
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/823621b8-924d-3a4b-af59-2b62b286cb50.roa
File: 823621b8-924d-3a4b-af59-2b62b286cb50.roa (raw, json)
Hash identifier: eVMd7nPaJa7/3aGgOjVPvUhdETFf1rIdVccx0oX0FU8=
Subject key identifier: A4:9E:77:F5:8E:1A:2C:66:98:C4:44:66:67:94:32:33:70:0A:3F:BA
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D7A054CC6EB54AF2D2EA04680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/823621b8-924d-3a4b-af59-2b62b286cb50.roa
Signing time: Sun 12 Apr 2026 01:00:24 +0000
ROA not before: Sun 12 Apr 2026 01:00:24 +0000
ROA not after: Sat 11 Jul 2026 01:00:24 +0000
asID: 132892
IP address blocks: 198.41.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7a:05:4c:c6:eb:54:af:2d:2e:a0:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 12 01:00:24 2026 GMT
Not After : Jul 11 01:00:24 2026 GMT
Subject: CN=82e5e889-4bab-4d54-ac77-e78bb6485ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:a5:c7:7e:fb:1a:04:e1:c0:b6:b1:f4:90:
c9:ed:8e:96:66:c4:06:a7:56:5a:e1:42:6c:fd:dc:
e9:e2:50:6c:e2:79:6e:6c:5c:e4:dd:22:c9:b8:6c:
6d:6e:62:de:01:1c:4e:10:28:51:bb:20:2a:67:fe:
15:76:8e:e9:fa:c5:d5:ae:c3:0b:82:38:ea:6e:e7:
17:85:cc:85:a5:20:27:eb:f7:d7:14:7f:22:0c:c6:
10:7c:2c:3a:c8:c0:be:a6:f5:b7:eb:bf:b6:c5:17:
48:18:6d:71:d1:91:af:00:40:5c:5d:77:2f:2a:8b:
97:c3:6e:61:5a:ba:9f:53:fd:b2:35:31:1a:b9:fc:
54:ed:56:d9:f9:c2:36:8d:26:84:1b:4f:8c:65:97:
90:84:7a:77:64:cc:aa:99:15:cc:82:8c:e7:9d:f1:
ef:3a:a7:67:23:f6:6d:3e:58:b2:cf:7c:70:cd:84:
8b:fa:52:12:d3:51:a3:20:9c:7c:6b:40:a5:6b:d9:
39:e0:e9:cf:89:4a:74:d9:d3:85:37:f8:32:cc:43:
80:d5:e2:db:8d:df:02:2d:be:b6:0b:a5:d1:25:5c:
6e:e5:36:47:b6:d1:09:6d:76:cb:0f:50:55:bb:47:
de:af:70:f6:5f:f9:8d:a9:11:0b:42:9d:45:ad:82:
08:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9E:77:F5:8E:1A:2C:66:98:C4:44:66:67:94:32:33:70:0A:3F:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/823621b8-924d-3a4b-af59-2b62b286cb50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:c2:e9:5e:8d:36:37:0e:59:50:54:85:9c:15:99:9b:5a:75:
44:6b:73:d3:d8:fc:3b:f6:c7:e6:5d:ec:ca:da:b9:5b:c6:2c:
11:c1:51:2a:d7:9b:42:6e:f0:40:a9:7f:39:18:68:65:e4:30:
4a:65:49:c8:36:37:50:2c:3d:67:d6:b0:6b:da:a8:83:0e:8d:
3d:58:f4:0a:8e:e4:5c:3a:46:06:fa:61:4e:7d:9d:7f:8a:b4:
39:63:82:68:d2:ee:9f:f0:e0:a3:51:df:f3:50:92:11:ea:c4:
74:24:86:ed:5f:35:8b:39:22:a2:c9:16:84:6f:41:11:ef:8b:
55:34:40:c7:94:3a:0e:da:2a:76:4d:8e:8e:f1:44:36:49:9c:
92:66:87:c8:c5:63:ef:0e:db:75:24:ac:bf:da:ce:12:0e:55:
48:79:ea:24:70:d2:ad:cf:b7:97:58:da:b1:95:77:84:13:cb:
0f:62:ac:b7:82:a3:16:53:3d:c5:2b:e4:2f:63:cb:02:d7:00:
17:5d:26:2e:0e:45:1b:d7:cc:62:08:50:89:64:cf:40:6d:24:
bd:20:d4:18:88:dc:91:d9:d8:b0:ed:eb:19:09:23:b6:b8:fe:
c0:4a:83:4a:ee:9e:15:96:67:08:17:df:d4:e9:0b:c5:e2:75:
24:37:66:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BUzG61SvLS6gRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk
ODJlNWU4ODktNGJhYi00ZDU0LWFjNzctZTc4YmI2NDg1YWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv6lx377GgThwLax9JDJ7Y6WZsQGp1Za4UJs
/dzp4lBs4nlubFzk3SLJuGxtbmLeARxOEChRuyAqZ/4Vdo7p+sXVrsMLgjjqbucX
hcyFpSAn6/fXFH8iDMYQfCw6yMC+pvW367+2xRdIGG1x0ZGvAEBcXXcvKouXw25h
WrqfU/2yNTEaufxU7VbZ+cI2jSaEG0+MZZeQhHp3ZMyqmRXMgoznnfHvOqdnI/Zt
Pliyz3xwzYSL+lIS01GjIJx8a0Cla9k54OnPiUp02dOFN/gyzEOA1eLbjd8CLb62
C6XRJVxu5TZHttEJbXbLD1BVu0fer3D2X/mNqRELQp1FrYIIEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKSed/WOGixmmMREZmeUMjNwCj+6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODIzNjIxYjgtOTI0ZC0z
YTRiLWFmNTktMmI2MmIyODZjYjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxin+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH3C6V6NNjcOWVBUhZwVmZtadURrc9PY/Dv2x+Zd7MrauVvGLBHBUSrX
m0Ju8ECpfzkYaGXkMEplScg2N1AsPWfWsGvaqIMOjT1Y9AqO5Fw6Rgb6YU59nX+K
tDljgmjS7p/w4KNR3/NQkhHqxHQkhu1fNYs5IqLJFoRvQRHvi1U0QMeUOg7aKnZN
jo7xRDZJnJJmh8jFY+8O23UkrL/azhIOVUh56iRw0q3Pt5dY2rGVd4QTyw9irLeC
oxZTPcUr5C9jywLXABddJi4ORRvXzGIIUIlkz0BtJL0g1BiI3JHZ2LDt6xkJI7a4
/sBKg0runhWWZwgX39TpC8XidSQ3Zrg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:51 2026 by rpki-client