
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a10e5add-57fa-3890-a192-5a380ee8a028.roa
File: a10e5add-57fa-3890-a192-5a380ee8a028.roa (raw, json)
Hash identifier: B7K+azshZMh8wH3WjjbjASTVoY5dTYNqmF44wV/Ah5Q=
Subject key identifier: B6:BE:9E:67:62:51:21:73:FD:3F:C1:78:EC:9C:74:62:D4:19:F7:8B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D703FF338A107F5CC7249F390
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a10e5add-57fa-3890-a192-5a380ee8a028.roa
Signing time: Wed 08 Apr 2026 13:00:33 +0000
ROA not before: Wed 08 Apr 2026 13:00:33 +0000
ROA not after: Tue 07 Jul 2026 13:00:33 +0000
asID: 13335
IP address blocks: 198.41.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:70:3f:f3:38:a1:07:f5:cc:72:49:f3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 8 13:00:33 2026 GMT
Not After : Jul 7 13:00:33 2026 GMT
Subject: CN=625ef48c-2d5f-443a-8093-993efb0db3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3f:39:e9:db:7a:0d:4a:b9:3b:02:51:c1:a3:
df:05:36:a0:14:6c:57:70:e7:be:01:6b:0f:da:0b:
20:e4:e1:31:1c:b2:9b:e6:de:94:bd:ff:b9:74:b6:
6a:ab:17:dc:91:82:ba:4b:91:5f:95:c2:48:15:00:
15:99:71:44:c8:2b:57:ce:55:5f:51:dc:0a:85:06:
c8:35:2e:2f:40:0a:88:e2:d4:b0:3b:07:d6:ac:ef:
43:1a:00:6c:bc:98:9e:df:45:13:19:fd:35:c1:dd:
6b:b2:68:2b:39:e0:44:ba:42:15:ad:ff:2e:b3:43:
f9:a9:19:70:5b:f5:22:a8:8b:e3:90:7b:89:a9:3d:
85:fa:9b:b4:dd:80:f8:6c:6c:a7:c8:f3:74:25:55:
53:8d:96:9e:bb:ed:4b:65:e1:c6:ee:be:9e:aa:3e:
fe:e3:1e:14:54:3a:74:72:39:7c:dc:8a:b8:1f:d6:
8e:67:6a:b4:57:57:49:77:5a:29:b1:7e:3b:57:18:
91:a2:6a:ab:9d:ea:5a:e0:7b:09:b6:47:8b:bc:87:
ce:c7:80:6f:b2:f5:4d:b4:dd:f3:0c:de:92:45:db:
c5:3c:8f:42:8c:d1:1d:25:92:8e:43:9a:d5:04:19:
54:ba:fa:00:62:fd:c9:ce:ce:27:4e:96:1a:3d:0d:
d6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BE:9E:67:62:51:21:73:FD:3F:C1:78:EC:9C:74:62:D4:19:F7:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a10e5add-57fa-3890-a192-5a380ee8a028.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:41:95:35:2b:4e:37:4e:42:d1:c6:91:4f:77:be:82:a3:3d:
22:2d:48:57:0d:49:12:54:9a:9c:29:16:af:0e:42:8f:49:7a:
2a:0e:cd:d4:6e:55:3b:4e:2f:4d:8d:ba:ea:17:6b:a4:58:f9:
e3:c8:b5:e8:96:2a:6c:76:a9:20:dc:63:ed:f6:43:9a:8c:a6:
34:ed:44:08:81:c0:c2:1d:b9:3a:8c:d2:ee:c3:7f:85:ac:37:
e5:73:fa:52:f3:58:27:3d:15:43:b1:b2:95:d6:92:28:c5:ee:
b4:76:8f:78:a2:20:48:93:35:97:84:48:b4:da:de:20:45:1f:
df:a0:b5:12:34:4b:f4:5c:dd:63:45:46:f0:fe:aa:0f:c7:16:
12:aa:b4:1d:f1:70:1c:34:31:c0:e5:a0:41:4d:3e:4c:06:55:
a6:12:49:04:03:ef:8a:c9:3e:fa:e7:7f:1c:a0:76:b8:a3:3f:
14:92:62:d3:bb:aa:95:aa:4b:2f:01:51:bc:b0:3b:07:3d:89:
17:05:f9:5e:81:8a:25:cc:94:5f:80:01:82:9c:bc:8e:2e:0e:
81:b1:36:1c:f9:68:05:21:02:db:d6:06:ac:87:6b:00:c9:8a:
3c:d2:9b:d6:a9:a5:6d:0c:42:52:6e:50:61:38:79:c5:f2:9c:
35:ed:af:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:16:41 2026 by rpki-client