
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d7af862-0cf7-3f22-b06a-034deb57d57c.roa
File: 0d7af862-0cf7-3f22-b06a-034deb57d57c.roa (raw, json)
Hash identifier: YhRhAThR6HDaqAjSmPABTYRMsZyJ3mdzbVYv2k9QZDo=
Subject key identifier: CD:DB:A7:D3:4C:93:BA:56:75:F2:23:60:08:57:00:99:68:86:3D:AE
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584CF42240370CFB5BCD91DFE380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d7af862-0cf7-3f22-b06a-034deb57d57c.roa
Signing time: Mon 23 Feb 2026 02:00:31 +0000
ROA not before: Mon 23 Feb 2026 02:00:31 +0000
ROA not after: Sun 24 May 2026 01:00:31 +0000
asID: 13335
IP address blocks: 162.158.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f4:22:40:37:0c:fb:5b:cd:91:df:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 23 02:00:31 2026 GMT
Not After : May 24 01:00:31 2026 GMT
Subject: CN=8af7a192-73b5-4d4a-909e-84f81373a6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1d:69:6d:24:69:28:74:ec:39:1e:07:b9:f4:
05:18:ac:1f:8f:83:6a:48:71:67:32:f7:58:df:4c:
d6:34:0b:26:e5:4d:eb:8a:1f:ef:62:e0:bb:7d:2c:
fe:f9:0e:be:ff:5a:60:da:91:d0:3a:a8:be:7f:f9:
e5:51:28:d9:3b:40:b8:33:b7:ff:56:1a:1c:51:0b:
14:d9:91:32:cc:f3:96:96:15:9e:db:ca:2b:02:5f:
bc:d9:8b:49:cf:e5:78:52:4f:94:1c:12:3b:ca:31:
0b:9f:86:e3:f5:a3:ba:65:36:34:6f:ec:b3:bc:3c:
b7:2b:45:cb:cb:25:86:15:2c:ed:2f:14:a0:83:50:
b1:75:9b:5b:8e:26:a6:6a:87:06:36:46:1f:40:1d:
2c:9e:e0:67:91:6c:b3:d9:ea:2b:09:88:66:8d:c0:
b7:9a:e9:b0:d0:cf:50:9b:44:ce:ed:b8:66:d8:37:
a4:bf:99:2c:ec:0d:50:e9:d8:36:37:5c:45:60:a0:
5b:57:d7:b8:25:0a:c1:11:eb:cc:90:67:2f:dd:68:
3c:e5:78:6a:3b:3c:37:74:fd:83:c3:a4:48:fa:8e:
89:7c:f6:e4:44:fc:53:72:1c:81:5d:51:f9:3f:fa:
13:7d:8e:7a:56:a1:29:6b:50:90:91:d7:d7:8d:8c:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DB:A7:D3:4C:93:BA:56:75:F2:23:60:08:57:00:99:68:86:3D:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d7af862-0cf7-3f22-b06a-034deb57d57c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:1f:3c:16:37:22:ef:42:b5:33:56:0f:8d:f7:59:07:a2:da:
12:f7:0a:c4:83:6b:b4:82:b5:e8:e6:25:b7:13:9b:bb:df:f7:
b2:1c:47:f9:ea:0e:4c:46:f2:19:c1:8f:af:ed:08:89:41:dd:
6d:9c:ba:ab:b5:1b:d3:8e:85:1f:9f:f2:42:7b:00:78:c9:f6:
98:28:36:96:c3:a1:90:1b:3c:ce:5b:d1:b8:0b:4e:17:fd:71:
d0:ef:ee:b6:15:62:34:1f:41:86:6d:81:9b:2f:bd:27:4c:e1:
bc:6f:64:9f:ac:22:52:74:ef:34:02:f9:0a:78:b4:89:c8:b7:
cc:4a:b5:3c:31:d7:45:41:05:73:a3:1a:55:15:05:e0:ae:b2:
91:c9:c7:09:97:62:f8:a5:9f:89:6f:9d:bc:9d:f9:f3:38:96:
a9:d6:b8:91:30:6a:d2:cd:69:a9:bc:d5:10:2f:95:42:c4:5c:
d4:e8:62:da:2d:4d:67:31:71:97:a7:58:24:d7:f7:9d:2f:8a:
b6:c2:08:a3:1c:de:23:f0:f1:da:f4:ac:f5:d6:d7:9c:37:7a:
80:87:4b:97:4f:d4:36:30:86:28:5c:75:3f:05:65:b8:68:2a:
6b:06:60:60:a0:88:9d:7f:23:2c:87:96:83:69:7a:12:9b:75:
59:e7:b2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:09 2026 by rpki-client