
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ebbf01b-3a2c-3e43-901d-5efca81a832b.roa
File: 8ebbf01b-3a2c-3e43-901d-5efca81a832b.roa (raw, json)
Hash identifier: I/Ww3KKVRG1WTIn3n+CywFIKk/VGAGMG5KMh891OqzE=
Subject key identifier: 75:E8:EB:CC:A1:28:51:ED:7B:5A:D3:0C:25:1C:09:54:0E:52:C4:5F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584B3B295524A9B4CD7D82132480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ebbf01b-3a2c-3e43-901d-5efca81a832b.roa
Signing time: Thu 18 Sep 2025 03:03:40 +0000
ROA not before: Thu 18 Sep 2025 03:03:40 +0000
ROA not after: Wed 17 Dec 2025 04:03:40 +0000
asID: 394536
IP address blocks: 198.41.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:3b:29:55:24:a9:b4:cd:7d:82:13:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Sep 18 03:03:40 2025 GMT
Not After : Dec 17 04:03:40 2025 GMT
Subject: CN=06682dc2-da6f-4597-9e92-2db816fba5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:31:47:1b:73:94:c1:f2:6b:8f:73:4f:81:b0:
bd:3b:46:b6:72:52:d1:26:1a:d9:69:21:0c:e6:32:
01:df:8a:93:c8:c2:4c:d4:45:46:f7:12:ee:fb:ee:
5e:d9:16:54:16:50:89:26:e7:dd:a7:39:b6:af:8e:
0c:cb:62:36:2e:53:e9:01:b9:2e:c0:4b:c4:78:b2:
0a:b7:2c:e2:3d:53:0a:ac:cb:0b:41:61:0c:61:97:
0a:61:2d:3b:1f:41:1b:fe:1f:9a:34:d0:dc:1e:52:
f7:59:e2:a3:69:f3:ad:14:03:42:f4:a4:7c:9f:18:
87:75:f1:f5:84:0c:4c:38:73:01:c5:75:c0:88:45:
39:22:7e:03:7c:6b:bc:ab:59:e6:ca:48:0a:b2:aa:
57:b9:67:9c:18:7f:d5:c2:07:fa:ff:49:4d:d3:e8:
12:f2:6e:f0:53:3c:96:19:f6:db:50:d7:4e:a9:4d:
b4:b9:b1:2b:e5:95:f2:ec:b8:27:68:64:3d:4d:fe:
cf:6f:c1:0e:47:f9:95:11:2c:47:3a:92:5a:1c:f1:
ad:3b:a5:d3:b6:d0:fa:be:45:14:b1:1f:96:30:40:
31:83:37:f3:93:60:56:74:a0:a6:b9:d8:49:50:95:
a8:87:39:ff:23:f4:bc:54:d2:e8:32:13:17:85:24:
4c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E8:EB:CC:A1:28:51:ED:7B:5A:D3:0C:25:1C:09:54:0E:52:C4:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ebbf01b-3a2c-3e43-901d-5efca81a832b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:e0:07:42:b3:18:d2:83:4a:e9:14:fe:1f:0e:82:67:ba:48:
2d:28:74:f4:e6:a5:dd:56:8f:e1:df:10:d6:ec:0d:3f:be:da:
a9:c5:58:5f:e7:aa:07:dd:92:94:44:8b:0c:98:0a:11:2c:b9:
93:c0:34:88:cc:21:03:80:9c:e5:28:18:c8:0b:44:9c:44:4e:
c6:27:93:f2:9a:0b:5e:02:36:39:8d:e7:94:90:25:4f:12:0c:
a6:22:bb:90:b7:c8:e8:4c:cf:ad:90:ca:12:de:9b:50:ab:7f:
c2:fc:33:02:14:35:ae:c4:00:3e:8c:de:31:2a:95:47:88:d8:
4c:8c:dc:e1:08:38:13:7b:be:95:98:53:24:55:c5:3a:01:53:
58:ab:8c:d5:6e:a8:7c:32:09:ba:a9:ab:1b:73:af:54:02:44:
06:b2:a4:6e:e4:2d:ed:9a:96:49:4b:e4:65:2c:36:fc:61:e9:
d4:0b:3c:d5:05:c8:87:ab:7f:b2:3a:f0:b9:49:13:19:e1:86:
db:61:2c:98:2c:ff:62:db:f5:29:d1:3e:4e:e3:15:d4:bd:0e:
17:37:fd:4e:fa:52:d5:33:e6:34:89:7f:c0:fa:2b:c6:ed:16:
27:b8:49:52:8e:4f:5e:7a:95:8e:1f:88:dd:21:2f:f0:ed:b8:
28:12:d8:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs7KVUkqbTNfYITJIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDkxODAzMDM0MFoXDTI1MTIxNzA0MDM0MFowLzEtMCsGA1UEAxMk
MDY2ODJkYzItZGE2Zi00NTk3LTllOTItMmRiODE2ZmJhNWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjFHG3OUwfJrj3NPgbC9O0a2clLRJhrZaSEM
5jIB34qTyMJM1EVG9xLu++5e2RZUFlCJJufdpzm2r44My2I2LlPpAbkuwEvEeLIK
tyziPVMKrMsLQWEMYZcKYS07H0Eb/h+aNNDcHlL3WeKjafOtFANC9KR8nxiHdfH1
hAxMOHMBxXXAiEU5In4DfGu8q1nmykgKsqpXuWecGH/Vwgf6/0lN0+gS8m7wUzyW
GfbbUNdOqU20ubEr5ZXy7LgnaGQ9Tf7Pb8EOR/mVESxHOpJaHPGtO6XTttD6vkUU
sR+WMEAxgzfzk2BWdKCmudhJUJWohzn/I/S8VNLoMhMXhSRMvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHXo68yhKFHte1rTDCUcCVQOUsRfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGViYmYwMWItM2EyYy0z
ZTQzLTkwMWQtNWVmY2E4MWE4MzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAximBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHDgB0KzGNKDSukU/h8Ogme6SC0odPTmpd1Wj+HfENbsDT++2qnFWF/n
qgfdkpREiwyYChEsuZPANIjMIQOAnOUoGMgLRJxETsYnk/KaC14CNjmN55SQJU8S
DKYiu5C3yOhMz62QyhLem1Crf8L8MwIUNa7EAD6M3jEqlUeI2EyM3OEIOBN7vpWY
UyRVxToBU1irjNVuqHwyCbqpqxtzr1QCRAaypG7kLe2alklL5GUsNvxh6dQLPNUF
yIerf7I68LlJExnhhtthLJgs/2Lb9SnRPk7jFdS9Dhc3/U76UtUz5jSJf8D6K8bt
Fie4SVKOT156lY4fiN0hL/DtuCgS2JU=
-----END CERTIFICATE-----
Generated at Sat Nov 1 12:36:35 2025 by rpki-client