
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/2ae97979-16d5-393c-a787-3ce400c70ade.roa
File: 2ae97979-16d5-393c-a787-3ce400c70ade.roa (raw, json)
Hash identifier: RPW9fM0Xa6kIwekU/ERObsWRI4MVilcJ5iaWIY9RxV0=
Subject key identifier: E8:25:5B:C0:76:E6:28:89:F0:24:EB:34:2C:34:00:94:9B:7B:A3:F4
Certificate issuer: /CN=143dcb45-9a31-4d19-a1e6-f07027b13219
Certificate serial: 010D0C9F4328584F4973A0FB2962FB7B9D719620
Authority key identifier: 1D:02:1B:AD:49:59:2B:A2:AD:2A:37:5D:4E:62:47:28:4A:33:C2:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/2ae97979-16d5-393c-a787-3ce400c70ade.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 32281
IP address blocks: 23.140.184.0/24 maxlen: 24
2602:fb22::/36 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/143dcb45-9a31-4d19-a1e6-f07027b13219.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/143dcb45-9a31-4d19-a1e6-f07027b13219.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:a0:fb:29:62:fb:7b:9d:71:96:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143dcb45-9a31-4d19-a1e6-f07027b13219
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=632c3e42-81d1-4f52-89b8-b18718774a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0b:c0:36:11:99:0a:a5:fc:69:67:ee:8a:09:
ca:70:75:5a:c1:43:5e:6d:5d:73:72:46:cf:de:cc:
df:b1:2a:83:cf:a3:4f:48:92:bb:d6:57:53:78:de:
6d:1c:a8:d5:ba:c9:6b:05:aa:93:7d:62:0f:64:96:
9c:f2:2b:5c:75:54:dc:66:25:99:8f:b2:fe:6c:21:
a8:51:56:44:0f:75:e1:df:be:f3:db:18:e1:5c:81:
fd:cb:fb:bd:e9:49:b5:b4:90:37:62:75:0b:76:b3:
13:e7:b5:ca:e8:fc:f5:02:84:d3:0f:01:82:a6:b0:
78:db:1c:9d:b1:21:2a:63:29:a8:48:b8:65:ad:04:
f6:38:65:3c:1e:bd:c9:7f:1c:20:32:a6:15:87:15:
0e:aa:53:55:18:66:4a:60:ec:5d:d3:b8:ab:21:a9:
96:c2:9d:44:3c:ac:20:5c:95:13:13:a9:04:6e:f8:
63:02:b3:bc:0b:0b:f0:3b:78:28:71:9a:61:b3:62:
4f:d2:60:55:21:31:fc:04:c1:75:ae:4f:c9:08:69:
e7:76:4b:8b:38:a5:09:0e:b1:cf:3c:97:e3:ea:d4:
54:d9:4a:84:bc:ba:8f:a4:6f:7a:63:ca:f7:fa:4b:
6a:85:a2:a9:d8:79:fd:11:b6:30:51:59:90:15:57:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:25:5B:C0:76:E6:28:89:F0:24:EB:34:2C:34:00:94:9B:7B:A3:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/2ae97979-16d5-393c-a787-3ce400c70ade.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/143dcb45-9a31-4d19-a1e6-f07027b13219.crl
X509v3 Authority Key Identifier:
keyid:1D:02:1B:AD:49:59:2B:A2:AD:2A:37:5D:4E:62:47:28:4A:33:C2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.184.0/24
IPv6:
2602:fb22::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:84:78:ea:11:55:4b:ed:92:a9:1d:42:f2:8f:29:21:92:dd:
30:8f:f0:e9:84:d2:a4:63:69:f2:fd:f1:72:e3:ac:4e:73:0b:
71:98:1a:02:8f:18:3a:32:a8:ae:08:dd:d9:69:ce:c2:31:ca:
62:c7:5e:f6:5b:58:a9:09:83:c4:38:53:9f:ae:fb:06:a2:3e:
c3:fc:fa:69:26:55:e0:f9:a8:5d:e1:bf:9f:52:c3:83:0c:7f:
52:5c:be:d6:37:4b:0b:9f:f2:bf:51:e9:e7:2d:ba:a7:95:bd:
24:40:07:f1:d7:0d:24:be:97:cc:b1:09:ed:3e:08:a5:15:00:
40:e3:25:c0:e0:61:7b:90:61:fc:0f:9b:4d:c2:46:51:63:45:
35:b6:a6:c9:48:13:34:31:cf:f1:4f:b3:c3:72:ac:fb:49:e5:
8f:9d:43:52:f0:b8:91:50:ea:bd:92:39:18:1c:21:0b:de:93:
d7:1b:55:7e:4a:28:bf:e0:3c:e1:09:ca:69:16:25:12:ef:0e:
80:35:44:2d:d7:93:f5:ef:e0:66:f1:1c:e6:97:6e:c0:50:ba:
ba:d9:8f:2c:13:b5:9a:fa:51:8d:7f:2a:fd:e7:72:c9:da:80:
f1:44:e7:ae:03:ca:34:57:c7:8c:ff:17:9a:70:c0:7c:e4:d5:
22:eb:c6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:08:37 2026 by rpki-client