
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/542db07c-1ce5-3496-a24b-1970b9d4bceb.roa
File: 542db07c-1ce5-3496-a24b-1970b9d4bceb.roa (raw, json)
Hash identifier: hSXfGRWhpCsh5IO6NJYpwURiZQB+EioU5mQpzu+ntHQ=
Subject key identifier: E7:77:9D:37:6F:A2:BE:61:A1:32:F7:FF:28:7B:03:95:BE:B8:98:48
Certificate issuer: /CN=8d3868d4-1e91-4773-9cef-51b84f43c20e
Certificate serial: 010D0C9F4328584B9E079F62771A2AA64A259140
Authority key identifier: C3:DF:6F:43:BC:75:17:4F:09:0C:CD:BE:AF:B3:84:F4:AD:CD:F6:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/542db07c-1ce5-3496-a24b-1970b9d4bceb.roa
Signing time: Thu 23 Oct 2025 13:00:38 +0000
ROA not before: Thu 23 Oct 2025 13:00:38 +0000
ROA not after: Wed 21 Jan 2026 14:00:38 +0000
asID: 14618
IP address blocks: 162.213.126.0/24 maxlen: 24
162.213.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9e:07:9f:62:77:1a:2a:a6:4a:25:91:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3868d4-1e91-4773-9cef-51b84f43c20e
Validity
Not Before: Oct 23 13:00:38 2025 GMT
Not After : Jan 21 14:00:38 2026 GMT
Subject: CN=bee946c8-f495-4665-b9ef-330c31362a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:c1:a8:66:cb:a7:0b:6d:b9:4e:87:5e:fa:
32:02:20:94:f6:9f:91:3f:33:27:9b:10:27:4d:66:
2f:5a:19:8a:ad:a5:f1:b5:32:cf:a8:f6:4c:d8:17:
18:be:cb:4d:6f:6b:ab:ac:ba:0e:96:ac:50:e1:42:
10:d1:a8:b8:e2:ab:70:98:70:23:86:87:01:4d:e1:
1e:0a:b6:95:9c:cd:39:a2:8b:a4:85:24:ad:25:b3:
65:33:13:79:ce:45:ae:d5:7e:65:c4:f6:7f:88:fd:
85:89:da:2a:f0:b5:da:cf:45:86:56:71:e0:8d:d7:
cc:08:2e:19:b9:cc:e8:bf:ea:c3:e2:89:ad:8d:c4:
d3:78:33:e2:06:4e:ec:6c:10:6e:e8:40:dc:b1:0c:
25:e8:14:c2:7f:54:88:61:63:50:e6:73:39:33:ea:
96:b1:60:96:05:15:5e:cc:ab:78:29:4c:5d:37:18:
b8:e4:2b:f9:40:11:fc:8c:a2:28:cf:20:3e:e1:d4:
0f:2f:83:c2:c6:75:e0:50:53:db:0a:25:c9:6b:29:
9f:06:a7:0c:21:81:74:54:5d:56:7c:41:2d:d7:c0:
8c:38:af:c8:74:2d:47:e5:73:63:41:a7:66:bd:ae:
f7:bf:3e:7a:35:2c:ce:28:8a:d7:30:a1:30:4a:cd:
36:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:77:9D:37:6F:A2:BE:61:A1:32:F7:FF:28:7B:03:95:BE:B8:98:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/542db07c-1ce5-3496-a24b-1970b9d4bceb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.crl
X509v3 Authority Key Identifier:
keyid:C3:DF:6F:43:BC:75:17:4F:09:0C:CD:BE:AF:B3:84:F4:AD:CD:F6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer
sbgp-ipAddrBlock: critical
IPv4:
162.213.126.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:c7:04:5a:29:f8:c6:fe:8b:67:52:c1:0c:da:1f:89:6a:15:
15:8d:71:fd:ff:6c:14:be:96:32:93:a6:f1:9c:c5:33:a0:53:
89:c6:0e:b7:8b:c5:1f:18:1a:5f:7f:a9:db:fb:64:72:f8:4d:
fd:27:fb:dd:af:57:2a:b6:02:28:74:a4:28:ff:51:80:cb:50:
ab:83:04:ed:0d:fa:08:23:2c:52:7b:ff:59:1b:68:a2:da:b7:
e3:d9:45:33:dd:e3:14:d7:ac:79:f2:53:1e:bb:c9:e2:30:aa:
7d:7d:f0:f6:90:e7:70:8f:3a:28:23:0a:9d:ca:68:02:67:5d:
41:ed:5d:d8:b4:a1:eb:6b:ca:23:80:f8:73:0b:81:60:83:30:
5d:db:02:65:23:56:9a:59:42:49:3d:e0:4c:03:83:91:c9:98:
7e:17:69:f8:7d:fd:a1:4a:c2:bf:13:47:45:50:b5:9a:aa:14:
7a:ae:8e:3e:02:29:d5:99:1b:ac:9f:59:f2:42:05:78:a0:42:
f9:1a:71:9b:1d:ae:a6:08:b3:5f:66:28:24:72:8a:20:ff:44:
16:07:ec:2b:af:f9:62:42:0e:5e:bb:cb:31:35:6a:14:d5:ec:
25:73:89:0f:43:a1:ac:e8:87:ba:a2:45:eb:7e:a9:38:a2:86:
91:fa:01:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:52:18 2025 by rpki-client