
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/48419f57-0ab5-37de-a584-184b1b96fa61.roa
File: 48419f57-0ab5-37de-a584-184b1b96fa61.roa (raw, json)
Hash identifier: t0rGDFPZAbf7knJIrumQdNgWtBXHJkMnrukSv5GNRn0=
Subject key identifier: 34:E9:01:07:E3:27:DA:C5:34:B8:1A:43:2A:80:29:1E:74:23:78:B0
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D67DFDE7EF52566B28325BB40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/48419f57-0ab5-37de-a584-184b1b96fa61.roa
Signing time: Sun 05 Apr 2026 13:00:31 +0000
ROA not before: Sun 05 Apr 2026 13:00:31 +0000
ROA not after: Sat 04 Jul 2026 13:00:31 +0000
asID: 13335
IP address blocks: 108.162.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:67:df:de:7e:f5:25:66:b2:83:25:bb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 5 13:00:31 2026 GMT
Not After : Jul 4 13:00:31 2026 GMT
Subject: CN=6431b52b-d837-4276-827c-41f7b99c2b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:fc:64:ce:9d:a8:39:da:3c:06:6a:08:cd:
1b:d5:fc:c2:dd:30:86:88:10:b0:94:a1:85:4b:d1:
f5:a4:18:81:ea:39:3c:b0:00:41:34:46:af:fd:55:
3f:ab:59:c4:26:00:37:a0:d6:69:ac:09:7e:16:d5:
45:ce:c2:a5:26:72:ed:85:cf:a2:9b:50:27:94:38:
5e:29:45:ad:11:42:5c:f9:53:8c:d2:df:23:25:d4:
69:6b:35:95:fb:98:3a:6f:d3:42:9b:01:23:44:c8:
6f:c2:df:a8:10:9c:33:d3:65:b9:c8:74:47:52:2d:
c2:82:8c:c2:95:35:cc:3f:71:32:06:e8:73:23:fd:
03:fe:a2:0b:8b:3e:ee:cd:39:1a:7b:d5:18:12:03:
d6:6c:23:8c:ef:d9:ab:4d:5b:60:ca:2f:fe:8e:15:
b3:fc:7b:db:4b:47:f0:8b:05:68:6f:77:40:64:c0:
25:c4:65:2b:14:df:6d:9f:b8:4e:f2:52:f4:de:b7:
90:ad:46:98:e1:38:a2:96:b5:d2:a0:83:5f:19:5d:
38:ba:20:aa:60:ce:80:73:4f:aa:ec:44:59:e6:b0:
09:ea:48:d5:7a:45:68:01:98:76:85:a3:34:a1:b7:
a7:0b:f5:ff:7e:00:b0:20:61:9b:54:23:cd:d4:9d:
49:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E9:01:07:E3:27:DA:C5:34:B8:1A:43:2A:80:29:1E:74:23:78:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/48419f57-0ab5-37de-a584-184b1b96fa61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
108.162.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:1a:93:62:06:6f:da:2d:10:53:61:8e:e2:a9:b1:c4:1a:87:
44:8d:00:a9:98:76:3a:74:48:30:2b:dc:1e:8f:3e:c0:0b:8d:
27:57:3c:1a:93:ea:05:dc:c0:eb:9d:a1:b4:c1:38:3a:4c:26:
b0:3d:dd:e7:e0:46:12:ae:37:ab:25:10:5e:1d:42:a6:51:c2:
38:a5:ec:ba:6f:42:c6:30:3d:77:e5:5b:1a:18:de:07:8a:98:
71:98:3a:cf:3e:67:8e:2e:f8:b3:ac:c2:09:1b:89:8f:16:10:
64:8f:8d:4f:ea:33:41:19:1f:e2:f5:a8:10:67:80:a0:5b:7d:
3d:b4:db:cd:23:e9:fd:28:52:c3:63:c7:1b:52:2b:0c:30:3c:
8a:38:87:b3:ca:38:39:7e:0e:dc:e3:19:66:10:8c:d0:94:8b:
9a:36:93:c6:4f:7e:3a:fa:39:0c:f3:a8:3b:4b:43:99:e8:aa:
10:61:5a:50:ba:7e:13:10:4c:1c:be:db:a8:9b:d7:dd:d0:b5:
fb:46:c9:26:de:c1:36:64:0a:dd:80:c7:74:3d:2d:60:12:a5:
0d:f4:36:5a:0a:62:99:b7:41:3c:4e:aa:fa:3b:b4:b1:e1:c4:
28:21:4b:b2:ee:f6:42:5f:04:4b:42:f2:82:96:90:32:3c:a1:
63:34:c1:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n395+9SVmsoMlu0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk
NjQzMWI1MmItZDgzNy00Mjc2LTgyN2MtNDFmN2I5OWMyYjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5/8ZM6dqDnaPAZqCM0b1fzC3TCGiBCwlKGF
S9H1pBiB6jk8sABBNEav/VU/q1nEJgA3oNZprAl+FtVFzsKlJnLthc+im1AnlDhe
KUWtEUJc+VOM0t8jJdRpazWV+5g6b9NCmwEjRMhvwt+oEJwz02W5yHRHUi3CgozC
lTXMP3EyBuhzI/0D/qILiz7uzTkae9UYEgPWbCOM79mrTVtgyi/+jhWz/HvbS0fw
iwVob3dAZMAlxGUrFN9tn7hO8lL03reQrUaY4TiilrXSoINfGV04uiCqYM6Ac0+q
7ERZ5rAJ6kjVekVoAZh2haM0obenC/X/fgCwIGGbVCPN1J1J9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTpAQfjJ9rFNLgaQyqAKR50I3iwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDg0MTlmNTctMGFiNS0z
N2RlLWE1ODQtMTg0YjFiOTZmYTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKLvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABYak2IGb9otEFNhjuKpscQah0SNAKmYdjp0SDAr3B6PPsALjSdXPBqT
6gXcwOudobTBODpMJrA93efgRhKuN6slEF4dQqZRwjil7LpvQsYwPXflWxoY3geK
mHGYOs8+Z44u+LOswgkbiY8WEGSPjU/qM0EZH+L1qBBngKBbfT20280j6f0oUsNj
xxtSKwwwPIo4h7PKODl+DtzjGWYQjNCUi5o2k8ZPfjr6OQzzqDtLQ5noqhBhWlC6
fhMQTBy+26ib193QtftGySbewTZkCt2Ax3Q9LWASpQ30NloKYpm3QTxOqvo7tLHh
xCghS7Lu9kJfBEtC8oKWkDI8oWM0wZE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:13:53 2026 by rpki-client