
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/caed8d92-1433-37e7-bdb4-e3c6a36ce79a.roa
File: caed8d92-1433-37e7-bdb4-e3c6a36ce79a.roa (raw, json)
Hash identifier: +iaKzrSBodHJceKmQvhuSlrpCIqZFjLY9EOyDdAhco0=
Subject key identifier: 77:6B:15:04:07:07:E6:CA:39:0C:82:E2:09:77:8E:4D:59:F6:EF:F6
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E82C4D725B9896191BCEA57F0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/caed8d92-1433-37e7-bdb4-e3c6a36ce79a.roa
Signing time: Wed 15 Jul 2026 21:00:12 +0000
ROA not before: Wed 15 Jul 2026 21:00:12 +0000
ROA not after: Tue 13 Oct 2026 21:00:12 +0000
asID: 13335
IP address blocks: 198.41.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:82:c4:d7:25:b9:89:61:91:bc:ea:57:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jul 15 21:00:12 2026 GMT
Not After : Oct 13 21:00:12 2026 GMT
Subject: CN=84570846-eeaa-4d39-ab10-2875041c7406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:64:be:c6:ff:d9:28:19:19:57:84:7c:c1:49:
19:a6:a2:0d:a8:06:31:31:53:1b:96:e9:36:f5:e9:
02:2e:6f:77:bd:56:73:33:7a:5c:24:73:ea:ff:e0:
91:59:25:2c:79:52:08:ea:93:32:08:eb:64:95:fb:
ca:cb:dd:b2:47:80:c3:04:a3:5c:a4:63:72:95:91:
3f:dd:52:b4:3b:a4:ed:04:25:e4:99:39:a7:1a:e4:
a7:33:e8:80:e9:1e:fc:6b:45:98:cf:c8:b8:ea:22:
e3:58:f7:d5:d7:d4:9a:91:a8:13:b6:97:25:38:33:
72:bc:2e:4b:5c:42:6d:72:e6:e0:db:87:4c:ec:7d:
3e:37:00:fd:db:90:79:4a:38:7a:dc:03:74:aa:47:
8b:e2:f1:84:0d:2d:03:56:96:e0:af:f8:08:78:52:
ff:bd:1d:d8:fd:6a:00:97:fe:8f:48:cd:b9:90:1e:
99:c2:18:c8:16:83:b2:2c:7a:c2:e4:fa:16:8c:4c:
02:90:05:fa:7a:3a:90:8b:10:a9:67:4e:bf:c7:3f:
7d:7e:e0:50:38:39:88:90:aa:9d:7d:9d:03:4d:dc:
dd:7e:f8:72:75:c4:80:31:7f:f8:b3:6e:bc:74:a8:
3e:06:91:7d:ff:0f:fa:4c:09:5a:7e:f2:1f:fc:45:
42:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6B:15:04:07:07:E6:CA:39:0C:82:E2:09:77:8E:4D:59:F6:EF:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/caed8d92-1433-37e7-bdb4-e3c6a36ce79a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:bd:8e:72:44:16:cb:2e:af:40:a0:3a:75:ab:29:bd:b7:71:
5e:5d:c3:35:c2:1c:ef:95:ba:f5:28:c3:57:9b:94:db:b4:d9:
58:83:7a:57:49:52:6b:5a:81:37:6a:6c:0a:31:9a:86:d3:ee:
fa:8b:71:cc:db:e8:fa:7d:13:a2:21:46:c9:be:c4:5e:2c:b5:
a2:15:69:f1:1e:94:50:7b:73:42:af:44:2d:cd:ec:e6:47:24:
5f:78:a2:4c:0c:dc:49:26:cb:5f:6f:74:9f:71:46:58:64:c2:
1c:ce:d6:99:65:46:87:86:3d:df:7c:22:ee:17:79:ba:a0:a3:
9f:d3:7a:06:0e:04:c6:68:03:26:25:3f:97:62:4f:5a:36:33:
6e:18:40:f6:8a:67:ce:c6:f7:07:23:bb:9f:3d:be:46:43:0c:
20:45:56:58:9a:9b:4a:32:3b:27:db:25:1d:02:a0:15:c6:eb:
a0:f9:39:2a:02:e4:1f:c6:ba:f5:4e:61:ee:b1:54:20:9a:fb:
da:4a:ef:fd:9e:3b:4d:b4:73:82:d7:d1:0f:3b:45:da:f4:52:
e9:e6:a7:85:e0:3b:02:9e:61:3a:07:28:4d:92:de:78:48:e0:
ea:98:f7:77:9d:55:2e:35:54:16:6c:97:6d:a1:68:38:58:a8:
92:0a:ee:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:45 2026 by rpki-client