
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/20cc90df-180a-3a10-818a-f6d680929854.roa
File: 20cc90df-180a-3a10-818a-f6d680929854.roa (raw, json)
Hash identifier: 5durH85yKf9LOI45c5cMZGBdcQ1KF6YivXdHQ4l8mTw=
Subject key identifier: 00:71:FA:D9:04:EF:24:9A:FA:A2:DC:62:9E:3B:73:C9:61:95:D9:20
Certificate issuer: /CN=edca2973-b815-4276-ae56-405cc9e280b5
Certificate serial: 010D0C9F4328584CAA271C4C5951AD227107B400
Authority key identifier: F0:81:36:B0:D5:E5:62:6E:3C:57:D3:5B:4F:FB:39:6D:25:0D:23:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/20cc90df-180a-3a10-818a-f6d680929854.roa
Signing time: Tue 27 Jan 2026 14:00:36 +0000
ROA not before: Tue 27 Jan 2026 14:00:36 +0000
ROA not after: Mon 27 Apr 2026 13:00:36 +0000
asID: 13727
IP address blocks: 142.147.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/edca2973-b815-4276-ae56-405cc9e280b5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/edca2973-b815-4276-ae56-405cc9e280b5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:aa:27:1c:4c:59:51:ad:22:71:07:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edca2973-b815-4276-ae56-405cc9e280b5
Validity
Not Before: Jan 27 14:00:36 2026 GMT
Not After : Apr 27 13:00:36 2026 GMT
Subject: CN=563ccf6a-f1c4-4dab-ac1b-51088c3f94e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:37:65:24:67:17:93:73:36:a5:bb:42:50:d5:
c0:c9:87:0a:d7:b8:ba:46:44:a7:59:50:77:25:8e:
0e:85:3f:fa:fb:fd:fb:c3:65:15:d4:37:d0:18:61:
33:36:d4:0b:a1:94:ce:31:22:9c:44:10:ec:8b:d5:
aa:2f:a4:12:6a:5e:7f:55:c2:41:6e:6b:e4:4c:aa:
a9:dc:e1:7a:7e:33:38:c1:72:fd:61:e0:7a:d8:0c:
6c:8e:dd:56:33:02:e6:b2:ed:39:f2:ae:9a:4f:dc:
12:a0:16:c7:6c:9f:3e:ee:c4:b3:24:38:37:16:b9:
95:81:dc:50:db:db:81:39:08:bf:9d:76:ca:0f:97:
09:57:13:4f:48:4c:80:32:89:13:77:cd:b6:24:0c:
99:0e:5e:2e:12:76:34:0b:56:81:bf:5f:62:65:5a:
f0:be:0b:a8:ef:5a:05:16:5e:a1:a6:cc:ea:26:7c:
eb:02:c2:2c:cb:d5:b0:6c:d9:cd:bd:92:f9:82:eb:
29:b0:d7:ca:3e:05:d1:34:36:b6:f0:70:38:59:a7:
81:4e:fd:29:ef:1f:bc:04:34:5b:42:e0:d8:31:9a:
bd:cc:ce:25:74:d6:f7:f3:4a:1a:41:ad:ad:03:47:
02:a9:1a:e9:a5:8b:88:c0:8f:7b:e7:44:c7:95:8d:
64:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:71:FA:D9:04:EF:24:9A:FA:A2:DC:62:9E:3B:73:C9:61:95:D9:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/20cc90df-180a-3a10-818a-f6d680929854.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/edca2973-b815-4276-ae56-405cc9e280b5.crl
X509v3 Authority Key Identifier:
keyid:F0:81:36:B0:D5:E5:62:6E:3C:57:D3:5B:4F:FB:39:6D:25:0D:23:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer
sbgp-ipAddrBlock: critical
IPv4:
