
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/2a8ea14d-056e-3fe7-8654-8f2cb2482bbb.roa
File: 2a8ea14d-056e-3fe7-8654-8f2cb2482bbb.roa (raw, json)
Hash identifier: fd6ndI3C6ict9pvomlMgvKxKKCCLcI6RklxnguWOcOo=
Subject key identifier: B9:78:E8:F9:85:19:44:71:D3:4B:51:2D:D7:E6:A2:86:72:B9:6F:D3
Certificate issuer: /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Certificate serial: 010D0C9F4328584D83CB0768C05E31764B1B0080
Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/2a8ea14d-056e-3fe7-8654-8f2cb2482bbb.roa
Signing time: Wed 15 Apr 2026 13:00:30 +0000
ROA not before: Wed 15 Apr 2026 13:00:30 +0000
ROA not after: Tue 14 Jul 2026 13:00:30 +0000
asID: 897
IP address blocks: 142.248.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:83:cb:07:68:c0:5e:31:76:4b:1b:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Validity
Not Before: Apr 15 13:00:30 2026 GMT
Not After : Jul 14 13:00:30 2026 GMT
Subject: CN=9a59564f-c4a5-44c6-93d8-fcd53971e963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:ff:b7:55:c8:a5:8f:35:c1:34:a1:a7:32:
5a:d6:5c:19:50:c5:22:6b:93:64:da:77:f1:83:5d:
2a:a5:1e:f9:51:d4:42:0e:d3:80:a4:ef:b0:b6:87:
bb:99:8f:55:dc:84:9c:b8:d5:a2:41:10:7f:ff:c8:
46:77:2b:25:92:b5:e4:91:2e:70:44:e7:ad:f0:50:
b4:0c:c5:ba:c9:12:92:52:0b:f5:6c:5e:11:3a:18:
ea:4d:c6:91:d2:83:cc:e7:2d:21:4d:4f:64:31:39:
cf:2b:43:df:89:c7:36:e3:e2:34:d2:1f:cb:d9:a2:
bb:be:9c:5e:7e:3a:71:fd:cc:e0:24:a9:da:55:78:
24:6a:8f:cd:6e:09:ad:2d:19:45:cb:17:b8:3d:98:
2a:2e:b5:b7:3b:8f:3c:26:87:8a:c3:ae:c8:ab:81:
de:44:e8:3b:31:f1:6f:6d:a3:91:db:75:2f:8f:10:
bf:81:7c:ef:91:b2:f8:a0:fc:d3:d9:a3:ea:b0:3b:
78:a5:5c:9c:5d:42:2d:de:1f:9f:f2:46:a7:26:33:
e4:f1:45:07:82:58:52:47:08:49:d3:da:8e:1b:cc:
52:e6:4a:a3:d0:63:eb:62:ff:e8:0a:21:b2:ed:f7:
53:f6:e3:3f:13:b6:c0:4e:a7:95:b6:51:0a:18:ba:
b4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:78:E8:F9:85:19:44:71:D3:4B:51:2D:D7:E6:A2:86:72:B9:6F:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/2a8ea14d-056e-3fe7-8654-8f2cb2482bbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
X509v3 Authority Key Identifier:
keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
sbgp-ipAddrBlock: critical
IPv4:
142.248.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:a6:44:e2:71:fe:64:6e:b7:42:69:27:0f:2d:21:09:5b:12:
91:fa:1b:70:03:e0:f8:4e:cf:54:f1:e1:d8:8c:22:8b:40:44:
e5:26:26:83:16:8c:5a:5e:70:b1:68:c0:3f:f5:9a:f0:e3:3f:
9f:9d:7d:a9:5b:70:e7:0f:cd:45:ee:9a:cf:4a:83:c4:47:06:
6d:22:5d:01:7e:b4:f3:c1:f2:a8:c1:06:17:e2:77:cc:a2:fc:
ed:15:12:98:1e:ed:be:e2:56:a1:17:23:00:f2:1f:6c:dc:21:
37:d9:8c:00:ce:0d:98:60:c5:84:e1:88:a8:cd:0c:cf:d4:ab:
34:44:84:1c:8b:6e:0d:d3:7e:09:e2:22:4e:c7:81:d6:7b:91:
8a:fc:86:1b:bd:76:12:16:37:74:05:53:6c:1a:76:ce:01:09:
ae:41:8d:74:95:07:8e:20:a0:86:b5:d3:df:d2:d0:90:b9:67:
bc:cd:9f:b4:6b:39:5a:aa:94:8b:67:b0:fa:a8:fb:cf:2c:8c:
72:88:61:5b:33:03:30:33:e0:8b:00:a2:ea:ec:9f:fd:ea:95:
8f:54:5d:49:68:e0:03:30:4e:83:92:ae:ab:2f:62:4a:11:dd:
6b:e3:9a:cf:a4:44:23:99:3f:fb:05:1c:34:5c:2d:50:a6:0e:
c8:7b:6a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:34:15 2026 by rpki-client