
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8dd4d43b-40e4-3083-a8d2-5088e71cc472.roa
File: 8dd4d43b-40e4-3083-a8d2-5088e71cc472.roa (raw, json)
Hash identifier: Ory+h/HH5nYKo2QYY7elKd5+L3ZItqmSQGeb14Y+k/w=
Subject key identifier: 30:A2:6C:B9:9F:7A:C0:C0:5F:85:A6:DC:DF:87:C9:C7:AA:29:A8:22
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584C910703EC48E3E501A4C48070
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8dd4d43b-40e4-3083-a8d2-5088e71cc472.roa
Signing time: Sun 18 Jan 2026 14:00:39 +0000
ROA not before: Sun 18 Jan 2026 14:00:39 +0000
ROA not after: Sat 18 Apr 2026 13:00:39 +0000
asID: 13335
IP address blocks: 198.41.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:91:07:03:ec:48:e3:e5:01:a4:c4:80:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jan 18 14:00:39 2026 GMT
Not After : Apr 18 13:00:39 2026 GMT
Subject: CN=6d686ad2-09ce-4632-9ac0-cc3749c42cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8c:73:bf:9c:a8:28:63:57:dd:4e:7c:72:69:
fe:7b:76:c0:ac:dc:88:9d:2e:c9:b2:31:75:76:8e:
85:f2:ab:06:cf:99:8b:1a:f9:03:5e:69:26:84:11:
c6:51:9f:ae:82:f3:e2:63:21:21:e5:31:64:99:3e:
65:8d:c0:e4:41:34:ed:74:43:bb:56:70:0a:8c:ed:
60:f6:24:98:16:83:48:80:87:fd:dc:24:13:f9:c2:
c1:5f:02:21:3a:ed:9b:01:77:52:94:b1:17:92:50:
4d:97:bf:06:2d:f6:75:97:36:5f:0f:e2:a0:ae:b7:
a6:2e:2d:b0:c8:5c:8c:d2:2e:95:79:1f:6d:9c:e8:
ea:3d:d6:7b:b6:07:f8:e5:e5:16:05:96:69:3e:dd:
24:d5:55:87:0d:79:44:bc:6e:e5:e1:04:fd:3b:21:
d8:f7:9a:bc:09:19:a1:87:a2:f4:3c:f8:a6:e2:b5:
25:ab:1b:59:b6:08:12:c5:02:81:e3:4a:f1:d1:1d:
6e:1e:7b:b8:ef:6d:83:4b:21:87:3f:4d:8a:f6:64:
01:6c:01:b2:47:c9:19:67:be:73:0d:98:cb:23:4f:
8c:03:05:0c:c8:13:f0:e2:a5:12:de:00:89:59:3d:
29:91:5f:5b:db:a9:02:a2:9e:ab:b7:92:dc:42:80:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A2:6C:B9:9F:7A:C0:C0:5F:85:A6:DC:DF:87:C9:C7:AA:29:A8:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8dd4d43b-40e4-3083-a8d2-5088e71cc472.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:7a:b6:20:c5:e9:4b:90:c5:19:30:4a:7a:47:78:ca:27:ba:
52:a5:3a:15:94:e5:b4:cb:ef:cb:a4:58:35:62:9c:35:32:9a:
3f:67:ad:c0:98:b8:1a:89:89:d8:d5:51:1f:fb:83:bf:a3:8e:
63:de:af:1e:83:51:8d:06:76:98:1b:72:31:7d:0d:5a:9e:b6:
d8:1a:b1:0e:54:94:88:58:bb:54:54:09:3c:de:3d:9c:ad:ff:
7a:83:8b:fa:cf:fd:25:4f:91:94:1c:a9:79:be:3a:88:f4:96:
80:34:ce:fd:b1:85:d1:cd:9d:c1:5c:b3:30:fc:ed:78:e0:9b:
71:ce:50:c2:0b:71:d0:05:29:b0:48:0d:24:93:a3:e7:a1:07:
c6:07:9c:42:48:f4:11:ae:8a:f1:1c:e5:c7:77:8a:4f:57:47:
e1:16:90:b2:00:00:7e:9e:ee:4f:64:a4:f9:82:b1:ff:6c:76:
bc:24:46:4a:06:da:2c:e5:6b:04:1a:09:f6:45:18:65:fb:0e:
5a:5c:fa:3e:ff:cc:6f:2e:ec:00:dc:2b:e6:e5:4e:ea:88:6a:
fc:2c:2f:bf:9b:b5:5e:be:0e:cf:88:03:50:db:86:ba:28:5c:
e1:ea:d3:0e:9e:29:ca:d7:76:6c:61:fd:1d:30:4f:30:47:78:
96:49:42:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyRBwPsSOPlAaTEgHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDExODE0MDAzOVoXDTI2MDQxODEzMDAzOVowLzEtMCsGA1UEAxMk
NmQ2ODZhZDItMDljZS00NjMyLTlhYzAtY2MzNzQ5YzQyY2M5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYxzv5yoKGNX3U58cmn+e3bArNyInS7JsjF1
do6F8qsGz5mLGvkDXmkmhBHGUZ+ugvPiYyEh5TFkmT5ljcDkQTTtdEO7VnAKjO1g
9iSYFoNIgIf93CQT+cLBXwIhOu2bAXdSlLEXklBNl78GLfZ1lzZfD+KgrremLi2w
yFyM0i6VeR9tnOjqPdZ7tgf45eUWBZZpPt0k1VWHDXlEvG7l4QT9OyHY95q8CRmh
h6L0PPim4rUlqxtZtggSxQKB40rx0R1uHnu4722DSyGHP02K9mQBbAGyR8kZZ75z
DZjLI0+MAwUMyBPw4qUS3gCJWT0pkV9b26kCop6rt5LcQoDHbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDCibLmfesDAX4Wm3N+HyceqKagiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGRkNGQ0M2ItNDBlNC0z
MDgzLWE4ZDItNTA4OGU3MWNjNDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIN6tiDF6UuQxRkwSnpHeMonulKlOhWU5bTL78ukWDVinDUymj9nrcCY
uBqJidjVUR/7g7+jjmPerx6DUY0GdpgbcjF9DVqettgasQ5UlIhYu1RUCTzePZyt
/3qDi/rP/SVPkZQcqXm+Ooj0loA0zv2xhdHNncFcszD87Xjgm3HOUMILcdAFKbBI
DSSTo+ehB8YHnEJI9BGuivEc5cd3ik9XR+EWkLIAAH6e7k9kpPmCsf9sdrwkRkoG
2izlawQaCfZFGGX7Dlpc+j7/zG8u7ADcK+blTuqIavwsL7+btV6+Ds+IA1Dbhroo
XOHq0w6eKcrXdmxh/R0wTzBHeJZJQmA=
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:01:38 2026 by rpki-client