
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa
File: 549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa (raw, json)
Hash identifier: BefI+O65ehSw4EZV9Ranmk4LatB96EEO++sdLi8QXd8=
Subject key identifier: D1:43:87:85:DA:D8:38:E9:85:B0:7D:51:14:DC:70:6A:49:A5:BC:30
Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial: 010D0C9F4328584D86955F52526B6F85F2F02440
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa
Signing time: Thu 16 Apr 2026 13:00:31 +0000
ROA not before: Thu 16 Apr 2026 13:00:31 +0000
ROA not after: Wed 15 Jul 2026 13:00:31 +0000
asID: 398156
IP address blocks: 158.120.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:86:95:5f:52:52:6b:6f:85:f2:f0:24:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Validity
Not Before: Apr 16 13:00:31 2026 GMT
Not After : Jul 15 13:00:31 2026 GMT
Subject: CN=a24bc2a4-c105-4f8d-ae45-77ac28ac054c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:6c:10:7c:09:bd:36:1e:7e:5d:25:69:a4:
6c:03:1a:85:09:f6:09:41:bf:a9:de:11:d5:b4:74:
8c:ef:c9:a3:5b:62:1b:dc:d1:e0:a8:32:16:47:51:
58:0c:88:79:73:24:ec:87:95:26:27:c7:30:54:6e:
b3:5d:e9:03:65:44:e9:82:1b:e2:f2:eb:fc:49:9b:
6d:1d:fc:a0:76:6e:32:c3:63:c7:23:f5:40:88:0d:
10:dc:c1:ca:78:81:34:a9:c7:49:36:d6:2c:12:59:
43:d4:76:e9:09:16:c5:93:29:e7:82:6d:75:5e:c6:
1c:c3:a7:c1:0c:8d:e8:8b:f6:f5:e9:ab:ef:3c:d4:
f7:49:0c:b7:4a:90:c5:13:8c:26:cd:c5:c8:5f:b2:
45:02:74:29:3d:e0:b2:9e:18:44:87:03:44:4c:c0:
d9:3e:e4:1c:e2:d0:74:ca:f6:f1:4b:db:65:02:e7:
e3:e0:44:ff:62:a0:a3:6e:6a:99:50:86:7e:8f:45:
6b:bc:19:a6:85:9e:bd:16:17:a0:ea:62:bf:02:a8:
29:47:a1:7e:ff:48:87:ef:56:d6:5f:48:a7:a5:1b:
b5:cf:e3:6d:c2:9a:95:12:dc:0a:bc:3b:f8:06:b7:
ff:6b:ce:03:0a:70:85:3a:4c:ff:26:cb:24:17:c3:
f4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:43:87:85:DA:D8:38:E9:85:B0:7D:51:14:DC:70:6A:49:A5:BC:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
X509v3 Authority Key Identifier:
keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
sbgp-ipAddrBlock: critical
IPv4:
158.120.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:d7:be:a5:61:25:62:15:eb:da:30:20:5d:85:47:6a:b3:0d:
cd:d7:a5:d9:ed:12:48:6f:5e:f3:2d:59:ba:87:c1:75:d2:2e:
64:c5:74:8c:c9:ae:ee:ce:97:e8:e4:d2:94:82:a2:2b:44:58:
c0:2d:ba:60:0e:65:f7:f5:43:f6:10:f8:4f:05:e0:e9:e2:3b:
38:0e:9b:e7:ac:89:7d:8e:ed:50:59:4e:f3:4b:20:19:04:c6:
d3:93:19:ba:08:b1:0c:a7:a6:a7:aa:68:2f:9c:97:88:58:79:
21:a3:f0:73:8a:29:6a:4c:9a:1d:c4:d7:b8:e3:f2:70:ae:ba:
96:91:9f:8e:2c:42:ac:62:27:c1:21:63:0d:da:c6:76:94:e0:
34:9d:b6:36:b3:75:8b:22:ce:e3:f7:2d:cb:36:e7:8a:1b:31:
ec:60:09:6d:04:65:5e:b0:5a:45:1d:a9:fe:29:a7:a6:d1:e6:
57:4c:bd:6e:64:53:cc:6a:89:03:6c:b8:30:1c:bc:ba:4e:58:
27:06:85:1d:2f:8f:e4:64:6f:a1:27:30:6d:41:96:b3:d1:02:
89:ca:07:89:a8:4a:48:06:b8:56:ec:60:30:d1:75:f9:4e:48:
44:1b:a3:7b:21:a5:c1:86:0f:e6:98:59:23:44:5f:7f:ef:d8:
74:0f:36:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:27:21 2026 by rpki-client