
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e27b779-c984-3088-944e-5d6cf8237999.roa
File: 0e27b779-c984-3088-944e-5d6cf8237999.roa (raw, json)
Hash identifier: ONk5mKmDdYo+Iayx8Ur3UNVVdYiuZpn+1UPj1l6hR9A=
Subject key identifier: DB:D6:CF:BB:D4:0E:A4:2D:0D:02:74:94:17:C9:05:F8:E0:68:4A:15
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EDDF7432DD7F8FA165C8C01E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e27b779-c984-3088-944e-5d6cf8237999.roa
Signing time: Mon 17 Aug 2026 13:00:11 +0000
ROA not before: Mon 17 Aug 2026 13:00:11 +0000
ROA not after: Sun 15 Nov 2026 14:00:11 +0000
asID: 13335
IP address blocks: 162.159.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dd:f7:43:2d:d7:f8:fa:16:5c:8c:01:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 17 13:00:11 2026 GMT
Not After : Nov 15 14:00:11 2026 GMT
Subject: CN=6571c829-6a9a-4a30-bfe4-f37d3c5bf6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5c:93:62:a3:39:61:1f:81:10:02:ed:6f:ae:
8c:0e:a7:69:8b:0d:f0:e9:bc:3e:f1:46:a5:e0:04:
89:db:1b:0a:0a:2e:8e:02:89:71:ed:27:9e:a2:0a:
2d:9d:a5:10:60:0c:66:59:1f:dc:76:a4:78:32:17:
2d:fd:e2:3d:87:28:86:80:36:2a:ab:19:1a:8b:a0:
7d:12:8c:78:4f:f8:1d:71:4b:e1:e2:8a:29:2f:ff:
0e:a9:ff:1a:e7:5a:47:d9:a3:c9:66:c5:f3:70:ad:
57:fa:77:ff:ce:4d:7a:e5:26:ce:8a:b3:de:57:c4:
55:2d:00:3e:18:71:79:e2:6b:52:9e:f9:1a:c1:50:
78:ac:c9:a1:47:cf:02:48:9c:b7:97:a4:a3:30:20:
05:08:71:fa:96:f5:84:50:85:9a:f7:c6:e5:7d:58:
d4:26:32:2b:70:f0:f1:ba:5f:15:93:35:b1:fb:79:
bb:4e:eb:d7:67:16:e7:d4:0c:ec:5a:7c:36:16:73:
d5:95:11:ca:49:d3:6a:54:a7:51:a0:25:cb:6a:0d:
3a:d3:51:d2:6e:97:33:c0:16:19:36:48:28:2b:ea:
00:cf:54:1d:a5:e0:b4:c5:dd:0c:c9:70:9e:d4:f4:
3d:99:06:fd:d6:29:5a:02:51:2d:fc:88:70:ca:42:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D6:CF:BB:D4:0E:A4:2D:0D:02:74:94:17:C9:05:F8:E0:68:4A:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e27b779-c984-3088-944e-5d6cf8237999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:17:45:29:43:9d:98:e8:4a:bf:ea:85:d4:00:9b:72:20:07:
81:6f:93:6a:aa:7c:91:6e:06:39:fd:2f:a5:2f:58:4f:6b:60:
d8:2d:04:b1:79:62:b9:35:66:68:72:be:f0:36:37:52:be:19:
df:bd:18:67:3e:6b:81:79:27:08:29:06:8f:2d:82:1d:d2:1c:
79:a3:57:39:28:16:5d:fe:5a:a5:9b:84:79:c2:74:ab:8a:c7:
5d:f5:fd:15:43:86:93:63:05:dc:1e:4b:85:de:f7:5a:b2:78:
71:1e:06:30:2d:56:84:89:4a:83:01:2e:89:9c:88:a8:47:53:
ec:d9:5e:99:0b:df:11:68:01:60:05:3f:26:7c:8d:44:60:47:
39:fe:28:3d:68:72:43:d8:01:db:d1:6f:8a:dd:32:fa:d3:9c:
21:25:f9:b2:a5:55:33:d6:6d:f5:12:f3:ff:12:9b:92:2f:37:
43:35:69:d8:49:8e:cf:78:68:94:d5:bd:03:fc:99:e2:8f:79:
f1:c8:dd:63:1e:24:4b:e2:e8:7a:73:1b:eb:e3:21:1c:ef:13:
2b:74:c5:35:93:21:dd:9a:74:c4:99:ee:8d:31:c6:ca:88:d7:
58:44:78:57:16:77:7b:7e:4b:59:68:63:4d:39:d4:b0:4a:25:
4c:47:bb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:57:13 2026 by rpki-client