
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f63a9c1a-e317-37cb-b863-42b390358653.roa
File: f63a9c1a-e317-37cb-b863-42b390358653.roa (raw, json)
Hash identifier: OkmJqii5FJmE6BfHGHIJV/a+dirJFz8SCLA3W3fZrII=
Subject key identifier: BF:79:01:D6:13:F8:12:D6:55:32:B0:76:FD:54:68:68:C3:7D:C5:CB
Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial: 010D0C9F4328584D75D528C0A6D5158DF51F7E00
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f63a9c1a-e317-37cb-b863-42b390358653.roa
Signing time: Fri 10 Apr 2026 13:00:31 +0000
ROA not before: Fri 10 Apr 2026 13:00:31 +0000
ROA not after: Thu 09 Jul 2026 13:00:31 +0000
asID: 3356
IP address blocks: 161.129.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:75:d5:28:c0:a6:d5:15:8d:f5:1f:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Validity
Not Before: Apr 10 13:00:31 2026 GMT
Not After : Jul 9 13:00:31 2026 GMT
Subject: CN=39c26554-96c6-48c1-aa1f-62acb1ba9208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3f:94:1c:cd:44:fe:d2:c4:8f:74:83:0d:eb:
8f:12:8e:63:4b:4b:b4:dc:fc:e5:ea:c0:f4:ca:13:
c1:57:55:e8:20:15:f5:84:60:1e:d1:7e:81:90:93:
c6:57:fd:13:cd:bc:22:5d:45:60:55:89:d5:36:d4:
83:35:78:21:e6:bd:0a:c1:d7:db:a5:a8:21:77:b6:
d8:33:da:66:58:14:84:b8:a2:e3:22:c3:d6:43:f8:
ae:6f:f3:1c:ec:85:f6:8e:75:c6:6f:fa:73:25:b7:
3d:ad:41:a3:32:c6:98:2b:17:6d:03:a1:90:26:4f:
58:e7:32:63:49:05:31:57:f7:1c:75:72:70:80:ef:
b0:1b:aa:89:4d:c9:0f:ef:1f:e0:76:80:27:ef:62:
cb:35:ec:c4:5f:3a:a5:8a:f7:32:d5:5f:5f:ba:be:
8a:5f:72:00:ad:db:0e:78:74:56:d2:37:70:9f:48:
f9:74:53:1f:5c:08:27:58:d2:b6:f9:1a:6d:f2:08:
5a:55:80:e2:50:eb:96:5b:fe:84:23:15:51:07:b3:
4e:40:bd:8c:20:0c:d8:9e:db:a0:44:7d:0f:4c:00:
a0:8c:10:92:61:de:4c:aa:fb:ee:63:65:15:96:64:
61:25:46:e8:06:75:19:6c:71:31:32:2b:5f:1d:69:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:79:01:D6:13:F8:12:D6:55:32:B0:76:FD:54:68:68:C3:7D:C5:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f63a9c1a-e317-37cb-b863-42b390358653.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
X509v3 Authority Key Identifier:
keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:1c:4b:dc:98:65:ee:0d:c9:1d:a6:e9:43:e7:49:ad:1f:bf:
1a:6c:49:b9:11:0e:38:d7:54:02:93:86:ed:62:b2:28:25:70:
da:7a:e7:72:36:c3:c2:32:6c:d4:fa:8c:a1:cb:c2:f7:01:5c:
1f:6e:2e:c0:60:f2:24:3d:1a:4c:94:63:05:c7:7f:53:d3:c2:
21:51:27:98:c7:7b:26:38:ad:59:48:e8:ad:2b:91:1a:3a:ff:
bd:65:a0:1e:bd:bc:6f:52:41:04:18:b8:1b:ac:44:7a:3c:57:
a3:54:5e:68:63:95:13:89:18:58:a5:2a:d4:a3:d4:db:06:26:
a5:cf:a0:25:ea:4c:04:c7:64:c2:8c:51:07:87:0c:b4:01:0a:
41:d9:99:36:0d:2e:54:cd:bf:b1:84:37:d6:7a:c7:d6:7d:93:
a2:90:5b:74:15:eb:0a:8d:bd:4b:17:c5:94:e1:a6:51:84:5d:
4e:b4:62:06:8d:f3:96:cb:be:f5:7d:54:f1:55:d3:2b:87:91:
be:25:10:5a:e9:48:29:8c:89:e6:0a:98:b0:4d:6c:8a:ba:f2:
5f:b5:e6:69:b9:54:15:6e:dc:4b:3d:6e:1b:56:66:6a:ba:26:
60:3c:08:34:2b:5f:67:36:f3:b3:48:69:28:7d:2e:69:fa:21:
47:e0:ef:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111SjAptUVjfUffgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx
NzVkMB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk
MzljMjY1NTQtOTZjNi00OGMxLWFhMWYtNjJhY2IxYmE5MjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT+UHM1E/tLEj3SDDeuPEo5jS0u03Pzl6sD0
yhPBV1XoIBX1hGAe0X6BkJPGV/0TzbwiXUVgVYnVNtSDNXgh5r0Kwdfbpaghd7bY
M9pmWBSEuKLjIsPWQ/iub/Mc7IX2jnXGb/pzJbc9rUGjMsaYKxdtA6GQJk9Y5zJj
SQUxV/ccdXJwgO+wG6qJTckP7x/gdoAn72LLNezEXzqlivcy1V9fur6KX3IArdsO
eHRW0jdwn0j5dFMfXAgnWNK2+Rpt8ghaVYDiUOuWW/6EIxVRB7NOQL2MIAzYntug
RH0PTACgjBCSYd5MqvvuY2UVlmRhJUboBnUZbHExMitfHWl79wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL95AdYT+BLWVTKwdv1UaGjDfcXLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw
ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvZjYzYTljMWEtZTMxNy0z
N2NiLWI4NjMtNDJiMzkwMzU4NjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky
MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw
MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh
YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADscS9yYZe4NyR2m6UPnSa0fvxpsSbkRDjjXVAKThu1isiglcNp653I2
w8IybNT6jKHLwvcBXB9uLsBg8iQ9GkyUYwXHf1PTwiFRJ5jHeyY4rVlI6K0rkRo6
/71loB69vG9SQQQYuBusRHo8V6NUXmhjlROJGFilKtSj1NsGJqXPoCXqTATHZMKM
UQeHDLQBCkHZmTYNLlTNv7GEN9Z6x9Z9k6KQW3QV6wqNvUsXxZThplGEXU60YgaN
85bLvvV9VPFV0yuHkb4lEFrpSCmMieYKmLBNbIq68l+15mm5VBVu3Es9bhtWZmq6
JmA8CDQrX2c287NIaSh9Lmn6IUfg79A=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:41:15 2026 by rpki-client