
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ebbf01b-3a2c-3e43-901d-5efca81a832b.roa
File: 8ebbf01b-3a2c-3e43-901d-5efca81a832b.roa (raw, json)
Hash identifier: 0u7d46UCkMRQbBiMjaN+dMh1NbNdMj4OvWCv1Heg/nk=
Subject key identifier: AE:4E:D8:51:FE:49:29:8F:42:EB:13:05:12:54:3F:CD:03:6E:45:A6
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584CFB1CFFE294727C921116B880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ebbf01b-3a2c-3e43-901d-5efca81a832b.roa
Signing time: Wed 25 Feb 2026 14:00:39 +0000
ROA not before: Wed 25 Feb 2026 14:00:39 +0000
ROA not after: Tue 26 May 2026 13:00:39 +0000
asID: 394536
IP address blocks: 198.41.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fb:1c:ff:e2:94:72:7c:92:11:16:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 25 14:00:39 2026 GMT
Not After : May 26 13:00:39 2026 GMT
Subject: CN=3d8ba1dd-f4ea-4377-8a44-3ccf9f1b5f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6a:e1:2e:49:97:6f:b2:66:0a:8a:08:4a:35:
45:55:81:a1:b2:34:4c:bb:43:eb:ba:4a:78:04:b9:
2b:07:74:fb:d2:1d:ce:c6:c7:ef:eb:c6:72:92:9f:
c7:26:8d:65:d4:57:c2:28:18:a6:89:3b:d3:44:4c:
60:55:e8:5d:ef:ae:dd:c1:74:a3:85:8a:c7:60:5f:
39:0c:65:cc:b8:e7:fe:27:3b:11:61:ca:ce:6b:51:
2e:79:e0:1e:d5:d3:ab:78:55:ac:5a:ab:b7:59:36:
c5:1a:74:86:77:b8:c5:06:de:8f:c8:6c:39:44:d6:
2a:42:69:7c:40:d7:71:2d:51:c1:08:83:00:92:a8:
1b:90:9b:48:81:c0:1b:b0:cf:4e:7f:bc:e4:7d:72:
5a:d6:cb:7b:e7:8d:86:ee:5b:e1:12:f4:d2:84:9e:
59:02:05:f7:15:c7:17:be:65:35:06:22:64:54:f9:
c5:b4:9f:b4:a8:14:9d:f9:36:a7:e6:a1:77:c3:1e:
ee:3a:b5:d8:aa:b4:8f:7a:21:99:4a:0a:39:21:24:
61:30:39:c3:e1:61:d2:a4:24:47:9f:54:54:65:21:
03:01:02:b1:33:3b:a5:a5:aa:36:66:e3:02:99:00:
6b:b1:47:4b:7e:97:4f:5b:af:9f:bc:97:1a:22:ff:
df:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4E:D8:51:FE:49:29:8F:42:EB:13:05:12:54:3F:CD:03:6E:45:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ebbf01b-3a2c-3e43-901d-5efca81a832b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:04:cf:73:56:49:ec:f3:b4:5b:7d:1e:e8:16:6a:f3:39:4e:
9c:f7:b0:6d:a3:a3:b3:95:1e:8c:f6:b7:d4:e7:6e:25:e7:49:
f5:93:ef:96:7f:a1:f8:b4:ca:9a:03:83:60:40:de:cd:73:60:
f3:e9:58:b5:ac:89:a1:c0:38:ab:22:d2:a6:00:bb:6c:c8:74:
79:d7:c3:0c:95:8e:14:bb:7b:61:a1:ee:f3:b2:08:40:c2:a9:
20:90:6a:84:c2:24:07:ca:51:4d:cb:f0:64:69:03:f6:80:c5:
3b:18:34:2c:e7:78:ec:8c:78:7a:26:16:e2:2d:22:9b:d0:81:
33:b1:33:2e:15:d4:8e:21:9b:07:e6:ee:cd:47:aa:ed:3c:d8:
5b:a4:db:a7:59:da:51:17:3e:a5:14:fa:7f:ce:a8:a6:4e:6f:
21:b4:99:a7:af:8e:bb:6a:85:8b:22:6e:b8:ae:b1:28:29:7e:
6c:dc:e9:8e:1a:cb:d9:99:d3:89:64:fb:a6:09:c3:09:0d:c1:
cc:86:fe:fd:32:cf:e2:01:aa:56:a2:c4:7f:80:91:b5:39:1b:
7e:74:ea:ce:5b:7d:00:6c:09:fa:fb:83:c0:7c:01:36:61:9b:
f6:fc:03:b6:91:48:69:5f:26:b8:9a:bf:ac:23:03:c5:98:17:
ce:4b:2a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:15:43 2026 by rpki-client