142.147.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:5d:df:71:24:c9:c7:68:70:ce:84:a8:55:89:5d:82:a8:7b:
a0:fd:4c:c6:22:24:02:66:2e:bf:38:f9:06:85:7e:f1:d6:f7:
12:bb:70:5d:6a:d3:bf:24:02:6e:b4:92:83:37:89:eb:d2:9b:
06:95:71:0a:23:b4:77:40:88:9a:ca:14:18:88:2b:53:cd:81:
e8:7b:38:98:08:af:8e:3c:0d:fc:00:40:b7:5f:e8:e7:57:f0:
b7:a6:3e:5f:7b:cb:69:29:a7:bf:ee:48:84:c1:f5:d8:2e:86:
e5:de:d6:48:6c:39:96:e6:de:3d:bb:13:db:7a:1b:1b:18:aa:
56:27:f6:76:c9:4c:6c:81:b8:60:1f:9b:6c:da:b0:a4:16:c0:
a2:e8:3e:01:09:3e:cd:d3:cb:97:a1:d0:da:db:c5:b0:37:dd:
9d:6d:be:b3:44:15:dd:bd:72:b7:59:ec:d4:c9:0e:ce:77:cb:
22:08:24:90:e9:e0:cf:ec:a1:fc:97:5a:32:b7:31:3c:57:52:
49:87:e7:47:f2:a6:bb:96:5b:12:d1:e6:a2:1c:90:36:3b:c8:
47:93:d2:63:e3:fd:ef:22:96:96:dc:91:a1:65:0f:72:b4:9b:
1e:c2:78:97:23:28:99:c9:34:e3:62:0c:9b:5d:32:98:be:af:
1b:ea:ff:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJxxMWVGtInEHtAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWRjYTI5NzMtYjgxNS00Mjc2LWFlNTYtNDA1Y2M5ZTI4
MGI1MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk
NTYzY2NmNmEtZjFjNC00ZGFiLWFjMWItNTEwODhjM2Y5NGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDdlJGcXk3M2pbtCUNXAyYcK17i6RkSnWVB3
JY4OhT/6+/37w2UV1DfQGGEzNtQLoZTOMSKcRBDsi9WqL6QSal5/VcJBbmvkTKqp
3OF6fjM4wXL9YeB62Axsjt1WMwLmsu058q6aT9wSoBbHbJ8+7sSzJDg3FrmVgdxQ
29uBOQi/nXbKD5cJVxNPSEyAMokTd822JAyZDl4uEnY0C1aBv19iZVrwvguo71oF
Fl6hpszqJnzrAsIsy9WwbNnNvZL5guspsNfKPgXRNDa28HA4WaeBTv0p7x+8BDRb
QuDYMZq9zM4ldNb380oaQa2tA0cCqRrppYuIwI9750THlY1kAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFABx+tkE7ySa+qLcYp47c8lhldkgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZGNh
Mjk3My1iODE1LTQyNzYtYWU1Ni00MDVjYzllMjgwYjUvMjBjYzkwZGYtMTgwYS0z
YTEwLTgxOGEtZjZkNjgwOTI5ODU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWRjYTI5NzMtYjgxNS00Mjc2LWFl
NTYtNDA1Y2M5ZTI4MGI1L2VkY2EyOTczLWI4MTUtNDI3Ni1hZTU2LTQwNWNjOWUy
ODBiNS5jcmwwHwYDVR0jBBgwFoAU8IE2sNXlYm48V9NbT/s5bSUNIxowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lZGNhMjk3My1iODE1LTQyNzYtYWU1Ni00MDVj
YzllMjgwYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpNDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChd33EkycdocM6EqFWJXYKoe6D9TMYiJAJmLr84+QaFfvHW9xK7cF1q
078kAm60koM3ievSmwaVcQojtHdAiJrKFBiIK1PNgeh7OJgIr448DfwAQLdf6OdX
8LemPl97y2kpp7/uSITB9dguhuXe1khsOZbm3j27E9t6GxsYqlYn9nbJTGyBuGAf
m2zasKQWwKLoPgEJPs3Ty5eh0NrbxbA33Z1tvrNEFd29crdZ7NTJDs53yyIIJJDp
4M/sofyXWjK3MTxXUkmH50fypruWWxLR5qIckDY7yEeT0mPj/e8ilpbckaFlD3K0
mx7CeJcjKJnJNONiDJtdMpi+rxvq/zo=
-----END CERTIFICATE-----
Generated at Fri Feb 27 07:34:32 2026 by rpki-client