
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c235b0ca-8836-3166-aa4a-14f0e67858bb.roa
File: c235b0ca-8836-3166-aa4a-14f0e67858bb.roa (raw, json)
Hash identifier: Wwck/ZsXS1g+kttPJfT5qfvi+LOVl8bwA/1T11+YCQE=
Subject key identifier: DA:CD:48:FF:00:70:D6:63:2D:31:83:AC:DF:B1:74:74:DB:73:8B:EF
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F4328584D143D52E93109E27D5C7BC580
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c235b0ca-8836-3166-aa4a-14f0e67858bb.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 209854
IP address blocks: 142.111.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:52:e9:31:09:e2:7d:5c:7b:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=1c98f17f-ff7d-45b5-a394-4b6a59c085d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b8:bb:35:92:b8:ac:3f:3e:5a:a0:a5:17:94:
0d:81:7f:d4:c6:c0:f9:0b:80:d7:9c:d1:b3:08:f8:
16:3e:3c:21:f1:53:4b:c2:c6:5f:95:08:06:db:de:
f2:92:02:92:81:3e:06:75:62:1d:d9:49:a3:85:f1:
e6:08:02:fe:40:7d:92:02:cd:7d:1c:ee:5c:ec:85:
03:3f:28:fc:7d:c8:3d:0d:ca:ee:11:5f:1c:52:dd:
1c:78:0f:b2:48:8c:1f:64:0f:31:9f:5e:b1:ad:bf:
e9:91:3c:3d:47:d7:6a:a4:ab:6d:d7:ac:2b:13:e8:
b8:24:78:ed:3b:f3:4a:b9:10:26:41:6d:8e:ab:77:
81:78:a9:ad:63:43:7b:ff:5c:13:ec:30:90:13:24:
08:61:06:85:9e:b0:fd:6b:60:c4:6f:72:bc:9b:c2:
f9:6f:73:03:00:74:23:e1:c1:75:54:1d:5f:bd:62:
23:e1:27:91:ef:2a:50:82:dc:58:48:b1:73:4d:8d:
96:09:1f:e2:db:f7:ed:56:13:c5:66:2c:88:c9:cc:
06:41:76:29:32:ba:b1:3a:e5:52:e3:cf:5c:8a:c9:
96:07:9c:55:1a:b2:b1:73:66:85:ce:49:0b:5e:0d:
29:53:ce:59:4e:7f:8d:be:7a:60:5e:93:bd:bc:33:
20:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CD:48:FF:00:70:D6:63:2D:31:83:AC:DF:B1:74:74:DB:73:8B:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c235b0ca-8836-3166-aa4a-14f0e67858bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.111.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:71:fc:3a:11:ac:c3:42:a9:28:b7:53:8d:ab:c4:11:6e:35:
c4:0a:fc:ed:a0:6a:c3:dc:3b:1e:39:cd:32:7d:09:b3:14:aa:
c3:18:da:d5:f6:74:56:20:a8:42:a0:6c:69:4e:b4:aa:31:aa:
58:84:cd:71:a9:b7:6f:9f:50:f3:0a:c1:85:34:a9:cf:bc:59:
66:c5:ea:36:8e:c5:34:c8:d4:fc:a3:15:d6:df:19:57:99:fa:
2f:65:d1:82:b2:44:85:12:1f:74:2c:5e:1f:b8:6d:e6:e7:f3:
4a:3f:84:85:b1:a0:d9:e2:d5:38:a8:f9:78:c0:b9:a7:8a:9d:
67:a3:dd:91:22:96:47:b2:98:33:2d:65:58:98:14:30:a0:21:
6e:2d:d4:c9:1d:0f:02:ce:5e:3d:3e:b0:7c:f7:77:ab:a7:52:
42:2d:56:e6:1c:40:aa:21:36:60:6a:a8:86:3f:2d:c9:81:c1:
3a:82:4c:08:b3:4c:22:4d:3e:12:9d:72:ed:71:2e:8b:6b:fa:
98:71:5d:cd:2a:9f:c5:75:2f:48:5a:98:83:f3:ff:80:5a:8c:
1a:7a:ff:90:82:50:dd:13:a0:3a:7d:cc:a2:58:24:14:78:50:
4b:ca:b1:83:36:eb:ed:c1:0b:a3:71:c4:42:8d:b2:5a:d0:33:
8a:34:34:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:27 2026 by rpki-client