
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2e491d2f-ec62-3e9c-8a49-18d41e596ca3.roa
File: 2e491d2f-ec62-3e9c-8a49-18d41e596ca3.roa (raw, json)
Hash identifier: bJ+r8+3VVz5kKKAb5DEjeavos23MEQ9WG9Y6k7ugETM=
Subject key identifier: 01:67:A1:4A:CB:07:32:B8:52:FF:DC:68:12:80:12:10:7D:C8:BA:EB
Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial: 010D0C9F4328584F093CEBDDF22EADEAD0FFF920
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2e491d2f-ec62-3e9c-8a49-18d41e596ca3.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 398156
IP address blocks: 168.220.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3c:eb:dd:f2:2e:ad:ea:d0:ff:f9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=18012d26-48df-45e4-9495-6be80832b48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:88:3e:96:50:4c:0b:10:f0:f0:8f:56:9d:64:
48:94:89:60:6d:3e:ec:ce:9b:3c:31:54:0d:b7:62:
37:8d:e3:c0:10:00:ba:a0:ee:b5:13:b2:99:66:0d:
ee:11:b8:ab:ce:7c:f7:d9:58:46:d3:98:be:a1:d5:
7e:4f:ed:ce:d0:74:99:e2:cd:c9:cf:72:73:0c:9a:
c4:fa:a9:f5:72:b1:4f:88:32:a6:b5:c2:be:46:5a:
6f:ce:ce:20:f2:ac:72:fc:f0:8d:3b:10:d7:a4:e1:
1b:40:34:9b:6a:4d:0d:da:87:45:d1:49:91:b2:70:
8c:c9:63:ab:a2:79:4c:3f:45:b2:cb:06:6d:e6:4e:
c3:af:a4:c0:0b:c6:3b:e2:e2:99:b6:ae:24:c7:d2:
87:7c:4f:4f:0f:68:f6:2d:8b:c0:b5:ee:23:8a:a4:
77:db:bd:a2:65:65:56:dc:89:8c:9c:d5:6e:e0:58:
27:16:15:ac:87:d1:39:2d:d6:de:67:8c:65:23:86:
42:af:53:73:18:b8:f0:2c:6b:1d:8f:ee:35:86:9e:
0b:78:c6:20:fb:13:e8:6c:c5:40:a4:e0:73:c0:83:
d8:55:24:f0:9a:86:f0:64:cc:d7:29:0f:91:18:4e:
ca:6b:68:2e:e7:e7:e6:b1:3b:14:48:da:a6:dd:10:
13:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:67:A1:4A:CB:07:32:B8:52:FF:DC:68:12:80:12:10:7D:C8:BA:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2e491d2f-ec62-3e9c-8a49-18d41e596ca3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
X509v3 Authority Key Identifier:
keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
sbgp-ipAddrBlock: critical
IPv4:
168.220.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:00:a3:02:5f:40:c2:b0:78:3b:45:b4:8d:16:34:fe:e6:b5:
72:a1:b0:30:c6:e0:c9:3e:a1:15:6a:8c:f8:79:df:ac:cc:a2:
95:e2:4b:4b:73:f3:5b:fe:f2:b8:e6:b5:6e:d3:73:df:c3:db:
62:78:8c:7e:3b:0c:98:c0:d1:d7:e4:4c:db:e1:33:ef:ce:22:
50:19:03:26:5f:49:bc:6c:09:83:0e:79:fb:a0:53:83:e3:9e:
91:38:42:9b:52:54:36:a0:cf:6f:e7:9e:72:d4:7a:88:18:83:
20:a8:ac:77:1a:93:7f:4d:a5:93:92:0b:04:0a:f2:0e:b3:66:
1c:d1:8c:5b:78:f4:e4:3e:f3:78:00:1f:7b:e2:b1:3f:1b:66:
d1:35:56:46:17:13:e8:5f:35:c2:41:f2:78:d4:79:c0:72:92:
ac:36:da:95:27:cc:b8:c4:7b:03:30:6f:e4:77:98:e8:5e:22:
f1:aa:d4:5f:d8:4a:96:1b:4c:a2:f2:5d:ab:8c:88:55:59:53:
b2:2d:39:36:4d:ee:e6:63:76:35:02:f8:ce:7c:d3:92:c2:cb:
b4:ad:e5:cc:a5:96:30:89:67:bc:15:f9:6c:27:23:bb:eb:4b:
25:e4:e6:2e:b7:86:44:39:bb:75:a2:b3:09:a1:2d:15:2b:77:
9f:94:75:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:18:35 2026 by rpki-client