
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d20b8d2-9db8-332e-aa33-7d152602e1c6.roa
File: 5d20b8d2-9db8-332e-aa33-7d152602e1c6.roa (raw, json)
Hash identifier: AQLaHWWT9H0DGSMT89VDDx54IoOPmZnw406/+33Aiv4=
Subject key identifier: 42:0D:AD:62:50:EA:81:98:8E:20:0F:F7:D4:A3:01:B7:20:46:58:19
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584DD35B1ACB7AB34737E5896480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d20b8d2-9db8-332e-aa33-7d152602e1c6.roa
Signing time: Thu 14 May 2026 01:00:25 +0000
ROA not before: Thu 14 May 2026 01:00:25 +0000
ROA not after: Wed 12 Aug 2026 01:00:25 +0000
asID: 13335
IP address blocks: 162.158.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d3:5b:1a:cb:7a:b3:47:37:e5:89:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: May 14 01:00:25 2026 GMT
Not After : Aug 12 01:00:25 2026 GMT
Subject: CN=a40235c3-f225-4b73-b030-15ccf0b5c6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:a8:30:ed:34:02:ee:a5:94:88:ca:9a:aa:
a1:8e:de:ad:a3:cd:51:32:d4:06:ad:0e:99:3e:ac:
d1:88:90:8e:9a:15:7b:a8:48:94:10:a5:3e:8c:55:
e9:16:46:5e:be:f5:10:ca:c6:48:2d:0c:bb:ea:90:
0b:26:5f:09:b6:36:20:be:36:10:04:55:24:f6:e3:
14:63:ee:f5:51:0f:aa:56:14:e7:b1:19:a6:b4:fe:
43:61:ae:19:e1:a2:03:0a:b8:71:7e:54:50:2d:37:
04:52:dc:78:3b:89:b8:39:44:f5:ca:7c:4b:50:ea:
ec:5a:ee:ae:6e:46:9c:61:9c:e7:5c:6e:fc:ec:e8:
09:de:ca:2a:d0:e2:c5:45:91:4b:0d:3a:3e:0d:2c:
42:57:c3:0b:ef:8c:90:91:60:72:8f:56:4b:cb:59:
43:7e:d4:f7:98:1d:10:48:90:7a:da:e8:81:3a:db:
6e:61:2d:44:d1:ce:b9:e1:65:11:1c:29:e2:c3:57:
0f:ec:bd:20:25:de:62:2b:10:c4:87:33:13:43:27:
1e:ef:01:64:71:a3:c4:b4:b7:c8:5f:0d:79:09:08:
0c:93:c5:0c:4f:73:4a:51:f0:6a:8b:c5:82:ba:a8:
ba:1b:4d:dc:c1:d5:4e:61:c0:30:e3:66:7c:77:c1:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0D:AD:62:50:EA:81:98:8E:20:0F:F7:D4:A3:01:B7:20:46:58:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d20b8d2-9db8-332e-aa33-7d152602e1c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:5a:aa:7f:4e:1e:91:9d:09:83:15:d1:4c:19:7a:cd:7d:e7:
8a:e3:fb:e9:df:8b:8c:ca:cb:24:c2:43:1a:5a:3e:72:91:c3:
09:4c:ff:91:3c:20:32:4f:82:fd:67:a6:b8:c6:53:8a:fd:85:
fe:c4:c1:5e:15:ac:b0:65:e6:fc:0d:af:55:c0:98:e0:de:e6:
c1:d9:0f:22:9f:f9:c8:e5:2e:76:bd:f8:d4:3b:ed:2d:b5:86:
ff:14:bc:9c:4b:4c:f3:33:3f:19:bc:d1:e7:45:76:3e:17:f9:
7c:b6:2a:10:84:9f:61:82:76:51:f2:ec:96:14:91:9f:13:20:
42:bd:ae:2c:7a:07:1b:c3:58:d5:1e:37:d8:83:41:59:80:bf:
a0:fa:24:5d:7b:1e:0e:b9:58:11:0b:e7:85:d8:ff:e2:72:08:
bf:5a:03:6a:31:55:58:61:86:00:ae:9e:4f:3b:6d:c8:d9:be:
ba:80:bb:ef:a5:c1:57:9e:50:3a:4b:45:63:32:67:40:84:81:
c4:e9:a3:29:eb:47:32:20:ad:a3:55:20:dc:93:f8:8a:5a:14:
58:bb:0b:c3:90:d8:d6:f3:e0:0a:a3:21:98:48:50:65:97:c1:
ae:16:6f:e6:08:17:20:47:18:e1:f9:7b:da:ec:c0:40:a3:9f:
e3:74:e1:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3TWxrLerNHN+WJZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk
YTQwMjM1YzMtZjIyNS00YjczLWIwMzAtMTVjY2YwYjVjNmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyISoMO00Au6llIjKmqqhjt6to81RMtQGrQ6Z
PqzRiJCOmhV7qEiUEKU+jFXpFkZevvUQysZILQy76pALJl8JtjYgvjYQBFUk9uMU
Y+71UQ+qVhTnsRmmtP5DYa4Z4aIDCrhxflRQLTcEUtx4O4m4OUT1ynxLUOrsWu6u
bkacYZznXG787OgJ3soq0OLFRZFLDTo+DSxCV8ML74yQkWByj1ZLy1lDftT3mB0Q
SJB62uiBOttuYS1E0c654WURHCniw1cP7L0gJd5iKxDEhzMTQyce7wFkcaPEtLfI
Xw15CQgMk8UMT3NKUfBqi8WCuqi6G03cwdVOYcAw42Z8d8H2pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEINrWJQ6oGYjiAP99SjAbcgRlgZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWQyMGI4ZDItOWRiOC0z
MzJlLWFhMzMtN2QxNTI2MDJlMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop7dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9aqn9OHpGdCYMV0UwZes1954rj++nfi4zKyyTCQxpaPnKRwwlM/5E8
IDJPgv1nprjGU4r9hf7EwV4VrLBl5vwNr1XAmODe5sHZDyKf+cjlLna9+NQ77S21
hv8UvJxLTPMzPxm80edFdj4X+Xy2KhCEn2GCdlHy7JYUkZ8TIEK9rix6BxvDWNUe
N9iDQVmAv6D6JF17Hg65WBEL54XY/+JyCL9aA2oxVVhhhgCunk87bcjZvrqAu++l
wVeeUDpLRWMyZ0CEgcTpoynrRzIgraNVINyT+IpaFFi7C8OQ2Nbz4AqjIZhIUGWX
wa4Wb+YIFyBHGOH5e9rswECjn+N04RE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:49:33 2026 by rpki-client