
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/8631b3bd-0b55-3465-bbe8-646adfd8309c.roa
File: 8631b3bd-0b55-3465-bbe8-646adfd8309c.roa (raw, json)
Hash identifier: oKve6sB2tTgQw/xzeV4MQnTbTBIdOTm4f6PtULNTdXE=
Subject key identifier: F6:0A:D1:67:1E:79:4E:F5:D3:B4:37:E4:E8:A3:41:01:1D:F5:77:16
Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Certificate serial: 010D0C9F4328584E0436060A01846B3BBC21FEC0
Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/8631b3bd-0b55-3465-bbe8-646adfd8309c.roa
Signing time: Sun 31 May 2026 13:00:10 +0000
ROA not before: Sun 31 May 2026 13:00:10 +0000
ROA not after: Sat 29 Aug 2026 13:00:10 +0000
asID: 398465
IP address blocks: 121.91.208.0/20 maxlen: 24
121.91.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:04:36:06:0a:01:84:6b:3b:bc:21:fe:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Validity
Not Before: May 31 13:00:10 2026 GMT
Not After : Aug 29 13:00:10 2026 GMT
Subject: CN=ec83416e-0231-4344-b87d-027787459802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:87:b0:2e:67:24:ed:a2:1d:69:a1:65:ec:
50:2b:45:61:32:c9:a4:2f:c9:2b:90:fd:f9:51:81:
02:97:94:e9:ca:1a:a8:05:c6:c6:ee:98:ae:64:af:
a3:f8:58:91:58:f1:2a:e0:e9:03:77:ca:3e:0e:49:
00:06:a2:55:69:41:d3:57:64:e1:88:a0:90:a6:ce:
6e:a7:49:91:5d:82:44:2e:ab:ca:f6:aa:c1:23:6d:
42:c0:47:c4:01:57:da:c1:af:fe:90:cd:93:6a:d9:
eb:d4:a5:86:3b:a7:3b:48:7c:7a:de:c4:15:8b:3c:
7d:a1:36:9f:e1:9d:a7:e1:37:4d:fe:67:3a:75:93:
3b:f4:e4:fd:9f:ce:bd:3b:68:07:c4:4f:54:f7:a1:
98:85:8f:0d:e0:67:e3:6c:f2:1e:42:2b:eb:35:7a:
c2:6d:b5:75:0a:00:cd:36:d8:98:ca:43:f8:3f:ff:
43:2e:02:89:46:cc:63:e6:0b:a9:15:b9:ae:28:ec:
71:33:5c:94:f1:9b:d3:9e:03:c6:9e:d4:92:df:83:
f7:99:88:21:dd:66:2d:bc:4a:3d:79:aa:63:69:96:
62:9d:24:f5:c5:99:7a:33:bc:01:ed:f4:6d:d7:4a:
88:2b:98:ef:0f:31:0a:87:a1:8d:1f:d4:fa:00:3f:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0A:D1:67:1E:79:4E:F5:D3:B4:37:E4:E8:A3:41:01:1D:F5:77:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/8631b3bd-0b55-3465-bbe8-646adfd8309c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl
X509v3 Authority Key Identifier:
keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
sbgp-ipAddrBlock: critical
IPv4:
121.91.208.0-121.91.255.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:b4:6e:43:f1:43:e4:4b:42:12:c7:a2:86:9d:4d:4e:bc:ff:
93:51:89:65:7c:ac:15:09:38:62:b0:85:74:1b:7b:fe:e2:2f:
64:eb:a6:f8:b7:f7:5f:bb:b5:2a:67:59:97:2b:f6:ae:5d:25:
fb:b0:b8:82:fc:dd:2c:72:4c:c9:3a:d3:52:03:b0:08:06:4c:
07:fe:7d:5a:79:b4:99:ec:e1:80:ba:84:3f:de:a0:df:55:db:
93:8b:f2:d3:34:10:56:6a:e2:76:ac:7f:2c:ce:0e:8d:bd:7f:
8c:d5:e8:17:37:e9:4d:1b:61:7c:91:f7:04:4a:d5:15:c2:e4:
ee:88:83:2f:79:07:69:c7:44:60:ef:c9:5d:76:40:d0:5b:f9:
b4:b9:fa:78:5a:b5:fc:f8:46:4e:02:3c:c9:94:64:3a:2b:88:
f2:0a:4a:97:6b:1d:e4:bf:25:6b:61:3f:7b:b9:f6:cc:80:72:
ec:76:23:62:65:ba:85:fe:98:e8:6b:83:36:be:98:f1:c2:1d:
d6:be:00:a5:60:8f:9c:7f:7a:18:22:fc:d7:f4:2f:a1:63:30:
f6:de:cb:4f:ea:65:5f:1e:1a:ea:62:5f:52:16:71:b1:86:d1:
45:b0:2d:7e:b5:fe:12:98:51:95:f4:88:e2:e1:6e:cf:0e:dc:
ae:b8:7d:c6
-----BEGIN CERTIFICATE-----
MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWE4ENgYKAYRrO7wh/sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy
NjA5MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
ZWM4MzQxNmUtMDIzMS00MzQ0LWI4N2QtMDI3Nzg3NDU5ODAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+OHsC5nJO2iHWmhZexQK0VhMsmkL8krkP35
UYECl5TpyhqoBcbG7piuZK+j+FiRWPEq4OkDd8o+DkkABqJVaUHTV2ThiKCQps5u
p0mRXYJELqvK9qrBI21CwEfEAVfawa/+kM2Tatnr1KWGO6c7SHx63sQVizx9oTaf
4Z2n4TdN/mc6dZM79OT9n869O2gHxE9U96GYhY8N4GfjbPIeQivrNXrCbbV1CgDN
NtiYykP4P/9DLgKJRsxj5gupFbmuKOxxM1yU8ZvTngPGntSS34P3mYgh3WYtvEo9
eapjaZZinST1xZl6M7wB7fRt10qIK5jvDzEKh6GNH9T6AD/1KQIDAQABo4IDXDCC
A1gwHQYDVR0OBBYEFPYK0WceeU7107Q35OijQQEd9XcWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi
MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvODYzMWIzYmQtMGI1NS0z
NDY1LWJiZTgtNjQ2YWRmZDgzMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm
MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw
MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl
Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD
AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0
dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG
SIb3DQEBCwUAA4IBAQAQtG5D8UPkS0ISx6KGnU1OvP+TUYllfKwVCThisIV0G3v+
4i9k66b4t/dfu7UqZ1mXK/auXSX7sLiC/N0sckzJOtNSA7AIBkwH/n1aebSZ7OGA
uoQ/3qDfVduTi/LTNBBWauJ2rH8szg6NvX+M1egXN+lNG2F8kfcEStUVwuTuiIMv
eQdpx0Rg78lddkDQW/m0ufp4WrX8+EZOAjzJlGQ6K4jyCkqXax3kvyVrYT97ufbM
gHLsdiNiZbqF/pjoa4M2vpjxwh3WvgClYI+cf3oYIvzX9C+hYzD23stP6mVfHhrq
Yl9SFnGxhtFFsC1+tf4SmFGV9Iji4W7PDtyuuH3G
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:07:15 2026 by rpki-client