
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/4401f1aa-4cd5-33de-bd77-0573df16318a.roa
File: 4401f1aa-4cd5-33de-bd77-0573df16318a.roa (raw, json)
Hash identifier: AeQh+jW283apk8pNY+Ef4wTnHqrZu9HIiWYf715d6iU=
Subject key identifier: 02:DA:D7:23:E0:21:F6:21:03:C9:97:5B:AD:3F:2B:AF:1A:17:13:A7
Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial: 010D0C9F4328584F549DAF4DD603727D5B052880
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/4401f1aa-4cd5-33de-bd77-0573df16318a.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 206216
IP address blocks: 142.248.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:af:4d:d6:03:72:7d:5b:05:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=8e1c4849-688d-4c86-a057-0644a99e3382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:f8:7f:a6:7f:b3:9c:6b:f4:4c:30:1b:1c:
e1:c7:15:b1:ac:fb:99:4d:74:82:24:25:13:7e:55:
6f:26:75:b7:70:e1:1f:e6:78:c3:50:94:63:65:db:
2c:d0:bf:a3:de:72:70:e6:98:92:a0:be:a6:ef:53:
5e:72:ac:c3:17:c8:d4:4d:3e:24:41:64:1d:90:78:
18:77:38:3e:ee:0d:16:2f:4b:4b:b3:28:0a:ee:b7:
98:45:cb:77:63:38:e6:51:03:15:26:89:73:02:ca:
8d:3b:9c:c8:9b:0c:2e:ee:eb:42:03:33:3a:2c:3d:
88:b3:d4:7b:80:87:2e:33:80:c5:b7:05:06:9d:e5:
18:b2:72:64:eb:bb:f1:b9:d2:73:80:7f:db:d4:93:
ee:ed:79:5f:54:8b:48:fc:5c:64:b7:3e:c8:d0:92:
68:49:e3:97:4e:be:eb:37:fb:f5:e3:0d:c3:09:94:
51:44:c0:29:60:80:29:72:8e:b5:13:4e:b3:74:de:
20:22:fa:bc:18:b3:b6:76:5e:fe:0f:86:09:fe:d3:
e2:53:2b:df:13:00:c6:ec:97:fa:e2:4c:90:5c:07:
67:1f:fd:2e:05:ca:86:52:99:e5:42:92:52:25:63:
6d:6a:dd:b4:d4:b5:63:0e:9b:d4:8a:c2:6d:94:b2:
6b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DA:D7:23:E0:21:F6:21:03:C9:97:5B:AD:3F:2B:AF:1A:17:13:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/4401f1aa-4cd5-33de-bd77-0573df16318a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
X509v3 Authority Key Identifier:
keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
sbgp-ipAddrBlock: critical
IPv4:
142.248.83.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:31:5e:8f:61:47:31:49:8c:85:91:9c:0a:82:bb:21:7d:02:
67:14:fb:3e:88:6e:35:39:5e:b0:97:41:24:56:78:e3:80:7c:
fd:d1:69:43:d6:f3:d1:b1:38:ab:2e:64:d5:d2:5d:c7:d0:34:
57:bc:93:e4:da:b8:96:3b:6c:9f:05:d7:0f:02:c6:6f:1d:83:
c1:a7:32:eb:7a:9f:14:f4:f6:b7:8d:ae:ba:6b:7d:60:cd:36:
dc:b5:b2:64:0f:e7:f2:55:3b:94:1a:10:9d:58:37:32:f1:c5:
68:f1:12:ee:20:cd:a8:c8:e8:ed:1c:f6:8d:33:8d:f4:d6:ff:
6a:dd:21:30:0b:48:bf:f1:59:2f:14:77:66:8e:4e:8c:7f:18:
53:9d:4f:05:6c:8d:61:e4:31:03:29:d8:17:f9:97:65:ab:e9:
81:37:b0:48:a8:07:9a:46:e3:e9:7b:2c:d0:f3:4b:ad:09:f2:
ef:13:97:82:a3:47:e7:44:a6:18:14:16:97:f7:2d:45:9e:e4:
8e:b7:37:e8:f0:9a:9b:34:c4:a3:fa:7f:69:97:0e:22:a1:4b:
c7:a3:13:af:8a:95:91:54:a5:8c:0e:e6:27:90:7e:70:77:3a:
45:69:35:61:b9:8d:b6:34:48:83:31:07:be:3f:b0:2b:ba:ac:
e4:4d:74:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:48:30 2026 by rpki-client