
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20d0ca6f-32f0-38cc-bde1-48c6237bc52f.roa
File: 20d0ca6f-32f0-38cc-bde1-48c6237bc52f.roa (raw, json)
Hash identifier: d80a5E5Kw29lvYLSOFQt3iKECNasVcTbUA+edy1qHm0=
Subject key identifier: D9:5E:B3:A2:AE:73:52:F7:E8:92:D0:CB:C0:BC:A3:36:7B:8C:0D:05
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EEA878708110D6AA079B753E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20d0ca6f-32f0-38cc-bde1-48c6237bc52f.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 162.158.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:87:08:11:0d:6a:a0:79:b7:53:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=a1d5d00f-100d-48bb-b1b3-1d4bb66991c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ae:11:ea:b4:0a:28:08:4d:c1:33:02:09:94:
19:34:3b:49:0b:08:10:2d:fc:ad:d6:50:9f:da:f1:
74:15:82:5d:25:89:50:c8:20:13:02:f1:2c:b3:47:
ca:fa:da:7b:7d:df:ca:6c:d9:5e:ec:4f:73:af:0c:
c0:ae:15:2e:f3:63:bc:31:4c:c8:4c:0b:28:c5:26:
91:1b:5c:91:e5:d0:96:fb:62:22:82:1d:65:7c:47:
35:8c:38:c4:cf:69:0d:f2:4b:54:50:fa:98:23:c1:
97:54:31:eb:de:2c:c2:33:43:8b:13:25:cc:07:7d:
96:bc:9c:4e:ed:ca:97:6c:37:a5:66:56:d7:71:ed:
c4:68:c0:1a:08:0a:60:6c:64:a0:e9:42:b9:df:a7:
e6:9f:a8:40:04:c6:b8:59:91:09:1e:18:ad:ea:70:
20:67:17:c7:4f:85:c5:b0:7c:69:6e:20:61:74:aa:
ab:65:be:5e:46:fa:9c:8b:0c:20:98:9e:01:d3:cb:
27:c6:60:96:12:2b:30:7c:8b:56:fa:c6:f4:46:0b:
e0:fb:46:34:f3:6f:03:76:a3:0b:ad:a1:1c:7a:24:
b5:58:10:40:ab:b4:d6:bf:28:c1:f4:43:72:2f:1e:
6b:eb:9c:d0:f0:93:af:0b:d5:9f:cc:57:d8:a8:d0:
84:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5E:B3:A2:AE:73:52:F7:E8:92:D0:CB:C0:BC:A3:36:7B:8C:0D:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20d0ca6f-32f0-38cc-bde1-48c6237bc52f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:87:ab:68:7c:7b:e1:5c:b1:5b:df:70:62:98:09:fe:02:dd:
c1:bf:7a:32:86:50:f3:f2:26:ac:80:e2:43:6f:87:7c:dd:25:
ca:3e:3a:e8:8f:5c:34:a3:74:5b:3e:60:51:b1:73:f3:97:6e:
d4:2a:c9:25:9a:f5:d9:d1:66:c7:39:57:fa:46:de:7b:52:9d:
82:67:f2:b8:75:a8:fb:da:67:0e:ae:14:19:cd:d7:dc:8b:2f:
38:a5:f2:00:4e:c1:b8:88:11:ac:13:07:d5:d0:81:bf:76:11:
6d:3a:9b:aa:ff:4a:bc:13:aa:68:fb:9e:ca:9f:aa:f8:40:81:
a9:b3:e5:03:45:51:a0:58:81:0a:fa:42:ba:55:bd:77:8a:f9:
73:33:89:12:35:8e:31:d8:d5:39:36:39:76:0f:b5:68:66:bf:
a2:f8:8e:5a:9c:cb:3b:46:aa:0d:f8:07:5c:d3:21:a9:26:85:
a1:4b:4e:c0:02:79:ac:6a:dc:1e:7f:03:c2:31:37:81:89:4f:
bf:e9:15:55:d9:b0:45:a4:49:98:95:90:37:c1:5c:f0:16:d9:
ed:1c:d4:0c:21:36:41:aa:9d:8c:90:8e:62:8d:23:4f:c7:55:
03:b3:7a:95:1b:91:ad:14:26:2e:a9:51:a7:6c:fb:06:3d:60:
eb:e2:8c:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh4cIEQ1qoHm3U+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk
YTFkNWQwMGYtMTAwZC00OGJiLWIxYjMtMWQ0YmI2Njk5MWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq4R6rQKKAhNwTMCCZQZNDtJCwgQLfyt1lCf
2vF0FYJdJYlQyCATAvEss0fK+tp7fd/KbNle7E9zrwzArhUu82O8MUzITAsoxSaR
G1yR5dCW+2Iigh1lfEc1jDjEz2kN8ktUUPqYI8GXVDHr3izCM0OLEyXMB32WvJxO
7cqXbDelZlbXce3EaMAaCApgbGSg6UK536fmn6hABMa4WZEJHhit6nAgZxfHT4XF
sHxpbiBhdKqrZb5eRvqciwwgmJ4B08snxmCWEiswfItW+sb0Rgvg+0Y0828DdqML
raEceiS1WBBAq7TWvyjB9ENyLx5r65zQ8JOvC9WfzFfYqNCEQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNles6Kuc1L36JLQy8C8ozZ7jA0FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjBkMGNhNmYtMzJmMC0z
OGNjLWJkZTEtNDhjNjIzN2JjNTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop43MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWHq2h8e+FcsVvfcGKYCf4C3cG/ejKGUPPyJqyA4kNvh3zdJco+OuiP
XDSjdFs+YFGxc/OXbtQqySWa9dnRZsc5V/pG3ntSnYJn8rh1qPvaZw6uFBnN19yL
Lzil8gBOwbiIEawTB9XQgb92EW06m6r/SrwTqmj7nsqfqvhAgamz5QNFUaBYgQr6
QrpVvXeK+XMziRI1jjHY1Tk2OXYPtWhmv6L4jlqcyztGqg34B1zTIakmhaFLTsAC
eaxq3B5/A8IxN4GJT7/pFVXZsEWkSZiVkDfBXPAW2e0c1AwhNkGqnYyQjmKNI0/H
VQOzepUbka0UJi6pUads+wY9YOvijFc=
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:57:26 2026 by rpki-client