
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa
File: 879a586a-5dbd-3989-ac66-822d1f92f8f6.roa (raw, json)
Hash identifier: ct6rEiMibeW3g3a4a+bD4D9PcX3GVTfKkviYqZIEQV0=
Subject key identifier: 2B:CF:E3:4B:68:50:4E:5C:C4:00:8C:E2:FE:D2:46:F0:6C:BB:C7:72
Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial: 010D0C9F4328584E2AD45C8881D0B89A99F25D70
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa
Signing time: Sun 14 Jun 2026 09:00:11 +0000
ROA not before: Sun 14 Jun 2026 09:00:11 +0000
ROA not after: Sat 12 Sep 2026 09:00:11 +0000
asID: 16509
IP address blocks: 142.202.36.0/24 maxlen: 24
142.202.37.0/24 maxlen: 24
142.202.38.0/24 maxlen: 24
142.202.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 25 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2a:d4:5c:88:81:d0:b8:9a:99:f2:5d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Validity
Not Before: Jun 14 09:00:11 2026 GMT
Not After : Sep 12 09:00:11 2026 GMT
Subject: CN=4dffae52-16d5-46d8-a70a-3ee2e484016d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:39:c5:26:cc:0d:09:4c:21:1d:a9:73:33:
c6:c3:27:c7:5d:dc:fe:ad:9a:12:8a:88:6d:42:8a:
35:07:a6:3d:0d:17:4f:9f:4d:95:6f:1e:62:63:05:
d0:68:04:8f:da:b5:f6:e5:33:84:37:d3:2e:60:a8:
81:73:c3:2f:34:54:4f:39:2b:02:55:01:ef:6d:a1:
7d:0a:4a:63:42:52:26:d6:05:a5:8a:dd:bd:0c:e1:
c6:a8:d5:9d:49:49:3c:9c:d7:10:6f:5f:12:6f:b8:
b9:82:4f:d4:8a:7f:9a:3d:0d:36:5c:f3:02:61:5b:
70:2f:f5:56:7e:d2:58:6f:86:16:64:9e:24:0c:e3:
ea:e1:3e:0b:2b:a2:e5:9c:59:7c:ce:53:8c:2a:91:
a2:d1:00:e8:52:c9:19:a7:77:24:73:68:3c:64:8a:
61:0d:b9:30:2b:1a:52:c3:c5:6a:e9:67:18:80:9a:
1c:88:d9:7e:69:75:35:41:8c:68:17:97:f9:b3:f8:
02:68:7b:4b:32:6e:f9:30:ad:d3:f0:b1:1e:4e:63:
25:08:4b:43:1c:aa:ce:fc:9a:cb:90:1b:44:b4:73:
c3:64:3a:8d:59:2f:7a:b1:20:ca:e0:87:c9:6b:15:
ed:fd:3c:55:ed:33:8e:ea:f5:a5:ad:18:0d:86:14:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CF:E3:4B:68:50:4E:5C:C4:00:8C:E2:FE:D2:46:F0:6C:BB:C7:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
X509v3 Authority Key Identifier:
keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:3a:01:e2:04:6f:ff:8f:ac:dd:5e:52:df:dc:33:dc:27:96:
a1:52:5b:94:6e:66:04:fc:96:3c:56:ee:ec:43:b3:35:e8:14:
97:25:46:d9:55:42:76:d9:65:da:be:b7:21:1d:9e:d6:b3:f0:
6c:f8:dd:0f:2a:73:38:ed:26:52:1a:7a:5e:b0:3e:f6:50:bb:
59:e5:84:1a:67:fd:fc:81:9c:7c:7f:0e:6d:4f:e3:68:2d:bc:
c4:db:d4:cf:69:6e:4e:62:23:3a:15:05:4a:10:02:2f:df:e5:
4d:c9:64:84:5d:49:ef:ce:99:2f:98:62:6e:59:3d:a3:80:0b:
8c:c5:0f:40:c0:2e:b8:b5:72:09:0c:3d:82:74:2e:4b:7b:8a:
68:1e:1f:cf:d4:68:55:14:65:c7:9d:13:b8:13:87:ab:fd:a7:
13:52:b0:bf:42:63:7f:d2:13:6b:a8:6f:1e:d1:d2:35:73:2d:
3f:da:be:ef:6a:37:f3:78:a5:36:22:f5:68:0f:80:25:32:7f:
31:d9:d1:74:81:fa:68:47:f7:44:24:2c:2c:1e:fc:01:84:5f:
fb:c3:85:de:e8:67:59:76:59:f3:79:55:46:93:9d:fa:09:5d:
2d:a6:36:82:a3:bb:f4:9c:b8:d1:dc:f9:b8:00:63:96:9a:ad:
00:e1:17:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:34:40 2026 by rpki-client