
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/673938d8-87b0-3c69-beed-a23cc3c631ae.roa
File: 673938d8-87b0-3c69-beed-a23cc3c631ae.roa (raw, json)
Hash identifier: X0zO81OkA96uSO1LhZkDgnwezIw/augs4w4VFnck0GU=
Subject key identifier: DD:1E:F1:92:3A:56:A0:66:ED:32:AC:F2:DB:BB:88:22:49:6E:A6:1C
Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial: 010D0C9F4328584FAB28A9933FDFFB315EA58600
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/673938d8-87b0-3c69-beed-a23cc3c631ae.roa
Signing time: Fri 30 Oct 2026 01:00:13 +0000
ROA not before: Fri 30 Oct 2026 01:00:13 +0000
ROA not after: Thu 28 Jan 2027 02:00:13 +0000
asID: 398156
IP address blocks: 158.120.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:ab:28:a9:93:3f:df:fb:31:5e:a5:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Validity
Not Before: Oct 30 01:00:13 2026 GMT
Not After : Jan 28 02:00:13 2027 GMT
Subject: CN=db21d3e8-5910-4c69-b965-12b9d60314a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1b:69:d3:2f:0c:4e:eb:7d:ea:e2:4c:39:04:
87:ef:7a:cc:74:b0:70:72:b5:48:7e:5c:4b:23:e2:
7b:c3:6b:73:68:f4:89:48:dd:99:6e:f2:18:fb:f3:
51:be:f6:07:c8:b1:03:17:f6:ed:e6:ac:6a:53:b1:
4c:7c:82:c8:8a:ef:ec:1c:65:d4:8f:aa:65:3b:6e:
ee:df:9a:4f:56:c0:90:d5:c9:52:07:3b:e9:35:04:
d1:07:f6:04:a5:27:98:78:c1:8a:ac:c7:6c:31:b7:
83:70:bd:62:f2:ec:8c:48:a1:6e:87:b2:0f:ce:bc:
9a:9d:ce:77:1a:5f:a1:55:96:37:ee:1f:cb:b3:e4:
04:44:d7:0d:1d:a1:5a:3d:a4:f6:47:36:8a:91:a0:
d2:58:bd:ac:2b:99:d6:17:06:f8:7f:ef:b5:04:c7:
8a:49:61:4d:4f:b3:c4:14:2a:cf:f5:84:24:8e:c0:
65:83:f2:38:24:c4:ce:2b:c0:47:86:ec:0d:a4:95:
db:33:94:5f:7f:01:09:70:2f:48:32:97:df:a9:bc:
e7:12:59:0a:80:b6:73:80:31:a8:73:f0:1b:a3:75:
6f:9e:9a:41:85:57:4b:32:f0:60:96:83:ec:ad:1c:
0e:f6:09:15:47:3a:3c:48:9a:ae:9f:0f:62:45:1e:
da:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1E:F1:92:3A:56:A0:66:ED:32:AC:F2:DB:BB:88:22:49:6E:A6:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/673938d8-87b0-3c69-beed-a23cc3c631ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
X509v3 Authority Key Identifier:
keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
sbgp-ipAddrBlock: critical
IPv4:
158.120.214.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:25:75:2f:80:c2:d0:6a:7b:b9:26:e3:98:d9:63:d3:0c:f2:
73:3b:e0:66:6f:d7:03:7d:22:24:a2:ee:a0:54:0e:3c:d8:01:
b8:61:b1:bc:a4:fe:fd:c0:f3:ce:8c:76:4e:f2:28:9e:0f:db:
54:c1:a6:b2:2f:88:70:86:bb:df:d9:15:44:a7:e6:4c:67:42:
7b:17:7e:d5:57:61:72:59:aa:8a:30:82:55:be:b4:30:f6:31:
09:b2:73:3b:3d:55:ad:1a:69:b5:3b:02:e6:7a:6e:63:fd:79:
92:11:ab:fd:fe:60:5f:2f:2f:0a:c6:e2:88:ef:19:bd:41:28:
3d:a7:8f:ec:19:9e:cc:9f:81:9a:bd:94:98:d5:8b:9d:44:be:
09:b5:01:57:c3:fb:e3:db:d8:98:de:6f:f4:ce:60:d8:ee:57:
ac:a4:7f:9e:9b:c7:d2:98:b6:9c:51:4e:fe:78:33:08:98:bd:
65:36:9b:24:bb:2e:2e:ea:d1:bb:74:47:fb:71:0e:6e:2d:98:
19:4f:bb:9b:32:28:cf:16:14:9a:92:f8:07:70:11:e3:a0:68:
ce:32:92:20:fc:32:84:5d:b2:d4:6e:a4:51:90:49:99:cf:d4:
ba:c4:92:61:3b:d6:cf:d3:0b:dc:66:be:2a:7c:30:c8:22:fa:
a2:d7:31:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 13:00:18 2026 by rpki-client