
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4cab4e9-317f-3d18-8f78-9599c2dd9701.roa
File: a4cab4e9-317f-3d18-8f78-9599c2dd9701.roa (raw, json)
Hash identifier: sn3PHx+oMVxh1LWaJFxfjaBCFvJzckXsYIp178LFO5A=
Subject key identifier: 42:A7:6D:10:40:89:E9:9F:4D:7A:B0:D3:D6:0F:69:25:3B:33:99:B7
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584CCA41D96F676D9A582C9CDF20
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4cab4e9-317f-3d18-8f78-9599c2dd9701.roa
Signing time: Sun 08 Feb 2026 02:00:32 +0000
ROA not before: Sun 08 Feb 2026 02:00:32 +0000
ROA not after: Sat 09 May 2026 01:00:32 +0000
asID: 13335
IP address blocks: 162.159.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ca:41:d9:6f:67:6d:9a:58:2c:9c:df:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 8 02:00:32 2026 GMT
Not After : May 9 01:00:32 2026 GMT
Subject: CN=bc479324-9cd3-47e8-a599-f4ae35fb7f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:ec:45:0c:7a:5b:eb:30:f9:84:9e:29:94:
8b:22:ec:d6:6e:48:d3:8f:4a:5a:35:b3:71:de:a6:
0a:01:c4:c2:c9:25:73:d1:2b:11:a1:b3:41:a2:12:
cb:79:a8:4b:c9:d4:ad:6b:2a:da:50:a4:90:75:7f:
88:a9:34:e0:ec:f4:3e:1c:b9:47:9f:ee:d3:7c:78:
04:5c:20:f0:c6:e7:55:80:30:28:02:af:2b:dc:c4:
48:b4:da:23:e5:d7:bc:b6:3a:c8:00:ed:52:c5:39:
6e:18:cc:07:31:ce:7c:86:79:89:a9:9b:1e:93:ef:
18:91:12:8d:6f:61:c7:86:2e:06:d0:00:fe:ea:98:
67:e5:26:09:19:55:37:28:5b:b9:fe:53:11:41:b8:
41:75:99:a3:ff:7b:94:8d:49:65:38:f5:27:ac:f5:
d4:a7:82:20:c1:47:49:94:c6:38:23:c2:e6:93:a5:
39:11:c0:73:9f:60:23:59:bd:fb:53:99:59:c0:37:
a5:bf:c9:38:9f:dd:43:c8:70:e0:47:6d:68:82:bf:
8a:c3:eb:d9:66:74:fd:71:1d:6d:e0:a1:a0:d8:9e:
f7:49:59:25:3b:4f:da:1b:50:bb:74:ba:31:60:ab:
49:24:d4:be:b1:91:04:95:5c:a3:4d:4f:c1:d3:c7:
a9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A7:6D:10:40:89:E9:9F:4D:7A:B0:D3:D6:0F:69:25:3B:33:99:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4cab4e9-317f-3d18-8f78-9599c2dd9701.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:dd:64:b3:9f:f7:5e:3c:13:01:97:09:26:f0:38:42:44:75:
a4:68:e0:03:d5:89:57:b6:b5:a2:49:ad:bc:8e:58:05:55:12:
26:78:f6:fe:3c:53:34:8b:5a:56:cd:51:11:de:46:cf:f4:97:
0f:5e:1b:ab:bf:08:ac:ff:2d:d6:d6:61:a4:47:ec:24:76:46:
03:eb:f6:81:72:99:b5:74:47:0b:14:3a:c7:9b:58:de:e5:df:
6c:36:ca:e3:63:80:74:a8:24:65:03:f3:25:5f:1d:37:1f:d5:
f8:43:59:9a:ec:ed:b8:a4:27:16:4d:b3:37:54:82:7f:6e:91:
7e:83:84:78:8f:65:a6:a4:41:5c:5f:e4:12:b5:2a:62:f3:8c:
b0:41:c3:0d:73:7a:fb:8d:7a:7d:78:16:0e:b7:c6:cc:42:10:
14:7d:d3:c2:34:b6:cf:33:5c:4b:0e:ca:a0:7d:a3:83:f3:e5:
d0:16:b9:bb:e6:fa:01:d4:96:e6:6e:61:33:53:d3:e8:41:8a:
6b:d4:86:37:46:78:84:56:46:f1:cb:9c:9c:a0:ac:d9:c6:83:
7e:df:06:5f:f0:6d:1e:bb:90:eb:fd:47:1b:d5:26:cf:d0:d3:
52:56:31:52:2e:06:48:ab:b5:f0:fe:7f:09:62:5a:c6:c7:06:
9c:22:f6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:57:30 2026 by rpki-client