
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdfa307b-4d25-3d25-acdf-7c0672499955.roa
File: bdfa307b-4d25-3d25-acdf-7c0672499955.roa (raw, json)
Hash identifier: zIdpaXmtHwWQJtleFyyzFRgZBRCc2Deb9yDHESIxodc=
Subject key identifier: 56:D2:3B:6E:0B:9F:A9:50:F7:98:90:1D:81:6B:DD:FA:08:C4:81:7D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D67DFE094EE6D973D527B4A80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdfa307b-4d25-3d25-acdf-7c0672499955.roa
Signing time: Sun 05 Apr 2026 13:00:31 +0000
ROA not before: Sun 05 Apr 2026 13:00:31 +0000
ROA not after: Sat 04 Jul 2026 13:00:31 +0000
asID: 13335
IP address blocks: 108.162.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:67:df:e0:94:ee:6d:97:3d:52:7b:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 5 13:00:31 2026 GMT
Not After : Jul 4 13:00:31 2026 GMT
Subject: CN=0db8aed1-18dc-4832-9e77-68be67735c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:5c:cf:67:04:1b:2e:a6:99:07:ce:0d:c6:
6b:ba:dc:98:ff:1c:47:a9:42:f4:73:f2:1e:99:df:
c9:9e:a7:94:46:1c:00:79:6a:fc:61:b2:d4:8e:82:
44:b9:87:fd:04:e7:68:ef:72:e5:53:bc:c1:ce:1e:
8c:bf:9a:43:f7:33:14:7f:1f:2f:c7:95:c7:74:f2:
ff:ca:6f:b8:01:cf:65:35:38:ff:3c:cf:ce:35:67:
bd:95:89:46:94:91:0e:7e:a7:d0:4f:ba:70:80:87:
65:5e:26:f1:fa:b1:ad:b8:bf:5b:76:f4:91:2a:29:
34:66:4f:33:7b:30:07:07:9f:86:34:47:9b:7d:64:
af:49:f7:cd:b7:d5:a0:72:fe:20:4f:07:e3:86:6b:
ba:92:1a:6b:cb:55:9b:c2:08:5f:3e:a2:b3:ca:d5:
c9:56:f4:44:80:eb:d5:e9:4d:9a:f2:3a:40:93:02:
35:2a:0a:b0:ad:1c:0e:9b:2b:d7:9a:5e:ff:c9:11:
c1:bb:44:e8:01:77:db:0b:e6:bd:72:e9:b7:be:5c:
41:62:c6:d1:cf:83:36:62:9b:2f:58:bf:b5:56:e8:
a5:31:f8:4f:07:8c:c7:9f:39:70:ab:35:1b:3d:ac:
c6:02:05:1d:b9:e1:a9:76:56:7d:00:1c:cd:b8:dd:
d7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D2:3B:6E:0B:9F:A9:50:F7:98:90:1D:81:6B:DD:FA:08:C4:81:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdfa307b-4d25-3d25-acdf-7c0672499955.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
108.162.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:97:bc:2b:8f:10:39:50:f5:99:f3:22:4d:03:08:28:f1:3d:
f0:51:19:e7:22:e7:2a:fb:a0:cf:38:49:05:15:cb:fe:76:e8:
0f:b9:8b:9c:93:1d:95:13:2e:2d:58:c9:33:1b:48:e9:27:04:
a0:50:20:1f:eb:14:93:41:95:15:42:a8:45:8f:49:bf:06:e9:
93:ce:6f:24:e1:b9:09:bb:b8:41:d4:25:63:0d:ea:8f:cc:3a:
d1:3b:e5:8b:8f:2f:d5:e1:1b:55:94:fe:30:e6:f8:0d:dd:26:
ef:12:a5:99:3f:d2:ac:a9:01:e0:b1:4b:27:d9:c6:fb:c2:85:
fc:a3:9a:58:a6:e9:f8:6a:3c:79:32:26:2d:e3:dc:d4:ca:54:
6b:49:38:49:fe:76:50:1f:71:e6:de:0d:86:9c:93:c2:83:80:
55:d2:4c:18:1c:52:f4:0b:e7:34:bd:52:c9:e2:d1:34:ac:a1:
6a:89:33:c4:bc:33:d3:47:94:5b:c4:f9:f6:92:44:9f:e9:50:
c7:d4:45:da:fb:6c:b0:19:c5:cd:cc:f9:e3:35:18:75:c1:e1:
dc:0e:75:6b:fa:57:5a:df:c4:c3:a4:a4:53:38:ad:06:20:70:
76:c0:36:26:54:98:6b:b0:19:70:72:c9:58:10:64:6f:cd:95:
c9:ad:35:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:29:37 2026 by rpki-client