
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/68c230d0-a323-356a-a12c-934c81d3da7a.roa
File: 68c230d0-a323-356a-a12c-934c81d3da7a.roa (raw, json)
Hash identifier: ICGnl1rTseFEWWE9OexKs2mh+JqGh+4yiu1ZQQTBw0Q=
Subject key identifier: F1:F6:B3:0F:93:C2:1D:4A:22:52:E9:9D:8B:22:27:24:55:46:08:F1
Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial: 010D0C9F4328584EB8473B81234C4F902B6EA140
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/68c230d0-a323-356a-a12c-934c81d3da7a.roa
Signing time: Tue 04 Aug 2026 01:00:12 +0000
ROA not before: Tue 04 Aug 2026 01:00:12 +0000
ROA not after: Mon 02 Nov 2026 02:00:12 +0000
asID: 398156
IP address blocks: 158.120.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b8:47:3b:81:23:4c:4f:90:2b:6e:a1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Validity
Not Before: Aug 4 01:00:12 2026 GMT
Not After : Nov 2 02:00:12 2026 GMT
Subject: CN=efe14d7f-9103-486a-9a00-8c105b12ec3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:56:8f:d9:2f:84:51:7b:c9:6e:01:fd:7b:fb:
55:01:cc:c7:9f:67:87:80:bb:51:c9:a2:96:1f:5e:
bb:08:98:dd:45:30:60:12:27:00:71:25:74:35:82:
c1:5a:dd:ba:b5:bd:ef:cb:53:f9:39:ec:53:85:5c:
27:7e:fe:dd:c1:89:02:0f:fc:fe:a8:07:be:b1:f2:
65:e8:ce:6b:9b:c4:ec:57:94:8d:6f:a3:a2:f2:ae:
e2:96:be:75:93:c5:13:58:9e:49:86:8b:05:e1:9d:
63:93:53:d4:ac:78:9f:52:e1:e9:8e:43:5b:87:27:
18:07:90:b1:58:9e:f6:d3:d5:cb:ef:1b:ee:f2:e0:
53:a4:ec:a1:29:22:9c:99:f1:4d:93:5d:46:77:f9:
db:bf:e3:f6:76:17:62:a1:90:e5:0f:2e:69:80:f6:
3a:a9:22:66:b0:5d:d4:5e:c3:f8:fb:ed:30:0a:9d:
dd:1e:b2:62:44:1b:83:a8:c0:5a:0d:38:89:86:6a:
95:21:6b:c8:14:14:83:22:77:d4:9e:c1:fc:fd:99:
f4:16:51:29:1b:c2:8b:62:86:0b:0b:f6:7d:bb:9d:
70:a8:47:e1:8f:b0:ac:14:44:c1:13:26:2d:5c:08:
5f:c1:e4:f4:c8:64:8d:41:c7:d9:7c:53:f4:e3:0e:
32:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F6:B3:0F:93:C2:1D:4A:22:52:E9:9D:8B:22:27:24:55:46:08:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/68c230d0-a323-356a-a12c-934c81d3da7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
X509v3 Authority Key Identifier:
keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
sbgp-ipAddrBlock: critical
IPv4:
158.120.206.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:aa:c1:34:b3:6c:54:8b:4d:66:e6:a5:ea:d8:fb:e2:71:7c:
b6:ce:9e:05:01:8c:74:e3:a6:1a:e3:5b:e1:e2:16:d9:02:f9:
77:73:c1:3f:20:d0:80:d6:78:25:33:84:32:07:86:89:24:40:
27:28:8d:79:35:1a:43:d6:c9:64:2b:ba:33:12:6a:dd:92:85:
44:5d:7c:24:44:3e:5d:f7:b2:92:3f:30:ec:47:d6:04:5f:50:
dc:7a:32:f3:4a:9f:72:3c:d7:c4:6e:1c:45:8a:ae:97:68:7c:
e0:d9:fc:18:10:c9:78:ac:f8:49:85:8d:08:19:72:0f:1f:74:
60:67:1c:bb:41:fa:93:e7:ac:bd:38:a2:1a:5c:4c:ba:0b:fa:
0c:03:5d:d7:f8:65:8c:fa:62:6e:bd:cb:ea:e6:5a:a4:cf:5d:
ed:3d:4a:b6:81:47:72:95:4b:3b:18:c3:c6:58:fb:29:43:b5:
05:3e:b2:59:fb:03:2c:64:f9:90:29:7b:ee:e6:f9:e0:10:c3:
8a:67:e5:6e:51:a5:52:3a:0b:a7:34:a7:92:b6:10:55:f4:88:
b3:2f:3b:46:2e:a7:38:04:84:a3:94:f2:f7:e1:a9:55:61:8a:
59:ba:e8:12:9f:2b:a5:70:b1:bd:8d:02:2e:f7:e0:49:ce:dc:
17:53:c1:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64RzuBI0xPkCtuoUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm
NjZkMB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk
ZWZlMTRkN2YtOTEwMy00ODZhLTlhMDAtOGMxMDViMTJlYzNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VaP2S+EUXvJbgH9e/tVAczHn2eHgLtRyaKW
H167CJjdRTBgEicAcSV0NYLBWt26tb3vy1P5OexThVwnfv7dwYkCD/z+qAe+sfJl
6M5rm8TsV5SNb6Oi8q7ilr51k8UTWJ5JhosF4Z1jk1PUrHifUuHpjkNbhycYB5Cx
WJ7209XL7xvu8uBTpOyhKSKcmfFNk11Gd/nbv+P2dhdioZDlDy5pgPY6qSJmsF3U
XsP4++0wCp3dHrJiRBuDqMBaDTiJhmqVIWvIFBSDInfUnsH8/Zn0FlEpG8KLYoYL
C/Z9u51wqEfhj7CsFETBEyYtXAhfweT0yGSNQcfZfFP04w4y3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPH2sw+Twh1KIlLpnYsiJyRVRgjxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl
ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvNjhjMjMwZDAtYTMyMy0z
NTZhLWExMmMtOTM0YzgxZDNkYTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2
OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4
MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADaqwTSzbFSLTWbmperY++JxfLbOngUBjHTjphrjW+HiFtkC+XdzwT8g
0IDWeCUzhDIHhokkQCcojXk1GkPWyWQrujMSat2ShURdfCREPl33spI/MOxH1gRf
UNx6MvNKn3I818RuHEWKrpdofODZ/BgQyXis+EmFjQgZcg8fdGBnHLtB+pPnrL04
ohpcTLoL+gwDXdf4ZYz6Ym69y+rmWqTPXe09SraBR3KVSzsYw8ZY+ylDtQU+sln7
Ayxk+ZApe+7m+eAQw4pn5W5RpVI6C6c0p5K2EFX0iLMvO0YupzgEhKOU8vfhqVVh
ilm66BKfK6Vwsb2NAi734EnO3BdTwUA=
-----END CERTIFICATE-----
Generated at Sun Sep 13 10:19:32 2026 by rpki-client