
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa
File: ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa (raw, json)
Hash identifier: bZySHNkeLn16MVO5H/5n+k7G3vt7NGnAbTAglEv3A+0=
Subject key identifier: 6B:28:D6:B9:F3:23:11:25:30:68:9E:E8:6F:B5:43:F2:78:C4:A0:F7
Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial: 010D0C9F4328584F5A3326969643A45597E62680
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa
Signing time: Thu 01 Oct 2026 01:00:12 +0000
ROA not before: Thu 01 Oct 2026 01:00:12 +0000
ROA not after: Wed 30 Dec 2026 02:00:12 +0000
asID: 398156
IP address blocks: 158.120.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5a:33:26:96:96:43:a4:55:97:e6:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Validity
Not Before: Oct 1 01:00:12 2026 GMT
Not After : Dec 30 02:00:12 2026 GMT
Subject: CN=e6ec928d-3c5b-412e-90c3-c1537f53f742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:ce:7c:71:7e:3a:3f:52:7a:69:9a:73:0f:
e1:1a:9b:7f:e9:2c:a7:f0:7b:66:9a:73:a6:0e:36:
16:08:81:91:42:74:6c:ca:f2:eb:be:78:50:46:8e:
c8:06:f8:6d:28:82:98:23:d3:78:26:e7:68:c7:18:
64:74:1b:63:c1:04:17:e0:58:f8:a4:73:4c:8a:c0:
6c:96:8d:02:cb:87:2c:93:59:d1:75:20:94:b2:ed:
ed:68:ad:26:65:cd:f3:b3:bf:75:5b:71:9e:ef:f6:
a8:6d:e4:a2:67:48:a9:75:14:38:b4:fa:53:2b:bc:
8d:92:a0:02:ef:c1:13:f9:fb:09:96:c9:68:f8:6d:
03:d0:47:f9:6d:e0:c9:9f:06:d7:04:12:2a:8f:db:
4a:66:2c:70:a8:27:bc:24:b6:80:b3:0e:e7:c8:60:
0f:6c:e7:c4:f9:2c:9b:f5:04:c0:ed:6f:85:c0:1d:
8a:0f:c2:7b:ce:0b:0e:fc:08:90:ed:e9:00:13:14:
98:04:e3:7b:81:4c:4e:8c:18:0a:43:ed:36:55:69:
11:6c:10:4c:0f:cd:85:58:b3:58:39:81:35:b3:e1:
aa:6f:5b:f0:25:a8:03:40:64:53:a1:b2:7b:70:f9:
4f:c8:96:92:3c:1b:cf:3b:f0:3a:cf:bd:8f:8f:db:
bd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:28:D6:B9:F3:23:11:25:30:68:9E:E8:6F:B5:43:F2:78:C4:A0:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
X509v3 Authority Key Identifier:
keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
sbgp-ipAddrBlock: critical
IPv4:
158.120.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:82:66:a6:45:ed:b2:2f:d1:29:ad:e2:bf:93:3b:61:48:83:
0d:e3:06:16:d7:59:cc:b7:84:7c:dd:1c:08:19:2e:82:09:66:
bd:5b:b1:15:00:79:10:0e:80:f8:6e:a6:34:a8:48:74:cc:20:
ab:19:8c:ec:59:d7:b8:a0:f2:c7:b2:1c:3a:32:75:0e:2f:e0:
e0:03:65:35:01:76:5b:39:56:bd:7d:74:36:22:dc:d2:1c:9b:
65:32:06:12:fd:26:64:2f:6b:92:fe:2a:6c:8b:15:14:26:84:
b0:d8:ea:f5:9a:8f:80:5e:3f:4c:4f:f7:f6:fe:48:df:1d:a0:
52:43:13:64:20:1c:24:e9:44:da:13:2d:a4:4c:57:ae:90:04:
7f:c2:16:94:cf:e2:91:0f:e5:8e:63:99:a9:a5:65:1e:5d:b3:
61:1b:07:b8:da:53:f3:63:c6:b9:ec:e1:e7:dc:9d:08:55:03:
fe:e0:4b:41:9a:98:2a:38:38:7a:1b:d7:f2:af:5f:dd:8e:0b:
45:dc:62:a7:9f:d2:5b:db:e3:b3:62:2d:88:18:b9:f7:b8:95:
70:2e:0d:eb:c7:cc:22:04:ca:9e:af:7b:f2:00:2b:64:09:1d:
ab:25:6d:58:e8:c6:4c:2c:e5:0c:02:29:38:18:a8:cb:83:8a:
0c:ca:9b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 23:32:59 2026 by rpki-client