
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09baa7be-9ccb-321e-a5dc-4ca7fd01b1be.roa
File: 09baa7be-9ccb-321e-a5dc-4ca7fd01b1be.roa (raw, json)
Hash identifier: n2k9z08x4gpbkyeesA2oTlD5uOE4msM8vZ5c+L0sTbw=
Subject key identifier: BF:97:F7:DA:7F:E5:2A:3D:BB:A8:32:C1:A7:30:F3:8B:85:56:6E:00
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D6AAA9E06A078B22F12475A80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09baa7be-9ccb-321e-a5dc-4ca7fd01b1be.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 13335
IP address blocks: 162.158.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:9e:06:a0:78:b2:2f:12:47:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=617a0592-af96-4c94-a954-4dda009b5d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:6f:d9:a9:9a:9e:74:82:9d:35:4a:24:b1:
82:1f:5f:2f:e9:e5:9f:b7:40:bf:1d:53:2b:f0:fc:
de:3a:1d:87:67:bd:f1:28:9c:95:ec:31:28:93:04:
3a:3a:32:c8:2b:11:90:34:3c:94:a8:ba:00:f8:6d:
40:4a:7a:28:a6:a0:08:52:3f:63:cd:1d:8b:41:9c:
12:2a:d8:8e:e2:84:49:bb:62:f9:3e:48:2c:88:06:
c2:4d:83:8b:58:bd:2a:33:cb:07:74:18:49:14:c2:
8c:67:7a:2b:47:6b:20:da:fd:7d:11:67:67:90:b6:
67:a4:da:51:ac:be:7a:b3:59:ca:c1:28:c5:70:9d:
bc:30:4e:cf:e8:d6:f0:61:65:29:ed:8e:3c:e2:d2:
3c:78:65:fa:0d:0f:47:86:4c:1e:e9:30:3c:63:52:
09:28:d8:da:67:8d:87:68:4a:ae:56:be:2d:3f:0a:
61:bd:92:e5:19:a1:dd:e5:c1:b3:51:de:fe:c8:bc:
59:7c:0c:a8:59:e9:cc:dc:aa:fb:d4:d9:ec:bc:a6:
ce:c5:47:0f:37:86:8c:4b:06:d6:01:3c:48:9d:ca:
11:02:cc:2f:8d:2b:65:70:ad:c4:74:76:b1:1e:97:
5e:47:f6:59:c2:0b:c0:c9:9e:0e:a6:b3:50:43:8c:
39:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:97:F7:DA:7F:E5:2A:3D:BB:A8:32:C1:A7:30:F3:8B:85:56:6E:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09baa7be-9ccb-321e-a5dc-4ca7fd01b1be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:5e:c5:09:b3:79:63:ed:43:37:48:a1:ab:0e:46:39:32:78:
ac:3d:b1:94:ba:b1:5e:46:25:3d:a0:29:bb:ab:18:69:ec:f4:
b2:3d:54:f8:84:94:3f:fc:c9:fe:46:74:19:01:5f:7b:4d:2f:
e0:b7:5c:1e:20:5d:8d:3a:e6:fc:64:48:95:fa:6d:40:8d:8e:
a2:ef:79:e0:1d:6a:bd:e1:f1:8a:0c:8b:fb:77:5b:ef:2f:d1:
97:0f:af:02:59:c0:c3:8c:82:d1:ea:df:c1:a3:76:dd:b3:41:
68:8b:cb:b6:d5:b8:41:f3:ae:bf:49:d4:51:58:00:09:77:b7:
15:a7:5f:97:90:79:ca:bf:a9:5d:b4:6d:65:b4:2c:af:9c:34:
03:4b:86:95:1c:38:e8:99:a2:71:d2:c6:f9:b2:8d:ae:62:65:
f9:ce:2c:62:da:43:2d:b5:59:76:6d:15:2e:0a:c3:9b:c5:28:
c6:67:7c:af:0b:44:b6:f4:c6:bf:c2:87:ba:f6:ae:5e:9f:c4:
a2:52:40:fd:14:39:34:cb:58:32:cd:0c:27:76:38:75:f6:ab:
26:4f:88:44:53:6b:3f:a9:f5:ed:42:94:ee:cb:53:35:47:ef:
04:66:08:33:72:20:ce:71:57:a0:26:68:03:eb:f9:8a:34:c7:
85:fc:f3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:26 2026 by rpki-client