
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa
File: cfa4f32e-c53a-3acb-998b-283e18217244.roa (raw, json)
Hash identifier: oV0PAf7yWTtEg7612MULuk/Q4KgWlsubucyK3F9RltQ=
Subject key identifier: 80:B3:05:3F:4C:DA:BD:10:60:5B:07:A9:6F:8B:EF:1A:88:9D:AC:53
Certificate issuer: /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Certificate serial: 010D0C9F4328584D59EA4F58071E341D1FE5F0C0
Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 14618
IP address blocks: 143.220.128.0/23 maxlen: 23
143.220.130.0/23 maxlen: 23
143.220.132.0/23 maxlen: 23
143.220.134.0/23 maxlen: 23
143.220.136.0/23 maxlen: 23
143.220.138.0/23 maxlen: 23
143.220.140.0/23 maxlen: 23
143.220.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:4f:58:07:1e:34:1d:1f:e5:f0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=e36e2a40-89ac-45bb-8073-9a3f2d67b4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:23:48:8d:9f:db:50:2d:1a:5a:34:13:9e:43:
82:aa:90:04:d4:8f:9a:69:80:51:61:8b:12:79:43:
c6:ef:93:c2:b7:ab:86:f0:12:4b:4d:dc:e3:b4:39:
4a:4e:f1:c8:db:c2:f9:b2:6c:99:83:4f:39:db:05:
3a:51:47:c8:b3:99:6d:29:cd:44:4c:58:29:5b:ad:
b8:0f:c9:fb:01:b9:20:19:07:af:b2:30:4d:02:b2:
d1:f3:cf:7b:85:b1:08:98:d2:a5:2a:06:af:33:a4:
0c:c4:5d:be:a9:ae:4e:4c:10:41:12:fc:77:bf:68:
0f:42:71:da:e4:47:4a:f9:47:fd:d7:e0:5c:3d:b5:
34:5e:a2:f0:b8:63:22:3a:29:f7:10:d4:c1:64:14:
d5:61:af:7f:a1:4a:97:0c:67:ff:15:fe:ed:d0:3a:
78:4f:df:bf:e8:82:f3:29:bc:32:a1:51:2d:52:53:
57:2f:4f:8f:85:27:c1:38:fc:83:27:17:84:79:eb:
a6:ef:8f:cf:03:07:1d:97:23:92:e9:e3:4d:37:87:
e2:64:0b:94:92:0c:00:3d:13:6f:7d:19:e5:e9:e6:
ce:97:aa:7e:1c:09:41:fd:0f:c8:9a:5d:9f:ac:b6:
f8:44:fa:50:14:60:24:ae:ef:91:88:cd:05:56:72:
08:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B3:05:3F:4C:DA:BD:10:60:5B:07:A9:6F:8B:EF:1A:88:9D:AC:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
X509v3 Authority Key Identifier:
keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
sbgp-ipAddrBlock: critical
IPv4:
143.220.128.0-143.220.142.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:84:e4:a3:46:33:8a:d4:09:83:c7:20:95:cb:1a:68:1a:bd:
96:91:d4:07:38:40:18:36:ba:09:b3:ce:31:40:0f:ca:08:6b:
30:78:b4:2f:52:d4:7e:23:b2:4c:da:6d:a4:57:60:ff:88:09:
4b:8f:fe:c9:c7:b0:ab:25:a0:0b:a2:35:ca:42:c4:5a:08:8d:
c1:5c:5f:2a:36:9a:f0:c0:8d:7d:1f:fb:d6:2a:28:cb:26:14:
d0:b2:a4:54:0b:a3:6a:ea:c8:7d:fe:de:ab:3f:79:20:73:b3:
bf:7f:72:ce:cf:a1:3c:b3:54:4a:f8:a7:e7:be:ee:07:0d:a4:
5e:29:39:f3:76:99:4d:3a:79:e8:a5:f6:24:3f:2f:ba:23:f1:
27:a7:19:b3:e7:b6:b4:31:bb:09:3a:fc:e7:d3:97:53:65:65:
a9:57:23:96:fc:52:b9:59:88:2f:1f:49:1e:04:85:1f:25:17:
c6:ad:11:2c:2b:d6:16:c5:85:11:d0:ee:2b:72:b8:1b:61:17:
bf:78:d6:75:96:58:4d:8e:de:1b:df:43:9a:32:70:7d:3c:71:
49:24:f6:a1:c0:db:a6:1e:64:99:c8:06:e4:f6:4c:6d:43:9d:
46:e8:aa:b8:e9:76:4a:06:b8:13:66:fc:37:09:96:c1:7a:81:
14:c3:cb:4f
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1Z6k9YBx40HR/l8MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2ExYzM0YzgtMGU1OS00ZTYxLTgwY2YtMTdhMTg1ZjI3
ODliMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
ZTM2ZTJhNDAtODlhYy00NWJiLTgwNzMtOWEzZjJkNjdiNGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yNIjZ/bUC0aWjQTnkOCqpAE1I+aaYBRYYsS
eUPG75PCt6uG8BJLTdzjtDlKTvHI28L5smyZg0852wU6UUfIs5ltKc1ETFgpW624
D8n7AbkgGQevsjBNArLR8897hbEImNKlKgavM6QMxF2+qa5OTBBBEvx3v2gPQnHa
5EdK+Uf91+BcPbU0XqLwuGMiOin3ENTBZBTVYa9/oUqXDGf/Ff7t0Dp4T9+/6ILz
KbwyoVEtUlNXL0+PhSfBOPyDJxeEeeum74/PAwcdlyOS6eNNN4fiZAuUkgwAPRNv
fRnl6ebOl6p+HAlB/Q/Iml2frLb4RPpQFGAkru+RiM0FVnIIzwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFICzBT9M2r0QYFsHqW+L7xqInaxTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFj
MzRjOC0wZTU5LTRlNjEtODBjZi0xN2ExODVmMjc4OWIvY2ZhNGYzMmUtYzUzYS0z
YWNiLTk5OGItMjgzZTE4MjE3MjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExYzM0YzgtMGU1OS00ZTYxLTgw
Y2YtMTdhMTg1ZjI3ODliLzNhMWMzNGM4LTBlNTktNGU2MS04MGNmLTE3YTE4NWYy
Nzg5Yi5jcmwwHwYDVR0jBBgwFoAUWVQJCmNe+FhlG1jGHsRQFS8LWhwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFjMzRjOC0wZTU5LTRlNjEtODBjZi0xN2Ex
ODVmMjc4OWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAeP3IAD
BACP3I4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAbYTko0YzitQJg8cglcsaaBq9lpHUBzhAGDa6CbPOMUAP
yghrMHi0L1LUfiOyTNptpFdg/4gJS4/+ycewqyWgC6I1ykLEWgiNwVxfKjaa8MCN
fR/71iooyyYU0LKkVAujaurIff7eqz95IHOzv39yzs+hPLNUSvin577uBw2kXik5
83aZTTp56KX2JD8vuiPxJ6cZs+e2tDG7CTr859OXU2VlqVcjlvxSuVmILx9JHgSF
HyUXxq0RLCvWFsWFEdDuK3K4G2EXv3jWdZZYTY7eG99DmjJwfTxxSST2ocDbph5k
mcgG5PZMbUOdRuiquOl2Sga4E2b8NwmWwXqBFMPLTw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:28:48 2026 by rpki-client