
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/50d4f8a6-aa1e-3400-b79d-7d791e9dbeb1.roa
File: 50d4f8a6-aa1e-3400-b79d-7d791e9dbeb1.roa (raw, json)
Hash identifier: nyx8RStBJGMYpt/xZwGrUvKsq6ahJknG30s+m3Wc+tc=
Subject key identifier: FC:F1:A0:1D:89:FC:A4:8B:46:2A:39:2A:A5:2C:69:39:EE:3A:BC:77
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D6AAA91AD14EF9D4E060308C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/50d4f8a6-aa1e-3400-b79d-7d791e9dbeb1.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 13335
IP address blocks: 162.158.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:91:ad:14:ef:9d:4e:06:03:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=023b9286-3d71-46b6-baec-7c3f80a17173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d7:5f:3c:f1:4e:b1:ca:62:c7:63:6d:31:8e:
78:37:bd:f7:1e:f0:ed:a5:46:98:7a:2d:49:4d:ac:
9a:6d:13:9d:0c:2f:42:74:51:bf:e5:7d:c8:df:cb:
e6:26:8b:06:a5:a6:fb:ad:af:8c:4f:b2:62:31:38:
0e:16:05:ab:5c:5f:ea:ec:40:d4:bc:ce:3f:3b:37:
a1:cd:b2:32:2e:3b:4f:57:54:95:82:8f:ca:dd:43:
84:31:f0:b6:9c:90:7d:2f:ea:1c:86:f7:ac:88:33:
94:ca:e3:8a:07:18:85:ff:e1:80:b3:14:70:a8:ab:
7f:59:12:56:5a:c1:1b:2e:bd:87:93:13:1a:c5:7d:
d6:80:32:e8:2c:71:60:68:30:2f:90:25:97:d2:f2:
00:4f:15:79:37:6f:20:3d:9a:3d:ce:a3:77:5d:97:
df:28:f0:89:57:9c:79:1d:a5:36:17:ab:25:11:be:
bc:52:b8:3b:f6:e3:63:3b:df:0f:23:09:de:e1:f8:
18:30:ed:2b:44:27:fb:a5:53:75:65:8f:ab:60:ec:
f5:80:71:32:79:90:fb:71:50:d1:c9:5c:38:8d:01:
1d:86:ca:dc:2a:10:b3:cc:69:a4:77:11:97:a1:74:
db:60:35:a6:17:2a:af:f9:ef:67:b7:a5:c7:8e:d5:
77:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F1:A0:1D:89:FC:A4:8B:46:2A:39:2A:A5:2C:69:39:EE:3A:BC:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/50d4f8a6-aa1e-3400-b79d-7d791e9dbeb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:5c:3a:0c:fc:a7:32:da:a5:e8:76:43:18:27:cd:d8:50:8d:
a5:a3:03:d8:7f:ec:d3:03:96:16:35:6c:e3:76:af:c8:f2:9c:
61:6a:e7:68:53:dd:6c:ac:2b:0a:a8:e6:37:0c:be:3a:8c:cb:
37:c1:e6:5c:93:c5:bb:60:05:b7:cf:07:33:7b:d8:1d:eb:3b:
94:7e:f4:99:55:38:95:7c:e7:7e:f0:cc:d3:53:b7:eb:fd:c9:
f6:2d:3f:ad:97:9b:bf:ab:24:d5:9a:4b:6a:e9:d7:9b:43:0e:
11:63:2d:f0:bf:96:40:bf:2d:4e:20:80:d9:91:dc:44:51:e2:
7a:13:af:0b:77:8b:47:d7:6a:4e:51:6a:ad:66:b2:26:0f:0e:
ba:6b:49:6b:30:12:52:19:75:86:36:57:d4:c2:2f:6a:45:88:
68:b9:f5:ab:b1:1c:75:14:fa:00:57:9e:40:4a:9d:ce:c1:f2:
08:eb:67:d6:91:5a:74:7c:f5:6e:f0:10:00:39:fa:de:da:3d:
eb:c7:30:24:31:da:1f:4e:13:0d:54:0f:49:92:e6:34:63:61:
73:0d:f8:ac:91:1d:18:a8:9a:8e:a4:79:4b:3f:36:e2:d4:6a:
7d:91:6b:77:60:92:8d:0d:7e:22:fd:7a:9e:a5:85:56:86:c7:
f8:cb:b4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:54:02 2026 by rpki-client