
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ff716936-7063-31f2-9384-008bde05ec92.roa
File: ff716936-7063-31f2-9384-008bde05ec92.roa (raw, json)
Hash identifier: emxziyJA+nuUhaO6eQNb2myjnFxQf02sRH12mw/nHXY=
Subject key identifier: DA:46:2D:E9:EF:83:88:FE:E8:05:96:C4:07:D2:AA:CB:26:03:BA:09
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F4328584EEA875DC76ABF5628943DCD80
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ff716936-7063-31f2-9384-008bde05ec92.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 271
IP address blocks: 142.231.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:5d:c7:6a:bf:56:28:94:3d:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=c135dcd1-a521-427e-8ccd-67e3cc2a3707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:22:e7:43:53:74:eb:76:6d:6e:89:65:7a:59:
54:52:fb:d2:dd:bf:72:2d:3e:a1:92:74:ba:81:3f:
3f:c5:db:c2:c5:1b:ed:d0:64:85:e9:da:79:77:75:
94:a8:1d:40:f6:e2:8a:87:79:90:6e:75:ca:36:8a:
61:a2:40:11:03:4b:77:57:8f:91:35:9c:1e:9e:ae:
67:11:34:5b:9c:ea:db:49:2d:71:d3:9d:53:39:6c:
f5:45:fd:c5:22:ec:95:6c:e1:d1:d3:2e:b9:5d:a5:
57:96:4f:fb:46:96:59:49:4a:81:52:9f:b9:f4:8e:
4d:05:17:9f:a1:9d:47:e3:23:34:71:4a:3b:a6:d0:
7e:61:be:0c:a7:bc:18:14:30:c5:a7:61:82:66:22:
9e:08:6b:65:5d:e7:8e:89:29:5f:e2:24:28:79:bf:
73:c7:af:a0:7d:63:ed:f6:45:bc:cf:4b:8e:31:de:
d3:cf:8d:b0:2f:5e:9d:0d:9f:a0:7c:ee:0b:54:b4:
33:cc:01:6e:b2:ac:be:89:85:8b:a5:38:09:30:d2:
61:0f:63:21:f0:a8:fb:46:58:df:c1:62:f4:4f:73:
b8:48:38:de:c7:b2:e3:d2:4c:7f:44:86:2d:8c:ab:
79:86:98:0d:f4:79:b4:45:d5:3c:d4:52:e6:0d:76:
ce:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:46:2D:E9:EF:83:88:FE:E8:05:96:C4:07:D2:AA:CB:26:03:BA:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ff716936-7063-31f2-9384-008bde05ec92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.231.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:a9:5a:94:f2:30:f0:ae:4b:27:23:4c:04:31:89:1d:f8:61:
b7:e5:37:ec:b5:ff:93:de:3c:65:38:8c:37:63:a8:0a:e9:93:
27:b9:47:d3:28:76:1a:c3:9c:77:dc:75:c1:63:e6:48:3f:41:
c0:7f:d0:03:ac:7b:f4:b2:0b:e0:04:ce:4f:d2:61:96:2f:7d:
42:d7:f7:84:dd:f2:74:ff:a0:7e:3f:7f:50:9e:fb:2d:68:b4:
c0:4d:a5:d0:8d:38:b7:f9:dc:3e:1b:f5:a6:df:c7:72:b5:f1:
3f:d5:b7:6a:b8:44:f2:7d:5c:82:7d:97:9e:0c:ef:5f:e9:7e:
0a:e8:06:7b:4c:d3:bc:4e:41:d8:ed:6a:ca:ab:8f:00:c1:4f:
61:d8:75:2f:1f:da:19:45:ec:77:3f:d8:7d:6a:f0:88:47:23:
79:89:d5:5a:d0:dd:c6:99:97:13:ab:c6:0e:00:34:91:ad:fb:
cb:5d:19:52:98:1b:5f:e0:b9:22:2f:4e:e0:5c:08:7b:9c:90:
ba:f3:25:f1:21:89:b5:56:93:44:45:94:45:b7:8c:76:d8:0e:
f0:69:34:8b:86:05:0e:3a:2c:f4:2e:35:7e:5f:79:6e:b8:3a:
c9:ea:1a:8a:3e:d9:f7:6a:6a:f4:ff:e9:4b:85:14:e8:03:98:
4c:e8:24:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh13Har9WKJQ9zYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk
YzEzNWRjZDEtYTUyMS00MjdlLThjY2QtNjdlM2NjMmEzNzA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiLnQ1N063ZtbollellUUvvS3b9yLT6hknS6
gT8/xdvCxRvt0GSF6dp5d3WUqB1A9uKKh3mQbnXKNophokARA0t3V4+RNZwenq5n
ETRbnOrbSS1x051TOWz1Rf3FIuyVbOHR0y65XaVXlk/7RpZZSUqBUp+59I5NBRef
oZ1H4yM0cUo7ptB+Yb4Mp7wYFDDFp2GCZiKeCGtlXeeOiSlf4iQoeb9zx6+gfWPt
9kW8z0uOMd7Tz42wL16dDZ+gfO4LVLQzzAFusqy+iYWLpTgJMNJhD2Mh8Kj7Rljf
wWL0T3O4SDjex7Lj0kx/RIYtjKt5hpgN9Hm0RdU81FLmDXbOXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNpGLenvg4j+6AWWxAfSqssmA7oJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvZmY3MTY5MzYtNzA2My0z
MWYyLTkzODQtMDA4YmRlMDVlYzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjucWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB2pWpTyMPCuSycjTAQxiR34YbflN+y1/5PePGU4jDdjqArpkye5R9Mo
dhrDnHfcdcFj5kg/QcB/0AOse/SyC+AEzk/SYZYvfULX94Td8nT/oH4/f1Ce+y1o
tMBNpdCNOLf53D4b9abfx3K18T/Vt2q4RPJ9XIJ9l54M71/pfgroBntM07xOQdjt
asqrjwDBT2HYdS8f2hlF7Hc/2H1q8IhHI3mJ1VrQ3caZlxOrxg4ANJGt+8tdGVKY
G1/guSIvTuBcCHuckLrzJfEhibVWk0RFlEW3jHbYDvBpNIuGBQ46LPQuNX5feW64
OsnqGoo+2fdqavT/6UuFFOgDmEzoJPI=
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:15:15 2026 by rpki-client