
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/efb1c58c-b164-3fe2-818b-0232b3886304.roa
File: efb1c58c-b164-3fe2-818b-0232b3886304.roa (raw, json)
Hash identifier: aznJP0vyN5I5aZL+//AyHi7tlWR/Vzg5TarCdIYCznc=
Subject key identifier: 45:22:08:A5:F5:81:A5:44:85:A0:36:3D:AB:BB:C2:55:32:F6:B6:F3
Certificate issuer: /CN=946cb195-9b9a-4836-9152-b97e9e831144
Certificate serial: 010D0C9F4328584EC7A1CE3ABE8E95F71875B7C0
Authority key identifier: D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/efb1c58c-b164-3fe2-818b-0232b3886304.roa
Signing time: Sun 09 Aug 2026 13:00:12 +0000
ROA not before: Sun 09 Aug 2026 13:00:12 +0000
ROA not after: Sat 07 Nov 2026 14:00:12 +0000
asID: 16509
IP address blocks: 142.54.38.0/24 maxlen: 24
142.54.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c7:a1:ce:3a:be:8e:95:f7:18:75:b7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946cb195-9b9a-4836-9152-b97e9e831144
Validity
Not Before: Aug 9 13:00:12 2026 GMT
Not After : Nov 7 14:00:12 2026 GMT
Subject: CN=412c4fd8-42bf-44c9-919d-cded86b8c444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1a:84:48:70:67:bf:36:19:72:a6:94:ca:cc:
65:aa:59:7a:dd:ba:04:c4:91:69:a4:46:d8:ac:9d:
25:4f:f1:e5:73:ba:9f:0c:fc:c2:f3:68:7d:f3:0a:
17:cc:d6:86:41:61:44:31:9c:bf:34:77:8f:f7:50:
2c:0f:5d:45:fe:5d:be:ad:fc:6f:44:1c:ef:e4:de:
31:2a:76:e1:f3:3c:c1:00:1c:3f:b9:08:f7:94:24:
fc:d1:b6:4a:7c:f2:d7:b4:8b:62:40:6b:6b:b1:21:
ea:81:0f:ea:2c:32:1c:bb:43:4c:53:d1:ef:66:9f:
3a:8d:ae:52:ef:25:e7:81:d8:42:f6:74:db:1f:8d:
a0:6f:bc:c4:c3:26:64:b4:5f:5d:9d:e9:d0:56:63:
8a:14:c9:c0:f5:2b:ed:e2:1a:f3:a3:1b:3a:fa:15:
aa:72:50:57:5a:e5:53:4b:8d:32:f2:a3:73:60:84:
76:c1:0f:24:d4:a5:1f:2a:30:09:f8:3c:9b:43:7c:
cd:c5:c2:bd:c2:18:fb:c6:24:11:b7:8b:b4:1a:b0:
f6:bb:4a:e0:ab:b3:c7:07:7a:27:d6:14:aa:ee:71:
66:d6:53:e1:f3:69:75:84:4b:52:c7:c6:39:a3:8c:
74:cf:80:4b:1f:78:14:86:68:bf:a4:7a:ed:1a:0a:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:22:08:A5:F5:81:A5:44:85:A0:36:3D:AB:BB:C2:55:32:F6:B6:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/efb1c58c-b164-3fe2-818b-0232b3886304.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl
X509v3 Authority Key Identifier:
keyid:D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
sbgp-ipAddrBlock: critical
IPv4:
142.54.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:9f:48:e4:69:48:8c:83:d7:56:6a:4e:21:f3:70:3e:9d:a9:
d8:69:41:92:18:6d:a5:2a:7e:b5:d8:95:b4:4c:7a:a3:d3:c4:
65:f2:fd:65:20:bc:da:4a:ee:1f:b8:3c:aa:54:f8:f8:49:31:
b8:35:a5:a1:cf:fc:d6:5c:2f:c8:d2:ec:98:2f:89:6c:25:2d:
3c:40:c7:69:2c:d6:1b:4b:af:41:1d:3e:22:55:62:e9:80:0a:
70:4b:78:74:8c:00:69:c7:d7:cb:bc:a9:ca:4c:66:0f:94:37:
a7:d5:eb:d7:56:3f:5f:57:ac:11:c4:1e:4e:7c:32:5b:8a:03:
af:b0:51:76:0b:1e:e3:9a:83:1f:86:78:77:ba:ae:ce:0b:1d:
35:88:b7:bf:d5:97:11:b0:e0:f1:bf:34:d0:30:90:d1:17:fb:
c5:63:d8:be:21:1d:34:69:f4:43:a7:ec:2e:26:4e:58:b1:30:
23:38:d5:01:61:ce:08:17:b5:09:0c:2b:a4:63:c4:e6:3f:08:
a0:f0:87:27:d1:c8:99:21:ea:aa:07:73:f3:11:c7:e4:b2:af:
9c:b8:39:7c:fe:30:82:75:dc:8f:5c:fe:c7:8f:8e:4a:b1:d2:
20:85:29:5e:54:1b:b1:c9:b8:bf:f8:5e:4a:a1:3b:49:d9:e9:
d5:9b:09:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:40:11 2026 by rpki-client