
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/968bf134-7c97-310f-af90-674d6a4c6d3c.roa
File: 968bf134-7c97-310f-af90-674d6a4c6d3c.roa (raw, json)
Hash identifier: VGTPFGKLoLN9suc92WW5UPy96mQIUp9QqM0XoqRP3g4=
Subject key identifier: 10:9F:76:50:9C:E4:CF:31:6C:5B:06:81:2C:08:00:7B:3D:6C:36:3C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D6AAA91DCC94247A04BB29D60
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/968bf134-7c97-310f-af90-674d6a4c6d3c.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 13335
IP address blocks: 162.158.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:91:dc:c9:42:47:a0:4b:b2:9d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=661e06df-4901-4950-9df1-034026ff758c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:69:ab:7c:0b:db:f1:c9:f6:23:41:50:88:
eb:a3:8c:90:ab:02:a9:74:e7:b5:7f:7c:1e:c3:3b:
23:1d:3a:e6:4f:ed:56:2c:51:58:ba:19:21:c2:63:
30:66:3e:db:45:76:05:72:73:ce:fe:72:94:de:fc:
16:78:1f:ec:ba:82:ee:d1:49:c1:6b:b4:d5:f5:40:
8e:16:4c:0d:0f:82:7c:c1:f6:65:21:10:bc:0d:9d:
bd:d6:f3:36:c7:19:3d:4e:82:a9:66:f2:38:e7:de:
b6:c0:b1:49:a9:86:07:69:05:5e:b1:12:7c:f4:29:
4a:a8:51:cb:b5:96:0b:75:c1:41:3b:8b:15:d4:6c:
20:ea:dc:ca:bb:e6:48:d4:df:14:d6:16:78:18:3e:
e6:e9:61:21:eb:bd:84:a9:66:ae:26:c7:8a:17:dc:
08:61:cd:3a:7e:a1:77:7d:e1:39:68:bd:49:be:6a:
c0:03:30:8f:82:5d:be:90:6f:e9:1c:31:25:0b:6a:
bc:6e:25:6e:aa:5a:8b:2d:ff:3b:20:3d:f1:4e:55:
d6:92:ea:58:1f:02:8a:d0:52:9a:f3:86:f5:d5:94:
c8:43:d2:64:38:7b:9e:5b:d5:d3:d8:3e:ff:65:5b:
3e:a8:b3:38:24:ee:08:f7:da:50:3d:85:58:cd:c6:
5c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9F:76:50:9C:E4:CF:31:6C:5B:06:81:2C:08:00:7B:3D:6C:36:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/968bf134-7c97-310f-af90-674d6a4c6d3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:e7:1a:ca:1a:6c:cb:cf:18:c0:43:d9:3f:b7:ea:5b:31:d3:
13:52:ab:ff:8b:97:3b:e7:08:b7:ce:cb:4b:d9:38:5e:cf:de:
91:c9:0c:b6:2a:f1:07:6a:48:95:46:54:dc:c7:c0:fa:6e:aa:
21:88:75:9d:29:c7:0b:a6:74:cf:b7:6d:85:2d:dd:60:76:e5:
1a:ce:26:f5:4d:ff:21:5d:63:9c:b5:c8:fc:db:ca:4a:98:8f:
da:26:fa:f8:3d:a8:05:c0:69:74:38:3c:c5:e4:04:9f:89:97:
41:93:df:7a:43:8b:2d:5e:94:a9:b0:16:ca:f2:c5:da:c2:40:
ca:77:c4:28:9a:24:14:f8:57:0d:94:77:69:4a:63:a6:b4:05:
86:00:88:cb:75:a6:01:c3:b6:7f:4e:a2:9b:99:bf:e1:ff:ee:
3c:54:55:06:c4:05:5b:5b:82:08:4a:ba:5a:d6:79:0e:2b:76:
76:1c:f2:8e:cf:db:0d:f2:31:02:07:a0:43:42:e0:63:0a:ff:
2b:e5:28:ff:82:3f:b3:bb:e9:72:25:75:88:de:e2:90:78:d0:
0d:86:33:61:6b:84:a5:ff:83:18:10:14:99:fb:08:a2:9d:13:
fb:0e:64:82:a0:c6:89:4d:d2:6f:e1:8e:fe:59:d8:9c:3f:e4:
70:d2:bd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:08:51 2026 by rpki-client