
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a7efd87b-e805-3566-9129-053eadf2ca59.roa
File: a7efd87b-e805-3566-9129-053eadf2ca59.roa (raw, json)
Hash identifier: Zc/milauG33DJ0BHaqz5aw14RLZ1qTxydpPFNuIy8jM=
Subject key identifier: 39:09:3A:32:B2:33:82:F4:29:DC:AD:4E:B3:84:C9:54:48:62:E0:07
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F4328584EE7BCBAE31B29729F1AF5FE80
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a7efd87b-e805-3566-9129-053eadf2ca59.roa
Signing time: Fri 21 Aug 2026 01:00:12 +0000
ROA not before: Fri 21 Aug 2026 01:00:12 +0000
ROA not after: Thu 19 Nov 2026 02:00:12 +0000
asID: 21949
IP address blocks: 216.120.194.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e7:bc:ba:e3:1b:29:72:9f:1a:f5:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Aug 21 01:00:12 2026 GMT
Not After : Nov 19 02:00:12 2026 GMT
Subject: CN=e4a1bcd3-76f8-4782-8a1f-7dbcbc4d5b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:75:a8:cc:1f:25:2f:fe:70:82:0d:b6:d6:
83:d9:c6:9b:12:68:cd:5c:2d:8f:d4:98:e6:17:0f:
5b:06:10:c3:14:6d:36:2d:4c:60:31:c3:77:8a:cf:
84:ba:07:d4:e5:fc:f4:b7:0b:12:b7:ec:3c:2d:14:
45:fe:7a:bf:b7:0f:b9:30:ef:4f:78:5a:fa:99:0d:
d9:c5:21:85:da:bd:9d:d5:02:ad:c5:60:20:73:83:
b4:ec:6e:c8:fd:16:4d:89:66:d4:0e:91:14:cd:8b:
64:0c:01:3c:28:96:4a:c1:ac:f6:58:01:6c:d6:12:
9c:3c:3d:d3:2c:c3:ba:ee:e6:00:8a:cb:79:fb:57:
11:5d:f8:ce:37:7d:a0:c5:dd:71:61:ef:8b:45:e9:
33:e5:8d:cc:c9:47:f5:37:91:27:25:ee:ad:22:e1:
96:2b:08:b7:f3:7f:61:c9:80:e6:b2:bf:20:eb:83:
f1:38:51:06:71:f9:da:b9:f1:13:35:fa:70:18:77:
39:09:e7:93:04:fb:a8:39:e3:ee:1d:71:d7:74:b6:
c6:72:dc:7c:80:c6:7b:e8:f7:d5:f0:ea:df:4f:82:
f3:37:f2:44:18:7e:d9:47:fa:8f:5b:a6:ce:4f:6b:
b5:47:7c:af:a2:6a:74:6b:c3:c0:74:2a:63:79:c7:
85:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:09:3A:32:B2:33:82:F4:29:DC:AD:4E:B3:84:C9:54:48:62:E0:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a7efd87b-e805-3566-9129-053eadf2ca59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
216.120.194.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:53:23:57:5c:f3:52:98:b7:76:5b:f0:bd:69:a5:5d:b5:92:
5f:51:26:8f:83:70:b1:91:29:15:4e:80:c7:6f:f6:63:6f:3c:
06:cc:29:f0:77:94:3e:c6:eb:63:9f:02:39:ad:56:c7:93:77:
bd:51:d7:d9:3d:61:ed:2c:3a:2b:b7:66:ff:af:df:01:66:cb:
b4:38:e6:a3:8b:b0:50:be:33:11:3b:20:02:14:51:3b:d1:0f:
e2:62:9e:d0:ff:3a:a6:81:a8:35:81:08:e0:ce:9b:56:cf:5b:
02:9f:99:18:7f:47:3a:32:0f:d0:1a:3a:9b:70:9c:21:ca:5a:
50:d2:26:e5:f1:65:07:a3:c2:71:00:99:14:ac:a7:e4:34:28:
26:46:80:57:e0:8c:d8:7c:7c:0d:c1:a4:27:9d:d3:79:a8:7f:
7d:6d:b2:4d:8e:32:84:d9:50:43:4f:f4:17:0d:34:f9:1b:19:
fe:0f:1c:76:14:0e:13:75:6a:6b:67:9e:37:60:a9:05:16:b3:
a6:d5:f4:bc:8f:d3:68:39:d0:3b:c2:03:1c:54:68:17:cd:7a:
a1:41:6e:41:91:56:83:77:f6:e2:0f:1a:36:02:6d:ef:e5:b0:
bf:f5:00:68:6f:af:96:0c:3c:8d:ff:db:0f:75:9f:b9:9f:70:
41:c6:af:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:13:22 2026 by rpki-client