
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cbb97d-a169-317b-ae93-69a3033c9909.roa
File: 17cbb97d-a169-317b-ae93-69a3033c9909.roa (raw, json)
Hash identifier: JFnslBnuC2F4U/0xa4mmC/rnoEhSHO2nId+JCKduWQQ=
Subject key identifier: E7:21:69:AA:99:BA:B1:01:3D:8A:B7:32:BC:B8:B0:30:48:A5:07:79
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584F497CEFFCD0241969B19CA75C
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cbb97d-a169-317b-ae93-69a3033c9909.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 15169
IP address blocks: 142.250.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:ef:fc:d0:24:19:69:b1:9c:a7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=fce5c5aa-13b3-4917-ab5c-a23bbcc2b23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:80:b9:93:e0:c6:6f:d0:7c:5b:6e:1f:1e:
29:25:2a:4b:23:40:f0:f1:d7:19:eb:4c:6a:f1:60:
0d:b3:92:bf:73:dd:7b:b7:8a:f2:b1:1f:6e:f2:6f:
47:07:07:ef:3d:2d:18:b5:de:11:7d:fa:66:90:8a:
72:c8:b6:f7:78:39:e0:ba:61:bb:5f:cf:d3:a3:a5:
1c:24:7c:b4:a1:d9:a2:72:65:f8:a3:47:f2:40:46:
ab:48:4d:96:eb:9f:da:f4:6a:f3:93:27:98:9d:ce:
e1:c6:e9:7d:df:c2:54:3f:70:74:60:59:29:c3:d6:
f2:b1:81:0f:98:e9:6f:bf:a6:cc:af:67:ce:b3:1b:
82:11:5c:76:38:2b:fc:b6:73:d6:df:17:3f:63:37:
25:83:41:e0:ff:86:a8:4c:d6:54:33:1b:93:e3:c6:
4a:37:82:31:94:de:17:eb:ce:59:be:32:71:e0:2f:
f3:6f:7a:bf:5a:7b:f7:a1:f5:9c:ac:d1:65:5c:8c:
a6:6e:c1:5f:10:d2:8b:8d:65:b5:b6:c2:fc:3a:c5:
90:00:14:c8:68:c7:e5:83:68:6d:37:17:bc:3a:b7:
1e:86:a9:aa:fd:65:b9:e6:79:36:72:9e:48:95:3a:
0d:f0:5f:47:d8:40:9e:24:4d:6f:7b:87:8d:c3:43:
ce:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:21:69:AA:99:BA:B1:01:3D:8A:B7:32:BC:B8:B0:30:48:A5:07:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cbb97d-a169-317b-ae93-69a3033c9909.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:6a:64:db:00:49:49:46:25:e5:d6:fa:14:90:bf:3e:7e:ce:
29:3a:9e:20:10:8f:ad:55:47:7d:44:c3:9b:0c:4b:4d:cb:0a:
91:6f:d3:a6:6b:44:07:5c:99:ec:1f:d7:4d:04:f8:30:95:c6:
c9:9a:47:4b:3f:14:57:f2:88:39:5d:35:23:3d:f0:d3:88:df:
d5:c8:8a:80:ab:91:07:8b:a5:cb:55:53:19:49:6c:a4:d1:26:
05:ec:d2:2e:ce:7e:b6:4c:fe:75:16:72:b1:3f:b4:27:9e:63:
2e:1c:0a:6e:64:0d:36:e6:ce:76:d3:92:62:2c:31:a1:a7:c7:
22:3b:db:06:ed:f4:9f:99:65:01:9b:d8:cf:f2:c9:1b:4a:e0:
86:c6:ae:03:1d:a6:bb:5e:d7:15:bd:50:0f:a6:7b:69:29:c1:
14:ac:64:b9:92:4f:06:d8:31:d9:ba:01:bc:a0:8b:64:b8:b2:
32:53:8c:8f:e9:cd:ac:82:66:85:2d:68:23:fa:27:6a:d4:fe:
e7:0d:aa:a1:cf:ac:28:0f:0a:05:60:27:8b:3f:09:b3:65:60:
31:d4:cc:4c:6c:51:40:5a:5a:4d:e2:d1:b0:a9:78:fc:ca:0e:
5c:3d:31:7a:bd:e7:51:f2:94:46:d7:ba:06:55:02:d8:1a:b9:
7f:a3:7b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:49:54 2026 by rpki-client