:
c2:8a:3e:a1:c4:05:80:50:6d:d0:ad:20:62:85:df:47:8c:34:
34:8a:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:09:45 2026 by rpki-client