
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc6bed9e-a23b-3c56-b173-25e1153dd830.roa
File: dc6bed9e-a23b-3c56-b173-25e1153dd830.roa (raw, json)
Hash identifier: PLBDAbVAcRX9zh+87YgcKgra/F1H0O5t964yE1gY0AU=
Subject key identifier: 7E:7C:C5:E7:0E:75:36:3F:80:AF:EB:4A:0F:7F:ED:4C:87:5C:F0:A4
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BB45D472C56EBEAFF58F2F200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc6bed9e-a23b-3c56-b173-25e1153dd830.roa
Signing time: Fri 31 Oct 2025 13:00:39 +0000
ROA not before: Fri 31 Oct 2025 13:00:39 +0000
ROA not after: Thu 29 Jan 2026 14:00:39 +0000
asID: 13335
IP address blocks: 162.159.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b4:5d:47:2c:56:eb:ea:ff:58:f2:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 31 13:00:39 2025 GMT
Not After : Jan 29 14:00:39 2026 GMT
Subject: CN=df10fd0e-807d-432f-b82f-aa2eb4d87caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:04:3c:a4:0d:f3:83:28:51:0f:80:8d:c5:8b:
80:0c:ed:d1:c7:44:b8:ce:15:1c:fb:ec:7d:ef:b3:
55:15:31:54:4e:15:57:4f:7a:b5:c9:d2:1d:b3:a4:
99:7b:84:6f:6c:8a:92:80:c1:7e:9c:5f:fe:37:47:
69:13:f8:0f:0e:1f:6a:07:ef:ba:09:0d:6c:c5:00:
34:d7:f4:87:e2:cf:e2:7b:59:5e:3b:98:a8:b4:f7:
58:24:c2:8d:c3:89:a3:b3:61:dd:89:66:93:a4:c9:
d1:72:10:fc:28:d7:a2:22:16:4a:64:0d:1c:2c:a2:
55:19:19:e2:5e:09:39:09:8d:62:e8:f3:36:62:5b:
d5:82:46:5e:fe:1f:20:8f:79:33:01:b2:18:48:96:
33:d7:16:4d:41:11:1c:93:d4:4e:b4:fb:49:90:7a:
1f:d4:f4:75:85:af:fe:69:40:43:ed:1a:f3:97:b7:
6d:3d:94:96:f6:0e:42:1c:1f:c7:b6:53:ba:22:6b:
75:af:3e:89:26:b6:de:03:15:7a:9d:59:a7:d8:5d:
44:ba:18:cf:b9:a7:e5:42:7d:02:2f:c9:52:37:1a:
c2:74:ac:ea:f1:3d:0e:a6:d4:52:9d:68:0f:59:7c:
05:f7:0a:0a:c3:15:b8:7d:ee:bc:4f:b9:85:61:05:
2e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7C:C5:E7:0E:75:36:3F:80:AF:EB:4A:0F:7F:ED:4C:87:5C:F0:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc6bed9e-a23b-3c56-b173-25e1153dd830.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:76:d6:eb:c8:d9:a4:0c:75:6c:49:af:63:14:f7:96:62:a0:
d0:ae:07:f9:4b:79:65:22:45:47:ee:c1:de:51:fb:cc:e8:46:
8f:79:1a:36:6d:0d:5d:12:2c:2b:ef:04:78:99:db:76:92:46:
90:fa:d9:bf:20:af:0b:39:8e:5b:23:3a:77:9b:d2:38:59:a2:
6b:8d:09:71:7b:98:7c:01:39:f8:d6:32:02:b2:bb:b6:7b:f7:
f5:e3:2e:94:27:c7:b1:36:7a:c0:8d:8c:34:03:06:69:2a:09:
b4:ae:fa:e5:83:e8:b0:b5:36:76:09:47:cf:02:07:2e:42:db:
0f:e4:d0:19:8b:22:1b:7d:57:af:05:81:d2:bf:4e:ec:ad:78:
82:8f:63:43:82:4d:d7:1c:c4:5c:19:49:39:70:e0:76:2a:97:
89:b9:cc:b8:1a:10:33:25:e1:77:a5:1f:17:b4:0e:ca:4d:ca:
8a:2d:5f:6d:21:93:36:ae:5d:3c:fa:ba:d0:03:80:36:e1:a6:
68:e5:71:0c:50:ef:9c:3c:cf:23:97:5e:d1:5b:59:92:ce:b7:
4d:bf:6a:a7:81:fb:61:46:31:b8:e1:f7:2a:61:5b:70:93:06:
cc:20:63:9d:1e:34:7b:d5:93:df:bf:a0:d0:93:73:e2:80:79:
13:b7:31:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:39:18 2025 by rpki-client