
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa
File: 78b3d770-5faa-388a-a628-512ab2ceaa32.roa (raw, json)
Hash identifier: LQQa321lXw7KTLLANvo6PGDDm8FlMogskQQIfhkYPIY=
Subject key identifier: 06:67:CD:2C:A6:48:DE:0F:CE:F0:71:67:26:E6:9E:72:98:9B:5A:01
Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial: 010D0C9F4328584CA5F73FCC99703A538145F400
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa
Signing time: Mon 26 Jan 2026 02:00:32 +0000
ROA not before: Mon 26 Jan 2026 02:00:32 +0000
ROA not after: Sun 26 Apr 2026 01:00:32 +0000
asID: 2914
IP address blocks: 142.147.128.0/22 maxlen: 22
142.147.132.0/23 maxlen: 23
142.147.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a5:f7:3f:cc:99:70:3a:53:81:45:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Validity
Not Before: Jan 26 02:00:32 2026 GMT
Not After : Apr 26 01:00:32 2026 GMT
Subject: CN=370f2264-d014-494e-bf77-94badf4572c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:72:5a:c7:c1:57:13:cb:78:61:8a:4e:8f:e2:
2b:ae:26:72:44:c6:33:60:26:59:15:c6:d0:6b:1f:
94:ce:31:a6:ab:40:ac:84:ce:00:c9:73:98:ad:59:
74:d8:25:19:62:8b:24:0f:45:4a:e4:82:02:5e:2f:
86:1b:f1:48:0b:d6:aa:06:bf:98:2f:91:40:7d:51:
77:04:8f:96:c4:e6:7f:e5:d5:81:ef:fa:a5:35:38:
2f:4d:37:c8:40:08:a5:54:51:5c:78:ab:a0:66:6e:
aa:ff:60:25:5b:de:6c:be:d9:f8:b9:8f:82:29:be:
06:4f:6a:02:46:09:a1:ec:f7:de:af:52:51:92:6e:
cb:f9:c9:11:d5:16:23:24:cc:21:56:3e:16:d0:49:
be:54:8f:67:df:d4:c2:cb:6c:95:50:eb:e7:cb:7a:
76:b3:c0:c2:07:72:0a:b0:ee:fc:61:14:f0:d8:4f:
2d:5c:6f:9f:97:0f:38:00:5b:d7:43:65:db:b4:f2:
5d:a4:6b:69:55:d7:28:fb:65:64:5c:14:f2:46:8d:
da:a8:7c:4a:c4:08:12:21:47:29:c3:b3:de:65:00:
0b:1d:37:26:e2:ed:7e:fc:60:6f:54:f3:d8:4f:57:
33:4b:e6:f8:11:60:74:a0:ba:58:a7:93:ad:de:7a:
9a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:67:CD:2C:A6:48:DE:0F:CE:F0:71:67:26:E6:9E:72:98:9B:5A:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
X509v3 Authority Key Identifier:
keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
sbgp-ipAddrBlock: critical
IPv4:
142.147.128.0-142.147.133.255
142.147.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:28:52:1c:96:17:45:e2:42:15:26:f8:4c:ab:ea:f3:42:e9:
43:e6:99:c7:59:06:98:df:50:d1:3b:a2:62:dc:f1:50:98:f2:
fd:00:a5:99:59:3c:36:3e:0c:92:e5:11:29:75:ee:d9:7f:c2:
70:fc:78:c0:07:12:ef:10:91:4b:f2:bb:c8:44:b4:95:c1:e9:
fe:24:2b:66:5d:e9:3f:16:8c:bf:ba:82:e6:30:44:52:26:55:
88:41:5a:45:58:f5:d4:65:8b:37:f2:b0:cf:72:e8:5c:af:e9:
17:35:fd:ad:ca:c2:b8:68:98:f3:c8:96:32:d4:6b:f3:55:dd:
b7:b7:2a:16:11:13:9f:97:76:fc:c0:41:4f:bf:2a:a1:10:68:
ce:b1:88:c6:9c:b5:c9:cc:49:8b:2d:03:b2:ad:ea:d5:57:48:
90:ce:b2:4e:82:1d:ce:2d:b8:c2:d1:9f:d4:22:a4:3a:46:0e:
29:a2:05:7a:95:2e:54:52:cb:75:2c:82:35:41:6f:c0:41:a1:
c0:3a:fb:77:6a:c2:a4:ee:86:ea:da:10:f8:57:b6:87:a1:f7:
5b:60:82:ae:7c:d8:75:3d:92:91:de:7b:ab:f2:68:db:6c:68:
91:e5:56:95:d8:e7:74:2d:35:7a:ba:fa:e0:98:12:16:12:c6:
39:d7:c8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 14:09:17 2026 by rpki-client