
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8244af56-18bb-37a6-9da1-e875d58bc4bb.roa
File: 8244af56-18bb-37a6-9da1-e875d58bc4bb.roa (raw, json)
Hash identifier: ezkTpT+odfQaqpiVyx5yVzGUGht7Fd8BLC30Bs8HzqE=
Subject key identifier: 68:5C:02:5D:35:FC:FE:28:93:C6:57:83:B3:99:F6:72:5D:BC:24:05
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584F4984F93FA2748B77583EDC00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8244af56-18bb-37a6-9da1-e875d58bc4bb.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 15169
IP address blocks: 142.251.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:84:f9:3f:a2:74:8b:77:58:3e:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=7b9dc18a-daad-4185-8c21-0e7e5312ff6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:43:8b:84:7e:c0:d8:34:d6:53:5e:0b:9a:d2:
97:2d:e8:d0:df:99:81:e1:fc:94:7e:4d:f8:90:a0:
cb:2e:3a:e9:ff:8c:6c:5f:b3:ed:70:cc:b8:c9:05:
fe:c6:6f:76:79:5c:c8:60:80:62:3e:49:18:46:69:
a4:76:80:d7:64:31:35:63:57:7a:77:0c:38:29:52:
ef:d4:9f:18:11:74:5f:a2:8a:6a:fd:54:48:5d:f6:
54:02:c1:5d:f6:0a:c6:5c:f8:a6:8b:b9:e5:05:ad:
c5:e4:a8:21:45:b8:00:ad:b3:63:62:4e:2d:af:62:
3d:7c:c1:9d:7f:ff:2a:54:f7:0b:1a:86:64:33:c7:
86:17:45:0a:c9:d6:8d:4f:25:88:6a:64:e5:86:b5:
e8:83:b7:66:60:4f:1f:3b:cd:b7:be:c7:fe:71:51:
c2:ab:9d:33:29:4a:c8:62:1c:37:aa:ba:83:f1:9f:
98:da:ac:0e:12:2a:c0:bd:d2:67:de:ab:a0:1c:25:
71:be:c0:35:c8:6b:3c:7f:30:da:ef:90:b5:09:fc:
05:63:77:8e:3f:49:1a:16:30:3b:b3:93:86:04:4d:
8b:b3:eb:e6:cb:f1:d4:f0:09:08:2a:dd:4b:63:32:
f6:c9:cf:77:4b:25:d8:8c:a0:1b:5f:7b:c0:e7:24:
53:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5C:02:5D:35:FC:FE:28:93:C6:57:83:B3:99:F6:72:5D:BC:24:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8244af56-18bb-37a6-9da1-e875d58bc4bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:c4:e1:5d:18:93:c4:5f:1a:6a:7c:af:3b:c4:13:24:80:23:
25:62:55:f1:ed:96:34:14:5f:3d:44:3e:fe:cd:05:d9:d6:9e:
a1:90:24:9d:c9:98:f2:c2:50:d5:a0:f5:5b:9a:94:07:ff:96:
ba:fb:69:99:21:7e:8c:3c:5c:66:2d:ea:e4:2c:1b:fe:ba:15:
a9:6e:91:f2:cc:5c:3a:b4:4a:1d:85:2d:48:39:a4:71:2f:00:
ff:66:9e:3c:aa:a0:0d:a3:52:39:14:97:5f:76:a7:36:41:cb:
85:f4:a0:c3:9b:93:ca:01:99:7b:c7:d3:9a:f0:32:83:60:72:
3f:bd:51:89:af:40:21:31:82:2c:2f:f1:e6:01:60:f4:c5:1b:
15:d9:48:0a:07:2c:f3:a3:a9:d7:e1:03:29:60:6f:7f:2c:f7:
82:aa:7d:4a:3d:00:ac:d5:5e:b4:78:9e:80:d1:7a:70:8e:1b:
f4:a1:a4:09:76:1f:e9:aa:cf:79:24:37:5b:cf:09:e6:21:ee:
7d:4e:4e:08:6b:60:9c:e1:06:4b:2c:eb:55:8b:d2:43:46:3f:
98:a0:98:21:9d:fa:0c:4d:af:56:32:2a:da:cb:dd:cf:55:b7:
4e:68:95:5b:45:98:82:1c:71:1d:7b:81:b1:7a:9c:9f:4b:f8:
2b:05:8f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:57:04 2026 by rpki-client