
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07ffc1f4-2de8-388f-8323-e437596d08cc.roa
File: 07ffc1f4-2de8-388f-8323-e437596d08cc.roa (raw, json)
Hash identifier: lSqzucl3+kkLtJcdZfGB2xUSa4pV+1yl5XPY5OkroCs=
Subject key identifier: 64:CE:B5:21:C6:91:DE:81:A7:BC:46:68:B2:0A:DE:04:06:ED:6E:11
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EEA878001F44FA3BB07C45D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07ffc1f4-2de8-388f-8323-e437596d08cc.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 162.158.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:80:01:f4:4f:a3:bb:07:c4:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=cbb9d836-a2d0-4be8-9e36-0e029af0349d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:be:cf:17:18:85:25:0c:2b:a9:5a:e4:98:7b:
bf:1c:07:0a:ef:42:4b:04:d7:be:a5:78:20:1e:08:
86:04:d8:17:dc:b9:72:07:dc:d4:94:13:a3:7d:0d:
4a:7e:44:10:e0:f3:8e:12:be:98:e0:69:3d:29:fd:
b3:a6:76:43:14:27:16:f4:24:d3:8c:44:10:94:4c:
06:52:8a:f0:bc:e6:ae:ff:42:3e:99:ef:da:be:8b:
90:73:a4:37:22:84:ad:0b:66:cf:ea:62:aa:34:9e:
16:c4:48:6e:6e:7a:75:71:33:3b:03:4d:d8:6f:f2:
22:98:2a:15:f8:de:b2:da:01:83:44:b4:ac:79:a6:
6c:7a:93:49:d5:75:ca:da:14:71:11:69:d1:18:17:
5f:1b:f5:99:58:cb:74:a6:04:e9:51:d1:21:b7:64:
ce:00:87:8e:76:5a:e6:bb:d8:14:27:5d:4e:5a:ac:
4b:b9:25:17:5c:e7:5c:a8:35:dd:52:c5:e4:1c:bd:
1c:e6:09:94:ed:03:06:61:1d:80:2e:e5:ea:80:8b:
62:45:b4:3c:34:a9:dd:e7:bc:ce:b5:6f:c4:2a:d5:
f7:6f:cd:a4:e5:a8:13:12:5b:9a:7c:60:a1:20:82:
09:3b:e4:bc:b4:90:ed:f9:8d:2a:59:e1:ef:b9:52:
d2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CE:B5:21:C6:91:DE:81:A7:BC:46:68:B2:0A:DE:04:06:ED:6E:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07ffc1f4-2de8-388f-8323-e437596d08cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:ec:cf:c2:10:82:99:7f:7a:55:ab:1c:37:79:b0:ef:ae:aa:
27:aa:7c:19:9d:9a:30:c5:ca:1d:89:4e:70:c5:1e:b5:1c:84:
f8:1b:cc:9a:54:24:35:f7:d5:c7:63:40:aa:50:2f:0c:f0:2e:
67:7a:68:56:b7:41:1e:12:7d:ac:40:a3:e4:4d:91:59:4d:6c:
f0:11:3d:1d:61:32:28:d3:13:4a:d8:75:22:47:1a:35:08:b5:
5d:99:47:c6:a7:87:d7:83:3c:16:c6:6c:b1:a4:7a:4e:c1:29:
0f:f9:ab:7a:af:76:d9:7b:3d:b7:d3:a5:a9:7c:76:89:52:b3:
76:08:d2:29:40:8c:0b:ca:ef:30:d0:79:c6:8b:2a:d0:90:e5:
a6:4e:0f:12:64:a7:30:fc:df:a1:41:40:70:f2:0a:2f:36:ba:
8e:67:41:c7:ea:b7:70:09:d5:0b:fe:11:10:22:d3:42:6e:ad:
ad:25:60:10:45:de:7d:e4:40:3b:98:0a:c6:81:87:c0:d1:15:
60:27:a4:94:e8:8d:ad:aa:b3:82:8d:a5:aa:fc:b7:58:26:f4:
11:2b:c3:72:3f:64:6a:38:08:8a:73:85:fb:54:ef:82:f3:ba:
5f:fb:21:c3:6b:8e:e4:84:f8:60:86:f9:aa:12:06:fa:40:fc:
3a:42:5c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:02:05 2026 by rpki-client