
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200/34f77aaa-0ac6-3a1f-802a-38ac5d1e78e9.roa
File: 34f77aaa-0ac6-3a1f-802a-38ac5d1e78e9.roa (raw, json)
Hash identifier: gdz3V//pLAWUwNlcZgasfVWA0O44HucCWqW4gVpwlrM=
Subject key identifier: 17:9A:83:E8:0A:35:27:84:85:B2:F3:3B:F3:A3:B2:76:07:F0:70:62
Certificate issuer: /CN=6fb44189-bc91-4730-aaf1-75900750d200
Certificate serial: 010D0C9F4328584F7352DA39359E37B981B14340
Authority key identifier: 13:3E:68:B5:87:18:33:CC:E1:4D:61:6D:32:EC:7A:0E:40:D6:51:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200/34f77aaa-0ac6-3a1f-802a-38ac5d1e78e9.roa
Signing time: Sat 10 Oct 2026 01:00:13 +0000
ROA not before: Sat 10 Oct 2026 01:00:13 +0000
ROA not after: Fri 08 Jan 2027 02:00:13 +0000
asID: 401060
IP address blocks: 142.249.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200/6fb44189-bc91-4730-aaf1-75900750d200.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200/6fb44189-bc91-4730-aaf1-75900750d200.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 15 Oct 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:73:52:da:39:35:9e:37:b9:81:b1:43:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fb44189-bc91-4730-aaf1-75900750d200
Validity
Not Before: Oct 10 01:00:13 2026 GMT
Not After : Jan 8 02:00:13 2027 GMT
Subject: CN=4d5d8062-3f5b-4440-b52a-835df4f39a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:23:b7:d8:56:11:b2:de:ca:13:1a:96:06:
6e:02:a6:da:ea:6c:8d:03:8b:c2:d5:5d:62:82:4c:
52:7b:6b:79:f9:95:b6:94:f3:12:0e:ee:54:14:91:
83:d6:06:89:50:3d:94:b3:22:10:d1:68:62:9a:97:
34:a7:4e:60:3e:6a:76:ea:3f:5f:5e:98:fb:29:6c:
27:07:ba:f9:cb:79:de:2e:a3:df:47:70:63:c0:14:
e0:3d:b6:0b:d8:dc:d2:2b:3b:18:bb:92:95:74:ce:
4e:72:1a:73:00:38:60:49:1d:96:67:b4:21:43:d1:
e1:3e:ab:19:ba:26:ad:d1:dc:53:67:ad:0b:c3:4d:
97:d7:f2:9d:7a:dc:8e:5a:34:45:a3:93:8b:3d:1d:
4b:85:a7:c7:6e:04:c0:8e:57:28:58:a7:1c:58:57:
2b:79:ca:03:a5:61:36:7d:c4:56:b8:90:71:33:d1:
66:80:84:a0:a7:8a:7a:d6:04:f4:65:e4:1c:56:97:
4e:da:77:14:29:6b:fa:4c:d9:9b:d8:f8:4f:64:84:
29:9c:1a:47:66:cd:cd:5c:3f:75:9d:d1:2e:e3:86:
25:d7:a9:f6:e2:24:57:7b:3e:ef:5c:d3:5d:14:89:
a8:a3:64:09:0d:64:69:43:29:75:5f:8b:54:73:b7:
46:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9A:83:E8:0A:35:27:84:85:B2:F3:3B:F3:A3:B2:76:07:F0:70:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200/34f77aaa-0ac6-3a1f-802a-38ac5d1e78e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200/6fb44189-bc91-4730-aaf1-75900750d200.crl
X509v3 Authority Key Identifier:
keyid:13:3E:68:B5:87:18:33:CC:E1:4D:61:6D:32:EC:7A:0E:40:D6:51:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200.cer
sbgp-ipAddrBlock: critical
IPv4:
142.249.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:5a:92:db:96:9c:06:f9:eb:4d:0d:ae:10:92:39:b1:53:75:
a7:b7:e2:bc:d4:2f:95:4e:94:a3:89:1d:36:a6:fa:92:68:9e:
41:11:be:bd:f9:23:0f:2d:70:bc:cd:ec:40:e2:dc:a4:62:14:
51:12:6c:59:c2:25:46:8f:83:16:1b:b9:d0:83:8d:c5:89:3b:
32:33:d3:b2:16:42:c2:1c:16:f7:ef:21:f4:9b:e1:3e:01:47:
3f:12:85:b6:eb:04:83:94:d6:2d:28:e3:2c:1f:22:02:5d:7f:
9e:3b:62:49:3d:37:db:11:d0:2f:a4:51:6c:70:d8:69:ac:1a:
3b:a6:b5:ec:9a:2b:50:fd:de:e0:19:2d:ab:11:88:66:d5:86:
1f:14:b6:1c:84:5a:da:4e:1f:9a:98:c8:d8:27:cb:fe:53:0c:
be:c2:94:c4:48:f4:0e:0a:69:68:4e:de:8a:e1:8e:51:b8:7f:
98:cf:4d:1d:44:b6:ae:9f:ab:b8:cc:01:52:54:3a:92:7a:14:
35:90:73:64:e5:55:27:aa:36:c1:e8:60:b9:45:ca:4d:3e:da:
e0:b9:4c:38:0a:9b:e8:0d:9d:67:48:d7:32:1f:ee:c3:6d:86:
71:39:d8:65:b7:64:c0:41:c7:26:5e:77:a1:ba:60:43:c9:52:
7f:c9:00:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:29:13 2026 by rpki-client