
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/75deed90-8e98-3a52-9f9d-ae60270a9787.roa
File: 75deed90-8e98-3a52-9f9d-ae60270a9787.roa (raw, json)
Hash identifier: /smjKj2Mai8MtqBbXz60I7sPc7ygC9alUEy8nBcTcCU=
Subject key identifier: 4B:E4:B0:47:2D:A7:1B:7B:37:93:BF:4F:A8:7C:60:D1:91:40:85:A6
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F4328584F655D63C218C41CE0DFA3FA20
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/75deed90-8e98-3a52-9f9d-ae60270a9787.roa
Signing time: Mon 05 Oct 2026 01:00:13 +0000
ROA not before: Mon 05 Oct 2026 01:00:13 +0000
ROA not after: Sun 03 Jan 2027 02:00:13 +0000
asID: 395954
IP address blocks: 142.234.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 15 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:65:5d:63:c2:18:c4:1c:e0:df:a3:fa:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Oct 5 01:00:13 2026 GMT
Not After : Jan 3 02:00:13 2027 GMT
Subject: CN=3fd598a7-4570-4af0-ba7b-84d0fee1674b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:65:9e:d6:16:55:c2:11:ea:e0:9e:39:56:f7:
fa:46:b4:ea:5f:db:41:3d:c9:40:fd:e0:42:46:f3:
c6:1c:ba:f9:2b:3c:28:04:18:4c:fb:99:58:43:8e:
08:24:44:cf:e3:17:de:75:a0:7b:7f:af:40:a8:ea:
be:03:f3:d0:49:05:b6:9e:c2:78:63:17:dd:d7:6d:
29:e7:e0:ab:0f:cd:a6:36:cd:ff:19:58:0b:3d:00:
02:33:f3:92:a2:d2:5c:23:02:ea:81:bd:65:3c:7c:
5f:ee:d7:7d:dc:e2:1e:ec:be:4d:da:ee:a9:ca:0f:
21:c5:97:77:a2:65:ce:b5:06:c3:2b:4e:c9:52:fa:
91:9f:4d:42:39:cc:e4:6c:84:65:01:a1:57:ca:ac:
ce:df:76:ee:e1:57:f2:56:55:d6:13:cd:46:9b:9d:
34:0d:3b:67:a7:68:16:e7:ad:88:fc:d4:0b:d2:31:
a6:06:91:24:f6:1f:94:a9:eb:19:c9:67:2f:d6:04:
3e:2d:7f:1f:77:e9:6f:c4:a9:7d:6d:97:f2:9b:cf:
a2:98:6c:13:cf:01:3b:f0:f2:5a:cc:31:78:1b:93:
80:88:c8:40:94:5d:af:ed:65:29:31:c6:a5:7b:b3:
7f:c3:c3:6d:45:55:8a:52:cd:e4:02:61:af:c7:0d:
61:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E4:B0:47:2D:A7:1B:7B:37:93:BF:4F:A8:7C:60:D1:91:40:85:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/75deed90-8e98-3a52-9f9d-ae60270a9787.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
142.234.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:0b:22:ab:6c:44:67:aa:9a:3c:13:d8:bd:7a:33:85:49:51:
9f:37:82:7f:f6:e6:1a:d3:01:07:04:b3:1d:07:51:5e:0b:9d:
f4:d0:b6:05:df:16:0a:b9:43:8f:47:41:23:c3:6b:80:14:15:
0c:aa:4b:2b:a3:7a:57:05:8c:91:e9:80:79:67:53:f4:11:a2:
32:0f:40:10:c8:97:f0:ec:e8:60:d8:7d:09:a5:5c:ec:fc:72:
98:c5:99:a3:d2:e4:c1:87:04:bb:2b:24:49:b3:21:52:da:f3:
fd:62:b9:38:bc:ba:76:03:12:62:f8:f3:89:73:d2:91:27:cd:
3a:f7:a3:d1:b9:19:38:bc:65:c7:00:fb:74:17:a6:76:09:7d:
1b:65:63:e1:2f:46:24:5b:18:ce:7a:36:f4:08:bc:06:20:8f:
d7:25:a1:36:1b:7b:68:a5:ba:54:a9:1b:fc:4a:12:9a:24:8f:
82:5e:85:c9:e7:29:55:96:54:dd:00:b9:da:d3:ec:35:08:60:
3c:9e:2d:91:95:7a:5c:21:16:84:13:28:f8:8a:76:74:fc:ed:
b7:ce:67:d3:63:04:88:e6:ca:9e:f7:86:a9:fc:2c:a2:9e:e9:
5b:07:d4:d7:e4:e9:bf:6c:5b:18:6d:3b:fa:a3:67:8f:7e:43:
50:56:04:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 09:07:56 2026 by rpki-client