
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/580f667d-1d75-3de5-8dab-2e9e3422f539.roa
File: 580f667d-1d75-3de5-8dab-2e9e3422f539.roa (raw, json)
Hash identifier: uWTQvZNFtj2QuD3vFhUV/JziZhLTEsIUTqiXjVPxapM=
Subject key identifier: 5C:0D:B2:2C:91:0F:59:6D:DA:96:B2:82:A0:38:F0:57:13:F6:B9:5A
Certificate issuer: /CN=3a9bc447-67f9-40d1-8f3d-b84cca94c493
Certificate serial: 010D0C9F4328584EFA11EB105E490B72F3A82100
Authority key identifier: E0:19:17:69:7C:85:36:41:5C:F4:63:73:4E:D9:EF:AC:7D:5D:82:DE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/580f667d-1d75-3de5-8dab-2e9e3422f539.roa
Signing time: Thu 27 Aug 2026 14:36:42 +0000
ROA not before: Thu 27 Aug 2026 14:36:42 +0000
ROA not after: Wed 25 Nov 2026 15:36:42 +0000
asID: 14374
IP address blocks: 121.91.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/3a9bc447-67f9-40d1-8f3d-b84cca94c493.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/3a9bc447-67f9-40d1-8f3d-b84cca94c493.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fa:11:eb:10:5e:49:0b:72:f3:a8:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a9bc447-67f9-40d1-8f3d-b84cca94c493
Validity
Not Before: Aug 27 14:36:42 2026 GMT
Not After : Nov 25 15:36:42 2026 GMT
Subject: CN=024c0aa2-3d6a-4024-bacf-8e1264dafa88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:20:6e:94:ea:32:05:0a:ff:c6:78:48:fe:42:
7a:cc:4f:54:1a:c0:30:a9:42:7f:11:b5:ec:a5:4a:
04:9f:12:8a:ae:35:c1:c6:1c:9a:2c:52:54:e1:64:
05:c1:b0:9e:41:8b:51:8e:f3:a6:cb:ed:eb:45:5b:
95:15:11:30:1b:e3:ce:6a:61:e2:7d:ba:df:23:11:
4c:67:86:cf:49:44:b1:6b:85:cb:7f:f3:dd:0c:64:
62:fb:57:1a:e4:38:87:c4:47:df:fe:4d:c2:e5:2f:
83:09:2a:2a:72:55:c8:55:59:27:95:39:16:b2:4d:
6c:a6:5a:f0:9e:2e:f9:ba:67:e5:16:2a:cf:bd:6b:
08:76:87:62:08:4d:6c:06:47:a1:0d:80:d9:d6:d3:
c2:2e:55:57:5d:3f:65:a7:eb:fc:ad:df:a1:1f:82:
19:ca:d4:32:e5:d7:e9:d5:de:2b:2f:7d:8b:24:2f:
5b:1e:1d:26:dc:d8:a7:d8:b1:61:d5:e9:77:07:21:
ca:73:19:99:df:5f:28:08:e5:39:f7:25:8c:f3:3f:
de:62:38:53:b9:09:c1:f3:93:48:81:19:e8:19:42:
85:0f:59:88:c9:a0:f7:4e:8f:df:59:6b:57:d0:ec:
79:f1:1f:ef:58:ae:17:b1:e8:01:7d:5a:f4:15:f2:
9b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0D:B2:2C:91:0F:59:6D:DA:96:B2:82:A0:38:F0:57:13:F6:B9:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/580f667d-1d75-3de5-8dab-2e9e3422f539.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/3a9bc447-67f9-40d1-8f3d-b84cca94c493.crl
X509v3 Authority Key Identifier:
keyid:E0:19:17:69:7C:85:36:41:5C:F4:63:73:4E:D9:EF:AC:7D:5D:82:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493.cer
sbgp-ipAddrBlock: critical
IPv4:
121.91.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:53:58:77:05:53:53:59:a7:34:16:5f:2f:d7:f7:ae:09:03:
9f:f8:9c:d9:e0:82:11:c3:ad:2f:89:44:63:8b:da:6b:a7:73:
f2:ee:9b:4f:df:b8:eb:87:61:37:5b:ed:e9:90:c0:f1:2b:e2:
cd:7e:e7:48:91:98:4b:a6:1a:74:1c:90:55:aa:5f:a0:08:e1:
78:81:40:20:fb:c2:23:c0:f4:ff:a3:a9:81:93:9a:a2:87:ef:
f5:ee:09:84:c6:bb:86:8e:90:ae:e3:84:cb:e6:d0:fc:d3:5b:
60:3d:40:13:ec:c1:5a:37:72:56:67:94:14:19:a6:03:a3:78:
66:fc:ea:d3:bf:ac:4c:9e:21:8b:00:34:39:e3:9a:7d:10:76:
b4:fa:54:0b:74:03:50:56:cd:83:d8:6c:48:ff:32:64:21:9c:
2c:8d:e1:2a:0f:7c:95:22:f6:84:14:aa:95:b4:a8:f2:bd:3e:
a7:04:73:21:7f:df:d3:38:d0:e8:9a:58:a1:48:00:37:11:9e:
96:89:7d:21:d8:da:ad:61:02:1d:b9:2f:93:58:b5:71:78:51:
8a:5a:2c:a8:c6:dc:fd:e6:39:c0:fb:71:48:59:63:be:58:3c:
90:41:bf:f0:59:14:37:4c:89:be:32:56:f8:51:d9:47:63:a1:
35:5a:5e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:14:49 2026 by rpki-client