
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8233d935-291c-3440-a0e9-bc9dd51db397.roa
File: 8233d935-291c-3440-a0e9-bc9dd51db397.roa (raw, json)
Hash identifier: Sv0WHz3obVO+BWi90UD2PuqszOhzTtRldX2DVsc/3XM=
Subject key identifier: D1:43:E1:03:39:09:80:56:4B:C3:76:9E:1D:77:8B:63:D4:03:BD:55
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E709F6CB26C2DEAA2B7FDE680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8233d935-291c-3440-a0e9-bc9dd51db397.roa
Signing time: Thu 09 Jul 2026 09:00:13 +0000
ROA not before: Thu 09 Jul 2026 09:00:13 +0000
ROA not after: Wed 07 Oct 2026 09:00:13 +0000
asID: 13335
IP address blocks: 162.159.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:70:9f:6c:b2:6c:2d:ea:a2:b7:fd:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jul 9 09:00:13 2026 GMT
Not After : Oct 7 09:00:13 2026 GMT
Subject: CN=6bbf8169-919a-4e1c-93f0-c2e9338f8af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ef:50:b4:84:77:c5:23:2b:37:e6:d8:e0:79:
df:00:96:36:c6:21:ea:68:1d:49:6c:d5:7a:86:32:
02:48:25:b5:5a:36:77:4a:08:3e:04:30:16:81:87:
38:eb:e6:3e:9a:76:36:20:80:35:fc:21:10:02:ab:
0c:21:07:4a:50:4d:69:9f:3c:56:1b:ff:cc:77:1e:
2f:5d:de:df:4e:89:3d:c1:e7:80:08:e8:8b:11:77:
19:ec:e9:58:56:96:89:0c:f3:63:9d:27:d3:11:98:
1d:ff:72:0e:14:a8:31:09:55:1f:74:26:b2:25:51:
29:7e:4d:31:88:5f:ff:03:b1:e9:ea:9c:6e:6d:4d:
a1:44:39:69:13:07:19:49:94:bd:8d:46:21:ea:a3:
5a:b8:42:ab:b5:69:9a:65:96:e2:0e:63:7e:01:fe:
b7:84:e8:1d:4c:a1:26:1b:34:35:64:94:6d:43:93:
31:a1:a5:3e:68:26:0e:f5:54:0b:1d:75:40:1f:e0:
33:00:08:13:26:b0:04:b1:fd:5d:83:26:5d:2e:20:
aa:71:3b:b7:b0:a2:43:82:d9:d4:10:8b:66:6c:13:
62:b0:70:a9:66:9e:2a:61:46:b5:07:c0:38:26:93:
c8:52:21:7f:d0:ec:21:40:b0:62:e8:4c:f8:e2:b1:
f3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:43:E1:03:39:09:80:56:4B:C3:76:9E:1D:77:8B:63:D4:03:BD:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8233d935-291c-3440-a0e9-bc9dd51db397.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:7c:54:6c:35:c5:d2:26:b5:39:5c:45:5f:1a:22:bd:5b:b3:
17:80:8b:63:f7:a6:25:79:fc:eb:9b:fd:9d:00:b6:7f:0c:4e:
77:db:35:31:e0:a0:ac:e4:1d:03:42:15:f3:81:c3:2a:8d:c2:
78:3f:23:a5:12:62:eb:87:d8:ed:df:96:9e:38:11:72:c6:4c:
58:19:26:e9:56:d2:c2:d2:86:d6:7e:17:07:56:36:f0:7e:07:
a3:e8:8a:b9:5b:f2:a5:9a:da:2b:fe:30:c6:b3:b4:0e:90:b1:
e8:f2:67:19:24:5d:7f:11:55:d0:1e:48:13:92:35:31:29:27:
3b:f8:0c:22:f7:7b:dd:3a:1b:2f:72:79:16:54:a4:8a:28:25:
21:23:91:05:ca:3e:2d:bc:3d:01:75:30:85:10:f4:9f:37:fc:
e1:e3:80:27:5f:77:c5:28:9e:33:0e:f3:b9:db:50:4e:be:f8:
c1:d7:25:3e:de:5d:a7:e9:07:b4:9f:a6:81:0d:1b:be:24:f5:
23:33:da:06:a7:37:a7:85:36:37:d9:92:ea:09:52:e3:1b:1d:
79:60:d1:19:80:9b:46:8f:0e:e6:38:05:9a:fb:ac:60:fb:8d:
d1:c5:d9:af:ac:57:98:1a:23:be:51:2c:b3:9f:d9:ec:e9:85:
7b:1d:57:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:55:09 2026 by rpki-client