
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8bf8d727-3347-3b0a-9636-1b506c39ee2e.roa
File: 8bf8d727-3347-3b0a-9636-1b506c39ee2e.roa (raw, json)
Hash identifier: ntt30W2daO3uJa0FdbzZNvAtEB/BrZZQV5YgIdy1B40=
Subject key identifier: BE:E5:38:D5:CE:FB:E4:E8:02:79:F8:4D:2D:E7:96:E4:0E:B8:7A:43
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584F4F08328F845391CBC4082C40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8bf8d727-3347-3b0a-9636-1b506c39ee2e.roa
Signing time: Sun 27 Sep 2026 01:00:12 +0000
ROA not before: Sun 27 Sep 2026 01:00:12 +0000
ROA not after: Sat 26 Dec 2026 02:00:12 +0000
asID: 15169
IP address blocks: 142.251.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4f:08:32:8f:84:53:91:cb:c4:08:2c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Sep 27 01:00:12 2026 GMT
Not After : Dec 26 02:00:12 2026 GMT
Subject: CN=3034fe2f-c8bd-446a-a155-dac84452cb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:23:31:98:d5:d8:73:ec:62:c9:7c:22:bb:b9:
f0:2b:ec:d8:bd:bc:fb:67:63:20:fa:6d:10:95:bd:
f3:dc:c2:19:49:9f:18:5d:33:5b:4c:50:43:ff:97:
23:a5:0e:28:21:f5:eb:a4:91:6b:62:d1:09:6d:cf:
da:e8:97:d2:f8:92:4b:5c:f2:ba:68:02:61:c2:7e:
ba:f4:e1:30:d9:cf:1a:23:3e:86:5a:60:52:3a:3b:
d3:89:b6:ca:a9:35:a0:44:28:c5:78:1a:1e:af:a5:
a8:c6:2c:3c:99:20:51:e0:7d:5e:7c:fc:ce:00:60:
65:11:a0:b3:a8:0b:0b:d7:75:ca:cd:7b:b5:0b:f0:
51:cc:51:03:87:f5:67:c0:a2:a1:1f:9e:60:32:89:
af:15:42:55:70:43:f9:83:49:3d:96:5d:01:c8:ed:
bf:81:30:c9:8c:f6:99:95:74:2a:af:54:05:59:f5:
8e:de:de:2d:22:c2:2a:ba:11:81:49:33:eb:cd:1d:
a3:82:26:8e:26:81:1a:a2:53:89:30:3f:1c:db:39:
6d:47:42:58:6a:23:54:db:21:d6:6f:b9:81:64:e9:
10:de:03:d5:75:28:54:5e:a4:15:90:c6:6d:ed:24:
d1:7b:ee:7c:c8:98:69:31:74:f1:23:0d:b6:f9:5d:
ac:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E5:38:D5:CE:FB:E4:E8:02:79:F8:4D:2D:E7:96:E4:0E:B8:7A:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8bf8d727-3347-3b0a-9636-1b506c39ee2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:0e:95:12:f9:7d:f4:6a:6f:43:f2:c9:05:38:a4:5e:53:7d:
ae:df:3d:c5:c6:94:66:fd:e6:98:73:92:9f:fa:69:bc:e0:8c:
98:a1:6a:90:bc:82:65:d7:76:bf:93:a9:b2:f5:d1:e7:92:f2:
f3:1a:76:9c:5e:b9:97:c0:70:6d:97:50:61:fe:ce:b1:d0:1b:
41:bd:51:dc:65:f8:1e:14:3a:26:c2:86:39:8f:3f:1b:d6:29:
0e:17:2d:9a:c1:58:28:ef:0d:55:a4:58:1a:b7:1f:ea:f5:21:
5e:95:b0:34:16:3a:43:b2:38:46:03:0d:92:02:e1:11:25:ba:
c3:dc:65:e9:0f:79:51:35:87:e4:a0:b7:ac:03:1b:ba:83:2a:
e2:ad:f5:3c:58:37:ff:48:3f:a6:68:16:35:d1:f9:45:0b:5b:
5d:a6:68:cf:fb:01:07:6e:63:39:c8:07:85:95:e1:2c:ee:60:
98:f8:df:01:15:67:7e:8e:d6:7a:32:7e:7f:4a:c6:3d:ca:b0:
33:a1:80:8f:c5:84:d9:3e:50:f5:50:c5:dc:64:29:88:21:f6:
3f:1a:61:b0:ac:2b:7e:82:f3:fc:16:57:a7:db:34:60:93:92:
37:2c:4e:5e:73:b6:53:d7:aa:2c:47:f2:e1:fd:38:5c:71:f1:
20:7b:bc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:39:44 2026 by rpki-client