
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd1ee6ef-e317-3e4b-bea0-77efeb244665.roa
File: dd1ee6ef-e317-3e4b-bea0-77efeb244665.roa (raw, json)
Hash identifier: Vao0W7vxSCvn3RxqC/E241cMkwf6KjMnlKCVngcdm+4=
Subject key identifier: E1:45:E9:10:84:95:86:5F:62:74:DF:6C:59:2A:6C:14:C3:30:A7:51
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584EC0A752A674746525B2F1E680
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd1ee6ef-e317-3e4b-bea0-77efeb244665.roa
Signing time: Fri 07 Aug 2026 01:00:12 +0000
ROA not before: Fri 07 Aug 2026 01:00:12 +0000
ROA not after: Thu 05 Nov 2026 02:00:12 +0000
asID: 15169
IP address blocks: 142.250.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Aug 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:a7:52:a6:74:74:65:25:b2:f1:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 7 01:00:12 2026 GMT
Not After : Nov 5 02:00:12 2026 GMT
Subject: CN=33c65124-7541-403a-ad38-83258e29cc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:04:75:85:0b:f5:90:f3:cd:98:18:bc:59:
2b:f1:f0:16:bb:27:8f:01:74:5d:20:28:5b:84:19:
f2:23:4c:62:d7:61:e1:7c:b4:8c:f5:a0:de:0b:21:
f2:ea:0a:5f:09:46:c9:b3:8f:47:67:e9:48:10:66:
70:99:73:00:94:40:52:b0:ae:0f:e6:0d:ef:c9:54:
82:4a:f6:0f:9a:4f:75:08:87:7e:19:40:c3:c0:25:
82:97:8f:1f:5a:17:e0:89:00:8e:c6:a2:c3:b0:77:
64:1d:a4:bc:4b:b3:3d:77:b8:95:26:62:8e:49:be:
da:3c:8a:b7:21:c4:0d:c5:8a:3a:19:55:3e:1c:ab:
ce:e7:71:85:6a:cd:c2:b6:d9:aa:e9:44:5e:a1:43:
0d:22:72:13:04:14:17:6b:09:2d:75:ed:4c:3d:68:
d8:cd:ae:1f:f8:5c:12:8a:1d:c7:03:f5:5b:b1:85:
38:a0:5c:de:bd:27:05:b4:ec:76:dd:c9:dd:19:60:
5a:3c:7e:70:59:e7:93:77:ac:35:20:fb:7b:cc:bf:
07:25:6e:45:dd:4c:b7:98:58:4f:49:22:eb:b2:92:
32:6b:46:84:35:c6:d0:a1:c7:1f:0b:b4:6d:64:87:
56:50:36:30:91:57:4f:d0:4b:e8:dd:92:fd:29:57:
b6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:45:E9:10:84:95:86:5F:62:74:DF:6C:59:2A:6C:14:C3:30:A7:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd1ee6ef-e317-3e4b-bea0-77efeb244665.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:87:00:b5:8f:a2:1a:6a:1a:ae:a5:54:a3:94:69:ad:70:1c:
d8:cf:2f:37:88:73:dd:33:76:2c:0d:75:00:56:3e:4a:a0:d7:
eb:83:05:78:6e:c0:48:7a:a5:a3:6d:5f:27:fa:f2:99:cc:fa:
2d:7a:da:24:03:75:ca:86:45:14:88:c3:8d:a0:6d:6b:db:c1:
23:c8:a6:18:f2:2e:a8:c5:2c:70:93:d2:bd:94:c7:d7:5b:e5:
d8:74:a0:87:72:6e:44:64:fa:5f:d1:e5:03:86:82:55:fc:b2:
ea:75:1b:e0:7d:d6:c7:80:08:d2:08:46:8b:fe:23:17:61:d8:
d8:ad:e3:c5:7b:72:37:9b:dc:04:99:6c:58:7f:d5:26:bd:6d:
bb:d9:cf:91:76:1e:3a:4a:27:1a:d7:71:bd:d8:8a:e9:b2:b0:
9a:de:ba:ec:36:e8:e6:34:1c:c5:ff:dd:a1:04:fb:4f:f9:b5:
ab:55:0d:01:b8:84:9e:8b:72:2d:f8:85:07:35:62:fa:a2:8c:
78:d8:77:2d:04:4d:76:a8:f4:a4:b6:8f:a0:73:97:3f:13:2b:
9f:ab:37:d5:69:6b:34:16:45:38:05:1e:fe:45:62:32:f3:13:
a0:9f:4c:51:cd:72:99:ab:f1:a8:04:36:f2:a3:23:82:04:09:
b4:98:2b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 22:40:03 2026 by rpki-client