
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc9cfdf5-bd35-35ec-a9e9-eb6a0fa5a038.roa
File: dc9cfdf5-bd35-35ec-a9e9-eb6a0fa5a038.roa (raw, json)
Hash identifier: OwcDhfyqSqhH64aIgtIY9YB7ctQyjXWSbhTLK+B3TI4=
Subject key identifier: 75:CD:3D:C4:41:4C:27:B3:B1:75:F1:60:F3:77:0F:74:16:1A:CE:C5
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D6AAA93CDF015DC7337AC1B00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc9cfdf5-bd35-35ec-a9e9-eb6a0fa5a038.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 13335
IP address blocks: 162.158.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:93:cd:f0:15:dc:73:37:ac:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=bae9ad03-a45b-4ae5-8150-2b6d6cadb4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:65:16:1a:4f:39:6e:4f:72:02:a6:a3:02:
bc:94:e9:34:36:2f:28:a5:49:63:9a:ec:63:a0:72:
aa:c6:48:76:ad:37:c2:45:43:66:0e:7f:ba:63:c0:
a6:38:08:53:89:fb:bb:97:77:fe:38:13:33:cf:ba:
d8:1e:86:2d:90:9e:bf:0f:fa:ce:72:eb:0c:6c:69:
e6:15:37:2a:53:4a:79:36:27:c0:c5:85:01:ce:84:
1e:8c:12:8b:6c:6b:25:6c:31:06:d5:29:c3:5d:09:
ef:84:22:fc:62:28:d1:c3:c2:7c:94:ef:c5:98:af:
37:e7:cf:1e:be:ab:6b:b5:0c:ee:1d:b6:87:ec:4c:
d5:f3:62:f8:28:0f:a2:74:ce:08:d7:5a:a1:24:d1:
df:ff:58:11:90:7e:67:1b:77:05:92:bb:6f:6e:12:
cd:bd:8a:bd:ba:ed:34:d7:37:65:e8:d8:fb:59:a4:
29:65:5c:e6:13:ee:c4:38:54:7b:37:83:e9:81:3b:
89:81:d2:f3:fd:b2:18:1f:d7:ed:d8:c1:fb:bc:32:
03:2b:a7:92:8f:71:42:1f:4f:7b:2b:f1:c9:76:d4:
84:ed:be:65:db:f2:58:59:23:3f:93:90:ff:37:91:
be:70:63:9e:27:02:ab:74:ed:66:f4:bb:5c:c4:03:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CD:3D:C4:41:4C:27:B3:B1:75:F1:60:F3:77:0F:74:16:1A:CE:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc9cfdf5-bd35-35ec-a9e9-eb6a0fa5a038.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:8f:e5:36:82:39:15:3a:fd:20:17:33:5b:ab:03:d6:6c:71:
44:e3:ac:06:ca:bf:9d:1b:21:6f:a3:51:d9:dc:16:b2:c4:c9:
40:76:75:39:02:d1:00:08:8e:a3:dc:b2:04:ce:dc:7b:99:e7:
4d:16:db:17:48:fb:6d:e3:07:48:be:ed:95:cd:a8:96:ca:bf:
67:cf:53:bd:d0:9b:de:db:d2:5a:0c:31:f8:ef:41:d2:14:f7:
76:bd:4d:e6:45:46:f9:ee:57:f8:6c:43:7d:34:c4:b7:53:f0:
ea:8d:13:50:4e:79:1a:31:10:56:c3:43:48:3b:aa:b1:4f:c0:
0d:65:c7:99:88:b5:28:fe:78:eb:95:5e:51:12:89:41:cf:97:
05:a3:a8:6f:12:47:a9:7d:9e:24:c9:cb:0c:5d:b0:e6:2d:0b:
ec:b2:c9:a3:f6:62:8b:8e:c3:31:8b:5f:08:d3:e7:2c:69:42:
41:b8:a7:84:a4:0d:52:4a:59:97:62:18:5d:6a:14:f2:54:70:
1a:42:d3:d0:8f:d6:ea:b1:eb:85:35:83:13:46:4b:84:7a:89:
bf:bb:87:c9:e5:69:a9:cb:16:8e:13:a7:ff:f0:f4:e1:f0:18:
18:2a:31:61:56:3e:6f:ae:99:de:c1:de:90:63:fd:ca:31:5a:
3f:b7:39:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:26 2026 by rpki-client