
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cfddd683-2c77-339f-8d0c-03f199bcbaf7.roa
File: cfddd683-2c77-339f-8d0c-03f199bcbaf7.roa (raw, json)
Hash identifier: K0JlQHtLJ5IShyZZJXOHr3nx0Td3ncIwfRxI8OEjRj0=
Subject key identifier: 95:76:60:E8:C6:98:65:8B:12:17:45:78:6E:77:EA:93:2A:06:CA:7C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584F093D007CEC133B2B749EA420
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cfddd683-2c77-339f-8d0c-03f199bcbaf7.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 13335
IP address blocks: 162.158.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3d:00:7c:ec:13:3b:2b:74:9e:a4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=74c9970b-f6a1-4476-b263-40c5c4c46e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:c8:0a:12:89:e8:c1:cb:cf:60:dd:39:b3:
52:73:2a:d0:01:02:88:8c:9b:bc:81:ca:f3:4e:ee:
59:80:49:ab:57:73:9e:97:a3:ca:10:a9:f4:42:4f:
26:8f:c5:d8:76:c9:f3:78:01:e6:96:83:70:2a:da:
65:0b:84:f2:5c:aa:20:21:f2:29:10:7b:f7:18:ba:
98:b4:a8:97:b5:d6:5e:5b:86:b2:57:33:78:af:1c:
c7:29:0a:21:19:ac:dd:d5:86:3c:59:fd:72:02:77:
a7:c6:58:c9:ca:b2:da:0f:b7:01:34:6d:ce:4f:58:
dd:c1:6c:b8:3b:dc:31:c1:33:74:5d:ae:b6:51:21:
d8:f5:4e:ba:44:6e:5d:d0:67:47:19:dc:22:6b:7b:
7a:81:eb:63:16:1f:f7:af:13:f0:38:de:e9:ea:da:
3b:15:3f:22:ef:bb:dc:f4:bf:49:c2:f4:29:85:0c:
85:cb:20:3c:43:cb:ba:a3:79:97:74:24:3b:00:5f:
a2:45:ac:38:e7:58:af:3c:96:1d:26:f0:a4:92:a8:
fe:28:e3:8e:ef:c0:d7:ff:02:43:ad:bb:2f:40:6a:
eb:e2:43:8b:21:c5:d1:8d:b0:2c:f6:90:c1:71:e3:
b9:51:f8:c0:d7:59:1d:82:fe:ff:ba:a4:39:b7:54:
12:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:76:60:E8:C6:98:65:8B:12:17:45:78:6E:77:EA:93:2A:06:CA:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cfddd683-2c77-339f-8d0c-03f199bcbaf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:9e:ec:68:d7:ab:48:9c:eb:4b:42:33:c6:46:b3:90:4b:ff:
33:01:c0:33:30:fb:85:69:fa:cd:56:cb:86:e9:ec:aa:13:b6:
85:23:eb:59:a3:fd:fe:9d:ad:9d:f8:aa:27:b8:14:48:aa:0a:
29:79:77:5a:09:e6:36:20:2c:c2:59:44:47:71:11:4e:15:95:
7e:9c:e3:e0:de:92:53:0e:54:30:4e:34:7b:f3:06:95:48:53:
8c:51:58:95:d0:9c:49:12:21:ff:c0:2f:4b:64:8f:97:12:2c:
ff:5d:c9:96:57:15:84:3d:df:ac:1e:54:f0:61:72:af:3b:80:
8f:6d:97:fe:b1:e5:a5:46:13:1f:2e:56:3e:25:76:d8:bd:eb:
20:6c:81:4f:8d:9e:e0:49:ed:2a:fe:03:7f:7f:52:fe:3d:b3:
d7:5f:e9:92:04:ba:91:86:76:68:84:8b:27:c9:e4:15:b8:ab:
bc:f8:15:66:56:a3:6f:0b:0f:11:92:2c:1e:c6:fa:aa:7e:af:
87:2d:42:1f:d6:32:c1:a0:08:94:ad:eb:35:8a:4c:a6:0b:12:
8e:e9:44:fd:b5:56:55:66:d2:9c:93:72:3a:13:67:30:5e:6e:
88:45:d0:9e:32:a0:7a:0a:e2:c7:9c:f1:26:00:e3:38:5b:a7:
98:37:a5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:32:05 2026 by rpki-client