
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/0b5d44a5-7f8b-31b1-9cfc-c4899d837137.roa
File: 0b5d44a5-7f8b-31b1-9cfc-c4899d837137.roa (raw, json)
Hash identifier: tKnTzZZatT9eps+IfHYosFOWzEDCAHm9NExiKI3O1jI=
Subject key identifier: 5F:70:F8:27:AD:39:CB:EF:38:F9:15:96:04:F2:86:D3:DE:A4:43:0E
Certificate issuer: /CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546
Certificate serial: 010D0C9F4328584D186CFF784B376DE0FDEF9AC0
Authority key identifier: 2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/0b5d44a5-7f8b-31b1-9cfc-c4899d837137.roa
Signing time: Sun 08 Mar 2026 02:00:31 +0000
ROA not before: Sun 08 Mar 2026 02:00:31 +0000
ROA not after: Sat 06 Jun 2026 01:00:31 +0000
asID: 23557
IP address blocks: 142.249.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:18:6c:ff:78:4b:37:6d:e0:fd:ef:9a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546
Validity
Not Before: Mar 8 02:00:31 2026 GMT
Not After : Jun 6 01:00:31 2026 GMT
Subject: CN=13fdc958-890c-4010-a79a-f9f21d2f3c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:d6:3f:41:2f:09:b4:a4:cc:ce:4c:8a:7f:
9e:45:9f:97:4d:67:f1:e6:32:9b:bb:4e:20:41:6f:
45:f4:a7:0d:dc:a4:7a:8c:2b:c6:f8:6a:bb:29:6f:
05:23:64:f7:c5:2f:5c:34:99:a1:e3:2d:f7:81:09:
6d:05:1a:ce:df:97:16:50:aa:b1:b6:b8:1d:11:3b:
bc:a5:30:94:d4:ea:0c:63:52:e7:c0:11:fa:03:51:
5d:69:39:b2:1c:3e:c8:70:f8:f2:01:b3:e3:d8:e8:
44:a0:6f:9e:6f:99:46:10:69:52:9a:13:ec:cf:38:
60:17:b3:8e:c3:00:4e:f1:fd:20:3b:96:ce:e6:70:
16:76:42:ae:9b:0e:56:e3:06:6a:2d:de:23:9f:1c:
dd:18:bc:0b:12:34:5b:fb:88:2d:bb:23:d1:d3:dc:
0b:d2:b8:1c:a2:ee:25:1f:8b:ee:99:ef:de:4e:fa:
be:00:32:3d:0f:53:14:8b:99:26:bc:ed:7f:97:a6:
b9:19:f8:1e:cb:5c:44:cd:33:d9:1c:06:73:bf:05:
d3:38:b3:5f:85:78:96:7f:0e:f6:7f:a1:79:c9:3c:
db:a5:0c:9c:08:e5:79:3e:fb:a8:8b:d4:5c:47:c2:
13:b3:40:de:44:62:15:9d:8d:c2:07:43:52:5c:5b:
4e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:70:F8:27:AD:39:CB:EF:38:F9:15:96:04:F2:86:D3:DE:A4:43:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/0b5d44a5-7f8b-31b1-9cfc-c4899d837137.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl
X509v3 Authority Key Identifier:
keyid:2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer
sbgp-ipAddrBlock: critical
IPv4:
142.249.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:b5:60:9d:c7:cd:2e:3f:6c:34:a6:e8:29:05:56:ef:6f:54:
77:76:58:3c:4b:f3:9e:43:46:a3:2b:c7:82:56:f0:bd:5c:a7:
8f:e7:b5:65:e9:a0:0f:3e:22:e1:e2:f1:15:50:e3:a3:cc:f0:
64:3b:96:d7:84:fa:5e:d9:36:09:1d:58:26:24:b1:fe:c3:1f:
c3:6e:1d:3e:73:39:37:c8:7f:87:5e:e4:ac:19:85:7b:5f:64:
49:8d:82:10:e5:fc:6f:54:28:be:6a:eb:2a:3e:f6:58:c7:3b:
32:ed:26:7b:1a:2c:ab:eb:30:a8:2f:cb:ad:19:e5:6e:2b:d9:
60:6e:56:d0:0e:d6:57:06:ff:39:79:f5:21:a5:13:81:7b:a4:
82:21:8a:fb:7f:8f:c1:7f:42:f0:50:47:17:a3:80:5f:dc:d2:
5e:ae:a5:6a:68:00:4d:7e:5a:17:99:d3:d1:3b:55:30:dd:8d:
4b:95:ba:15:89:ff:67:4f:06:19:46:cb:f7:c0:8f:47:10:1e:
f6:b9:ee:bf:d2:df:94:12:c2:5e:3a:d9:35:c1:44:0f:ac:ce:
a4:3f:e6:e7:32:fa:7c:5b:0b:15:05:2a:d2:b0:87:d0:ac:5e:
6c:80:1f:60:94:6c:15:6d:42:4b:c6:84:23:1b:0f:9a:5f:d0:
04:ed:0e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:24 2026 by rpki-client