
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/25344a92-d984-3f4f-9efb-16ae44e8eac7.roa
File: 25344a92-d984-3f4f-9efb-16ae44e8eac7.roa (raw, json)
Hash identifier: ru/YpvzrBusFtXh3VbpFAKyiUoVLqWpOGV1Kmjcwu4k=
Subject key identifier: 49:6F:37:57:81:C2:42:03:41:7F:7F:A2:63:94:90:06:19:A7:98:78
Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial: 010D0C9F4328584F093CEBF4BE20E95F81EE0D00
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/25344a92-d984-3f4f-9efb-16ae44e8eac7.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 398156
IP address blocks: 168.220.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3c:eb:f4:be:20:e9:5f:81:ee:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=ac2e1fe7-161c-4456-b207-9b278528edf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:e0:d9:42:f9:b9:a6:2e:c1:0f:b7:be:e2:
96:87:2b:bd:6f:18:df:da:ef:d0:a5:fa:73:db:5a:
37:48:56:3a:27:fd:c7:5e:31:d0:97:81:51:fa:fa:
57:94:92:6e:7b:af:f0:ae:c8:a3:b8:f7:86:7c:89:
47:fc:eb:85:78:2c:a3:7a:64:76:6f:95:97:bd:ad:
e6:24:0f:f2:bb:79:f9:e6:d5:bd:c6:00:9c:ff:b5:
01:51:8c:3e:7d:57:cf:20:5b:ae:67:3c:ab:99:f8:
7f:0a:4f:ae:d3:7d:a9:dd:ae:3b:f0:62:c8:d9:66:
d8:9d:97:cc:d2:ea:36:16:4d:db:32:ff:90:17:1e:
58:c3:d2:4d:d0:e3:ce:df:42:51:98:d0:8a:27:04:
92:79:56:24:ba:40:fe:95:2b:13:ba:7f:44:11:12:
c7:a2:c4:c3:b4:f0:ff:6f:da:57:1e:e1:2d:fd:05:
ea:29:ff:70:37:e4:e2:b1:cc:b1:4f:b8:66:a3:bc:
39:4e:69:40:70:ee:97:cd:83:32:04:43:ab:53:74:
e9:f1:45:2a:ce:04:94:b4:9e:c6:8b:6d:44:38:5e:
6e:df:ad:cc:5c:b9:dc:cd:72:91:19:9e:b7:b7:2f:
cc:d3:a2:69:ab:d1:34:c8:2f:1f:2b:44:ed:56:c3:
98:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6F:37:57:81:C2:42:03:41:7F:7F:A2:63:94:90:06:19:A7:98:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/25344a92-d984-3f4f-9efb-16ae44e8eac7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
X509v3 Authority Key Identifier:
keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
sbgp-ipAddrBlock: critical
IPv4:
168.220.214.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:17:7d:36:9b:f4:13:9c:c0:84:e3:4c:81:1a:46:9a:bc:2b:
74:76:c4:d4:df:d9:14:4c:02:26:34:5a:2a:d9:28:50:2e:67:
61:c0:bf:0a:e4:a1:f4:05:84:5a:1f:db:8c:1a:3b:be:2c:05:
11:fa:7b:52:4f:d8:82:fd:4a:14:4d:29:03:41:dc:f2:6f:23:
4b:14:67:6e:e6:0e:56:87:a8:f6:b9:b9:6e:32:3c:48:fe:f3:
68:6f:8c:c3:c2:c6:b4:ec:60:15:a0:5c:b3:e3:dc:4d:90:9b:
f4:06:a6:3a:d3:79:16:71:3a:ef:00:49:d5:41:2c:22:18:b2:
28:38:8c:4b:31:41:d2:3a:f0:ef:e7:4f:11:fb:44:10:f0:c9:
fa:dd:f6:ea:3c:ce:ea:50:df:3e:05:44:c9:f4:17:55:b5:fa:
72:61:f6:e6:e5:d6:81:d7:a3:c6:e4:32:96:31:d2:50:a7:4b:
04:2e:2d:8b:a2:9d:2f:11:52:cf:ca:c5:62:79:4f:b4:8a:ee:
1e:54:a6:30:52:b2:40:40:33:37:b6:60:4c:8c:d8:d9:55:37:
03:7b:45:d7:2d:21:bc:20:4d:c8:98:0a:80:24:34:49:ed:8b:
91:47:d4:8a:6c:42:22:37:05:c4:19:52:be:b2:0d:30:52:35:
1a:6d:55:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:18:57 2026 by rpki-client