
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8233d935-291c-3440-a0e9-bc9dd51db397.roa
File: 8233d935-291c-3440-a0e9-bc9dd51db397.roa (raw, json)
Hash identifier: bpewYN7acR0fBq5aLUJdC4PiQrR9oZri/2grS16A9NY=
Subject key identifier: 4E:C5:80:AE:5F:85:B7:90:AE:42:A2:24:04:A6:7B:67:8D:F8:F7:17
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D905A91B5E978E1D6C9D2CC80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8233d935-291c-3440-a0e9-bc9dd51db397.roa
Signing time: Mon 20 Apr 2026 01:00:24 +0000
ROA not before: Mon 20 Apr 2026 01:00:24 +0000
ROA not after: Sun 19 Jul 2026 01:00:24 +0000
asID: 13335
IP address blocks: 162.159.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:90:5a:91:b5:e9:78:e1:d6:c9:d2:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 20 01:00:24 2026 GMT
Not After : Jul 19 01:00:24 2026 GMT
Subject: CN=31309576-d624-4b08-9325-e0f266723633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b6:4e:3e:3f:43:e6:e0:d1:38:79:ba:92:b3:
24:9a:2a:72:76:2e:14:53:be:25:f1:a9:bb:99:f4:
fa:25:32:50:89:8f:58:9b:4e:13:08:71:52:bc:b5:
53:1c:1a:47:61:88:33:93:5b:05:3b:a2:4c:ed:17:
90:12:3c:91:72:2c:c7:ad:5d:32:37:51:c9:1c:4b:
0f:f4:69:bf:29:46:83:3c:2b:96:7e:ef:31:b8:a8:
3b:cd:bb:87:2f:c8:1b:5b:57:2f:0e:3e:74:50:b7:
1b:0e:4d:e2:65:a4:d6:69:cb:eb:73:58:40:a6:1d:
85:7d:8f:7f:1e:1b:a8:82:4e:90:09:20:d7:55:f4:
22:04:08:6a:a6:de:c2:21:c7:aa:e6:a8:dc:86:21:
b4:39:99:02:21:95:ef:09:8c:70:41:79:c2:c5:da:
9e:2a:eb:25:bc:11:96:13:0c:cf:ee:a7:70:9e:1c:
ba:61:7c:fd:52:5f:00:87:17:86:33:63:ac:7e:21:
86:97:f6:63:0b:18:19:c3:de:c3:88:7c:44:7b:cd:
f6:3a:6c:b7:01:cb:1b:ce:c5:5d:e2:e8:f3:0e:25:
ff:1c:90:fd:21:d6:03:16:d0:7f:14:d7:28:40:1b:
09:0a:87:c5:f5:80:e9:ec:17:5b:6b:52:d4:53:73:
fa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C5:80:AE:5F:85:B7:90:AE:42:A2:24:04:A6:7B:67:8D:F8:F7:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8233d935-291c-3440-a0e9-bc9dd51db397.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:4a:5b:63:c2:16:88:44:3d:fd:07:87:09:b5:fd:ef:f4:ed:
54:6d:ff:68:64:30:c0:2d:4c:7c:47:6e:f4:96:ca:3b:8d:0d:
01:f4:46:10:47:14:60:3f:cf:db:65:93:2f:9e:70:e7:38:0a:
13:da:57:c6:93:2f:60:ab:7b:aa:86:89:38:a9:8a:16:cf:4f:
da:fd:12:68:b9:91:ed:4d:c2:f6:60:2f:49:27:2e:c3:4c:d2:
a1:6b:88:8a:e0:6c:fd:c1:c4:2e:48:98:7c:29:c3:38:af:a5:
94:2c:a3:8a:37:17:b3:1e:e2:72:ad:ad:c2:bc:ee:30:72:b3:
43:ae:00:87:12:dc:25:7e:e5:94:0e:df:ed:7d:4d:be:03:2c:
cd:17:9e:f8:5c:32:60:fa:1d:23:b4:80:40:43:b3:06:4f:90:
e6:fc:f9:8c:5c:6c:95:e6:8f:67:13:03:75:41:f9:4e:7d:44:
3c:a2:79:47:56:50:ee:61:ee:1d:11:1b:31:0e:94:c3:82:81:
31:71:40:2a:a6:bf:05:61:1f:b6:da:1d:26:a4:86:7d:9c:c5:
a4:56:5c:20:47:fc:48:42:e7:37:88:90:57:a0:d3:fb:a5:7d:
eb:55:00:8e:52:b9:d2:d4:ab:b0:7b:b8:b7:29:54:01:b3:1e:
42:09:7f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:26:18 2026 by rpki-client