
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/2a83a923-d533-3653-856d-6e2aaeb8887a.roa
File: 2a83a923-d533-3653-856d-6e2aaeb8887a.roa (raw, json)
Hash identifier: EHDTRHLXOGS8JpeZOUBJ4RjuqjOvD1CcP6tD0e2U+uI=
Subject key identifier: 0F:69:56:A5:3D:17:A0:CC:20:15:01:2A:05:1C:B1:C6:DE:04:07:32
Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial: 010D0C9F4328584CF422253B0585273153DFDDF0
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/2a83a923-d533-3653-856d-6e2aaeb8887a.roa
Signing time: Mon 23 Feb 2026 02:00:31 +0000
ROA not before: Mon 23 Feb 2026 02:00:31 +0000
ROA not after: Sun 24 May 2026 01:00:31 +0000
asID: 14593
IP address blocks: 143.131.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f4:22:25:3b:05:85:27:31:53:df:dd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
Validity
Not Before: Feb 23 02:00:31 2026 GMT
Not After : May 24 01:00:31 2026 GMT
Subject: CN=36dbf004-7a64-4145-89be-1e2a1d752837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:3d:38:11:9d:a8:d8:23:a6:96:f5:ff:4c:
55:60:7f:97:be:a4:49:0b:37:68:90:ad:dc:7b:a2:
64:39:35:70:e7:39:43:33:b2:3b:9a:c9:25:62:42:
3d:45:58:02:2a:ea:74:2e:f5:69:20:e0:9f:10:e6:
a9:4a:93:fb:77:c3:f2:12:cb:f3:ac:eb:62:73:5a:
c1:bd:2d:60:88:0d:2a:a0:0c:f8:4d:11:8c:92:0c:
04:d5:16:64:84:c3:19:50:5b:c0:da:eb:dc:83:92:
10:c8:41:ae:f0:f2:a4:61:ad:f9:0a:2b:f3:a4:a7:
ee:5a:92:76:7c:e3:4b:af:fb:60:be:68:56:5a:2b:
ce:8b:7a:70:7c:20:79:20:f7:b7:b6:ca:68:ff:c2:
3e:7f:e7:6a:90:86:f2:34:6e:bd:69:9d:2c:7e:ee:
bf:5c:97:11:93:f1:f7:8b:b3:21:20:fa:76:79:79:
f0:a8:dc:69:89:96:69:82:21:8e:3a:52:e4:06:4f:
10:36:a6:5f:ae:3a:e7:4c:5a:c0:af:84:e1:56:26:
24:3b:ed:41:37:e0:47:7c:8b:e8:66:ab:1b:c8:97:
fa:81:a6:7c:d5:ba:58:8b:52:d0:78:7f:21:0e:74:
57:80:90:53:99:58:71:ee:9e:53:c8:33:f5:f6:fb:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:69:56:A5:3D:17:A0:CC:20:15:01:2A:05:1C:B1:C6:DE:04:07:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/2a83a923-d533-3653-856d-6e2aaeb8887a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
X509v3 Authority Key Identifier:
keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
sbgp-ipAddrBlock: critical
IPv4:
143.131.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:4b:29:f6:88:da:64:f0:52:02:12:3c:16:52:cc:71:12:46:
55:26:eb:b3:d4:a9:d2:f5:b9:d5:ca:a6:6e:e1:ad:7b:f0:05:
e9:6b:48:42:b1:f9:23:d8:36:30:17:e3:cb:ec:07:69:cd:b1:
91:57:b0:68:82:30:b3:5f:02:53:90:18:db:24:57:83:ad:19:
c0:8c:43:01:0e:66:c6:ff:4d:ff:8c:90:31:16:ab:98:ca:12:
0e:f7:56:67:26:d6:94:8e:b2:36:c6:27:1d:c9:cf:08:da:f1:
cf:4b:17:00:6e:f2:41:03:bf:4a:1e:93:88:5d:c8:bd:0e:b8:
e1:40:ce:e2:cd:d8:94:1d:2f:db:58:b8:e9:3e:da:9a:37:ee:
31:09:49:64:50:b0:53:96:34:78:11:e3:82:ed:d4:58:e4:fb:
12:69:f8:c6:23:99:75:53:75:f1:51:96:43:b6:1a:ac:38:80:
14:88:b3:eb:92:97:31:a3:b0:2f:c2:bc:00:ce:3d:7f:fd:17:
dc:a7:be:73:31:ef:bd:5d:67:bc:6d:0a:66:61:6c:a4:73:0c:
15:20:85:50:4c:57:33:ca:4b:45:7e:15:d1:89:4e:ce:4a:57:
6b:14:c0:9c:f3:40:5e:ba:3e:37:ba:27:76:26:b0:c9:9f:7f:
a2:9d:a7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:56 2026 by rpki-client