
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/be09a816-d29f-3e79-9a61-fb2365366592.roa
File: be09a816-d29f-3e79-9a61-fb2365366592.roa (raw, json)
Hash identifier: hRvxlXAzeZhBPvgGoArs8OO2/iixekBvJcE/TPXdteI=
Subject key identifier: 42:A0:EA:71:86:24:A6:18:DF:70:15:2D:E4:81:E3:76:5E:D9:24:8D
Certificate issuer: /CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
Certificate serial: 010D0C9F4328584CA5F71989636707C159162400
Authority key identifier: 35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/be09a816-d29f-3e79-9a61-fb2365366592.roa
Signing time: Mon 26 Jan 2026 02:00:32 +0000
ROA not before: Mon 26 Jan 2026 02:00:32 +0000
ROA not after: Sun 26 Apr 2026 01:00:32 +0000
asID: 401048
IP address blocks: 162.252.170.0/23 maxlen: 24
2606:fe80:20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a5:f7:19:89:63:67:07:c1:59:16:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
Validity
Not Before: Jan 26 02:00:32 2026 GMT
Not After : Apr 26 01:00:32 2026 GMT
Subject: CN=ec01133d-df97-4012-92ef-3d4c96a2fa4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2b:a7:40:70:bf:4e:b5:43:02:db:0e:9e:6c:
67:27:a1:cf:dd:84:65:21:0d:86:46:59:39:86:fb:
7f:80:6a:4c:7d:00:4b:51:4e:fc:f9:1f:70:fc:21:
70:78:21:e7:d1:45:86:02:63:1a:11:13:ce:0b:4e:
d0:b2:db:bd:2f:b7:7c:c2:1c:40:77:fb:b3:59:03:
cb:d2:82:b4:40:57:91:81:d5:9e:e6:fc:6e:76:58:
54:3f:ed:bb:65:1b:3b:0f:23:49:f4:b9:56:de:11:
e9:81:18:0a:01:52:01:a3:89:c9:13:e2:30:e9:81:
08:53:10:68:b5:55:3a:6e:b8:9f:c3:fc:f7:8f:fd:
ef:23:37:b2:6e:2c:f3:bf:a9:ae:90:3b:5d:94:b4:
fa:02:9f:e1:c6:49:63:a0:43:49:93:2f:05:39:e1:
2b:60:89:9c:cc:7b:b4:3d:bb:f3:35:b1:a0:cf:f3:
1a:c6:1b:45:63:00:da:85:e1:13:38:d5:16:03:d4:
e0:3d:74:ac:f8:7a:2f:1b:8f:27:fb:02:64:a8:32:
3e:20:28:de:b5:e4:ba:f9:ca:9c:29:b6:4e:b6:d1:
fb:13:d9:20:e6:8b:58:a1:89:f9:1f:87:d2:59:43:
ea:93:9b:91:ef:aa:24:83:08:ed:21:0e:00:63:2a:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A0:EA:71:86:24:A6:18:DF:70:15:2D:E4:81:E3:76:5E:D9:24:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/be09a816-d29f-3e79-9a61-fb2365366592.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl
X509v3 Authority Key Identifier:
keyid:35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
sbgp-ipAddrBlock: critical
IPv4:
162.252.170.0/23
IPv6:
2606:fe80:20::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:56:6f:de:98:af:4e:d8:e4:b8:37:25:b6:38:26:05:75:fb:
13:18:7b:e0:09:81:46:77:8b:74:48:30:14:80:32:58:c3:c2:
aa:ec:10:cd:0f:73:28:33:82:a1:e9:00:5d:4c:7c:b5:0c:fe:
58:29:27:3f:ee:e2:6d:b1:87:ce:57:54:7a:78:95:af:cd:06:
c2:9d:aa:6f:1e:bf:d7:fc:4f:e0:ef:70:a5:30:f2:c8:11:cb:
4f:5c:0f:aa:a0:b3:31:e1:4b:83:e0:8a:30:bc:df:cf:04:d2:
34:34:86:5c:91:4f:70:56:07:e2:e2:e6:96:3f:40:68:8f:4d:
24:c2:31:d3:a1:d4:5f:f5:3e:20:cd:05:95:d4:36:59:ae:c0:
b3:62:20:ba:08:b9:92:dc:83:b6:71:21:94:20:dc:60:6f:c9:
aa:fa:7e:55:99:2b:5c:f5:2c:57:46:5c:91:ac:c7:e0:f6:4e:
41:38:fd:05:9f:ce:76:2a:e1:74:e7:20:bf:2b:50:f1:15:2e:
10:5b:11:53:68:6b:88:7a:f2:cd:6d:65:1c:1b:bd:d3:b2:1b:
52:79:bb:7d:c5:bc:86:45:66:04:bc:4a:70:93:e8:f9:0c:2b:
44:44:24:a7:4a:bb:12:d3:9b:93:39:d2:3d:57:54:92:7e:9d:
0e:d1:51:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:05 2026 by rpki-client