
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6da1bda-a68e-4232-96e7-017110e19753/50bf72c1-5b11-302d-9af8-facbff9eb087.roa
File: 50bf72c1-5b11-302d-9af8-facbff9eb087.roa (raw, json)
Hash identifier: EWZwACGllgM+FtOnQule3AMnpatbRWUT7KVca0ZX+r8=
Subject key identifier: 21:7A:F0:93:68:2A:E7:B1:FF:DB:0B:8B:F3:CE:F7:25:A1:A9:AF:EF
Certificate issuer: /CN=a6da1bda-a68e-4232-96e7-017110e19753
Certificate serial: 010D0C9F4328584F506D67107D4CC457AC935920
Authority key identifier: 7F:FB:7C:89:CA:E7:1C:AF:DC:3A:21:C1:E9:A0:F6:8A:4E:51:3A:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6da1bda-a68e-4232-96e7-017110e19753.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6da1bda-a68e-4232-96e7-017110e19753/50bf72c1-5b11-302d-9af8-facbff9eb087.roa
Signing time: Sun 27 Sep 2026 13:00:12 +0000
ROA not before: Sun 27 Sep 2026 13:00:12 +0000
ROA not after: Sat 26 Dec 2026 14:00:12 +0000
asID: 27169
IP address blocks: 131.143.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6da1bda-a68e-4232-96e7-017110e19753/a6da1bda-a68e-4232-96e7-017110e19753.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6da1bda-a68e-4232-96e7-017110e19753/a6da1bda-a68e-4232-96e7-017110e19753.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6da1bda-a68e-4232-96e7-017110e19753.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:50:6d:67:10:7d:4c:c4:57:ac:93:59:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6da1bda-a68e-4232-96e7-017110e19753
Validity
Not Before: Sep 27 13:00:12 2026 GMT
Not After : Dec 26 14:00:12 2026 GMT
Subject: CN=38e1c46c-bb07-461a-9070-c7cb89d401e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:a5:45:2e:40:db:7d:c4:a5:c7:a4:0c:c8:
27:4b:e9:e4:2b:3a:51:4e:c3:3c:0e:47:e8:07:b5:
7d:71:0e:e4:4d:ca:10:98:da:1e:7f:7f:0c:2a:11:
03:8b:22:65:2e:3e:5a:36:f6:c8:bb:1e:c3:c3:0c:
86:f4:48:16:b3:aa:c5:18:98:55:24:71:ec:66:4b:
3e:9a:c6:25:e6:ab:74:45:4f:f2:b0:fa:56:34:fd:
3d:5e:1b:e0:ba:53:f1:71:85:5e:55:64:bc:a2:38:
0e:d8:0c:8f:05:2a:02:58:2b:4e:ec:81:e8:31:cb:
1c:79:b7:12:e1:9f:17:84:c3:d3:87:a2:ba:39:38:
5a:22:ec:d0:7b:49:2c:c5:32:a7:90:1f:2e:6f:01:
be:cd:7c:ed:31:74:8b:f1:85:f3:1d:b7:50:f5:95:
19:cf:3b:25:a7:b0:f4:5d:88:eb:04:91:b9:41:6e:
68:94:c8:05:6c:2d:3d:38:6b:ac:4f:86:9f:d3:fe:
5a:24:f1:28:3c:0b:a9:e1:fb:a3:05:f0:e7:4d:34:
68:d4:3d:ad:ad:67:e2:cc:f6:37:99:8e:c7:29:d1:
01:4c:4d:b9:79:b1:04:4d:1c:69:ba:71:e2:3a:3c:
d6:da:90:1a:13:70:39:a8:cd:a9:38:33:0c:d4:d1:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7A:F0:93:68:2A:E7:B1:FF:DB:0B:8B:F3:CE:F7:25:A1:A9:AF:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6da1bda-a68e-4232-96e7-017110e19753/50bf72c1-5b11-302d-9af8-facbff9eb087.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6da1bda-a68e-4232-96e7-017110e19753/a6da1bda-a68e-4232-96e7-017110e19753.crl
X509v3 Authority Key Identifier:
keyid:7F:FB:7C:89:CA:E7:1C:AF:DC:3A:21:C1:E9:A0:F6:8A:4E:51:3A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6da1bda-a68e-4232-96e7-017110e19753.cer
sbgp-ipAddrBlock: critical
IPv4:
131.143.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:35:f5:b5:74:af:4a:25:21:94:ae:fa:04:9c:c3:fb:25:00:
ac:a1:52:f8:f8:32:77:41:e5:1e:5c:38:2a:bb:50:ff:c8:69:
21:10:7c:61:0c:4c:97:1d:fe:2c:60:2b:7d:2a:19:69:7e:c2:
2b:b3:89:c0:0d:11:14:2d:88:f3:cd:4b:42:24:e5:9d:7c:ef:
b8:16:49:ca:4e:90:1f:65:75:42:16:ec:69:75:63:7d:a0:e2:
77:8a:f3:68:1e:ea:20:9e:fb:48:2b:29:a9:82:b1:ce:0a:eb:
c2:6b:4f:61:f2:3d:eb:ef:40:0d:02:e0:2d:d5:ba:29:bd:7b:
13:25:ac:af:f7:a4:b6:aa:08:46:34:1f:ff:65:f5:52:fd:91:
bd:a7:00:a0:0e:76:21:f2:d4:fc:29:c6:5b:e9:99:44:21:03:
99:a2:53:46:b7:6c:9e:f1:31:31:fe:8e:a8:4c:68:34:cb:b4:
ce:9b:df:74:6e:74:d1:07:75:04:a8:e6:f2:de:4a:b7:9d:ac:
24:d7:e3:39:ae:57:b7:1e:27:50:bf:ff:d4:c7:c6:85:59:ea:
57:1a:0e:6d:8b:b9:31:64:6e:15:ad:74:a9:c9:42:8a:15:4f:
ba:9f:9a:38:bb:e1:cf:fb:8f:79:48:e3:0c:70:16:c9:bd:74:
3a:1a:a6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:49:15 2026 by rpki-client