
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e4af511-b95c-38d3-9f5a-45b94e656305.roa
File: 1e4af511-b95c-38d3-9f5a-45b94e656305.roa (raw, json)
Hash identifier: elPz3cEI99ekYQRhve0xrPeCJiDmgtlQFk3Tp85zag0=
Subject key identifier: 2A:79:62:D2:C8:2E:26:D1:F2:FB:19:1D:CB:0D:1A:9E:20:2F:CA:BD
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584D24E0EB036BBA10B636F14770
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e4af511-b95c-38d3-9f5a-45b94e656305.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 15169
IP address blocks: 142.250.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 19 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:eb:03:6b:ba:10:b6:36:f1:47:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=167a7bfe-2a9f-4907-b411-1e126bf22bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:3f:d5:e9:d9:76:ee:9f:95:8e:62:19:40:
09:5f:09:90:80:51:38:50:f9:95:4a:17:12:b6:dc:
ee:52:54:26:37:e6:2a:f8:20:a5:58:8c:03:61:f0:
51:4e:32:1c:09:63:b4:c0:a1:d0:d2:f1:b7:1a:7e:
af:0f:85:81:e3:14:32:41:2b:99:02:1e:ab:49:28:
07:d4:79:78:92:a1:d1:9b:1f:06:b6:d3:73:31:4f:
65:90:91:f5:ec:a6:69:4b:f7:44:4e:c5:bd:9a:da:
f9:d1:04:24:34:be:99:b2:c2:13:87:3e:26:a6:f2:
93:66:99:45:03:a8:c7:50:34:f0:2f:a2:be:de:28:
2b:41:a7:90:81:cf:de:1a:71:48:50:8e:28:25:5c:
91:0c:b6:2b:db:2a:d1:e7:59:d1:3f:b6:46:2d:39:
e7:18:9b:b1:62:0a:ce:27:e7:5b:c0:f9:0d:95:2a:
26:0c:ff:7f:0e:4d:97:77:83:6a:56:86:44:10:c1:
a4:bc:a4:25:8b:e9:69:3d:8d:36:a9:0b:4a:a7:78:
fe:eb:d4:f4:69:3c:f1:09:8b:53:d8:e9:88:1a:65:
ac:ed:1c:e1:56:1a:b5:5b:ad:3e:ad:54:20:68:b2:
a5:8b:0b:8b:fd:3b:86:d5:32:a1:9d:87:2a:8e:bb:
8a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:79:62:D2:C8:2E:26:D1:F2:FB:19:1D:CB:0D:1A:9E:20:2F:CA:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e4af511-b95c-38d3-9f5a-45b94e656305.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:70:db:0a:9d:22:ef:e3:6b:de:96:e9:93:91:68:55:ea:6c:
9b:6d:65:da:08:24:d2:14:0d:4a:ac:e3:27:1b:a5:a7:c3:e8:
a0:96:50:bb:ca:cc:04:20:56:91:4e:ab:69:be:83:60:2b:b8:
65:cf:2a:47:69:7f:ac:8d:95:a5:98:42:d9:22:1c:4c:53:3f:
ee:c4:3c:25:c6:a1:d3:a7:c2:37:a3:d6:1d:db:9b:95:e2:6f:
3d:f5:84:47:20:07:18:41:77:de:b4:d6:48:c5:66:d4:8d:09:
34:6f:b3:51:d5:a2:b3:f1:0c:20:9c:a7:50:6e:e5:f3:16:62:
66:f4:e3:1f:11:b4:ec:de:54:7b:bf:66:83:90:92:ac:15:0d:
21:63:fe:73:3e:f3:d5:9e:ff:d2:e6:ef:f2:e4:0e:d3:b6:dc:
a8:6d:20:80:93:6c:c1:77:78:20:c6:a0:e5:3e:61:27:1b:ca:
88:69:e2:3b:5a:09:04:ed:b7:79:0a:f6:8d:ea:4f:73:f5:db:
d7:26:37:4e:51:10:cb:f7:a6:40:af:93:d2:da:6f:0b:12:f0:
72:05:ed:94:3c:e2:c8:d1:8b:a5:53:20:66:b8:84:f7:5f:d1:
34:b4:c2:13:89:35:3a:76:29:ae:3a:8d:43:db:2e:81:f3:5b:
83:a9:ba:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:33:39 2026 by rpki-client