
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa33fc89-9f73-3872-a795-1e79869a2d7d.roa
File: fa33fc89-9f73-3872-a795-1e79869a2d7d.roa (raw, json)
Hash identifier: WO59g6wQ4xH/Glx7Wvys2xDDTQ+cr90fLMBjOqS1Ih0=
Subject key identifier: B1:A8:F0:40:A0:9C:C8:B0:9D:39:0B:48:69:D9:4F:93:DB:30:30:80
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E4AEF649248B0674F3A46CE80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa33fc89-9f73-3872-a795-1e79869a2d7d.roa
Signing time: Thu 25 Jun 2026 21:00:12 +0000
ROA not before: Thu 25 Jun 2026 21:00:12 +0000
ROA not after: Wed 23 Sep 2026 21:00:12 +0000
asID: 13335
IP address blocks: 162.159.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4a:ef:64:92:48:b0:67:4f:3a:46:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 25 21:00:12 2026 GMT
Not After : Sep 23 21:00:12 2026 GMT
Subject: CN=537104cb-10b2-46cc-bf77-b67402e1d934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d8:8d:2a:04:c6:61:fb:6b:df:25:58:5c:8e:
37:27:fd:b7:50:d6:96:5c:da:67:5c:42:aa:3b:68:
78:65:ad:49:0b:7d:59:7a:89:ac:33:4d:f4:3b:bc:
5b:0c:03:4e:a7:d0:61:ac:27:4c:4f:bc:d8:a4:72:
60:6b:4f:8c:7f:b8:21:9c:3f:5f:b2:02:1c:5d:c6:
b5:fd:17:4c:25:0e:73:2f:90:a1:a5:02:60:28:03:
c4:ff:23:d5:f5:30:74:f9:71:31:d9:21:5d:d9:22:
aa:d4:f1:69:f5:2b:06:39:a7:45:df:3c:16:79:a7:
f4:c2:92:24:58:33:83:b3:34:12:3e:fa:fd:91:5d:
03:ac:8b:cb:95:3e:40:9e:9d:29:8d:96:92:51:11:
d8:de:84:7e:c3:e0:87:0b:7f:89:11:be:ce:ed:71:
24:07:ef:9a:77:e7:55:ca:aa:9d:82:0b:4c:ab:74:
1c:fd:c3:e3:01:bf:0a:40:f1:7c:48:18:70:a6:09:
4d:3b:80:82:16:91:0b:87:b3:10:3c:2e:0c:18:5e:
67:85:be:ab:a7:6c:f8:93:d8:cd:07:0f:ea:fc:b9:
26:a9:5d:52:29:96:1b:75:16:10:41:38:30:99:36:
f1:6e:67:70:12:71:8b:88:44:4d:82:7a:0c:a7:58:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A8:F0:40:A0:9C:C8:B0:9D:39:0B:48:69:D9:4F:93:DB:30:30:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa33fc89-9f73-3872-a795-1e79869a2d7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:53:48:18:03:3d:5d:44:ef:ff:f8:6c:02:3f:cf:35:e4:1f:
93:22:72:b1:fe:8e:11:ef:e7:5b:22:53:60:cb:c0:eb:39:b8:
97:4d:3e:c9:ba:89:1c:1c:5f:1f:a1:15:ce:09:ea:5b:90:ee:
44:27:66:6f:7e:96:88:92:e2:b3:95:9c:1d:1c:7d:09:df:c6:
b0:09:05:43:f6:c4:04:98:0e:21:4a:0d:14:58:e6:67:01:8b:
34:03:10:d1:e8:a1:32:9c:6e:b9:e5:6a:58:39:64:01:b1:fb:
8c:14:15:34:c3:c2:74:7f:c9:62:63:0c:eb:1b:b8:d6:cc:ad:
f3:ee:3f:ab:20:e7:db:fb:30:30:45:36:09:8b:23:31:93:c2:
22:9a:57:6b:09:e6:19:0c:66:dd:9b:58:6a:af:28:a3:6e:bc:
32:79:22:3d:b6:6f:ec:55:13:1a:37:56:94:0d:4b:92:20:9c:
26:7b:64:9a:fe:59:53:db:64:e6:fc:ee:b2:72:cf:43:4f:1a:
7a:7f:a4:95:63:a9:ce:e6:26:16:77:f4:2e:a0:f6:32:fe:26:
dd:7c:88:3d:48:df:ef:29:89:03:50:63:90:d5:78:8e:15:e0:
7b:ac:cd:0a:4a:ab:10:a0:07:1b:e2:62:19:dc:e8:a6:7b:d5:
f8:70:79:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:24:06 2026 by rpki-client