
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4c25fab-198b-352a-975a-3b994bb6d500.roa
File: a4c25fab-198b-352a-975a-3b994bb6d500.roa (raw, json)
Hash identifier: S5hl3ioN/chY526z4SMzmJyqDhmBJph3H4ONkrI3kew=
Subject key identifier: CB:20:FD:3B:41:CB:08:6E:02:01:81:57:C2:6A:A9:D2:6E:FA:FE:AA
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584F8DD88A71D94DF40E22788400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4c25fab-198b-352a-975a-3b994bb6d500.roa
Signing time: Mon 19 Oct 2026 13:00:12 +0000
ROA not before: Mon 19 Oct 2026 13:00:12 +0000
ROA not after: Sun 17 Jan 2027 14:00:12 +0000
asID: 13335
IP address blocks: 162.158.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:8d:d8:8a:71:d9:4d:f4:0e:22:78:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 19 13:00:12 2026 GMT
Not After : Jan 17 14:00:12 2027 GMT
Subject: CN=5f61c84e-6bc0-4bcd-821c-39f91aa94019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:13:c6:58:c7:0b:7a:af:9c:e4:9d:67:88:62:
9b:bb:e7:c3:b8:b9:8b:97:58:da:b7:3c:3f:d8:8b:
73:87:8e:62:e0:d4:28:46:31:26:8b:0f:49:3c:f5:
03:75:ec:c1:a3:21:50:98:53:2c:9f:eb:c2:49:39:
6e:69:04:a5:1e:74:f1:0e:e8:3d:de:3b:b0:f0:46:
0c:17:b5:9f:f0:de:e1:34:99:0f:5b:ab:ad:51:e5:
fa:1d:c6:9b:30:72:df:bc:71:66:b5:59:19:0a:86:
43:b2:6f:44:87:80:a5:66:aa:2e:98:2a:da:97:8a:
7d:f6:81:eb:08:54:2e:cb:7d:b0:34:1f:d4:4c:f9:
87:c1:fd:48:8a:3e:42:8d:f0:36:4d:81:25:4a:b3:
e4:83:82:00:d7:00:df:52:63:24:4e:30:ed:62:95:
3c:38:35:85:92:36:19:c7:e3:0c:c0:15:d0:76:07:
49:9b:f4:70:d5:9c:e6:be:bd:5d:00:49:cd:0b:eb:
76:5d:00:29:c0:b5:8f:73:e0:03:7e:51:63:06:25:
4d:50:4a:3c:da:46:61:7d:2a:0d:16:e9:b2:69:6d:
2e:af:16:30:a5:58:29:36:92:5a:4f:27:6f:02:61:
71:3e:f7:f5:66:43:e7:16:32:72:9e:f3:13:8d:10:
ac:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:20:FD:3B:41:CB:08:6E:02:01:81:57:C2:6A:A9:D2:6E:FA:FE:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4c25fab-198b-352a-975a-3b994bb6d500.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:68:c6:fd:d6:02:37:aa:23:88:d5:29:65:8c:5c:c3:7c:61:
fb:ca:a8:2d:bf:68:a5:ff:e3:da:8c:0e:dc:2b:15:52:77:cf:
b3:52:59:72:bd:9b:f0:2c:b0:15:8e:52:27:fd:14:9b:4b:23:
6f:a2:63:da:69:8a:87:b0:4f:4a:3b:6d:9f:69:d6:01:94:57:
e3:e4:8f:79:f3:4a:e7:4e:1a:3e:b7:72:76:92:5d:fa:dc:31:
78:6a:79:0a:7c:8a:fc:05:78:92:fe:a8:af:9f:0a:4a:ce:bd:
41:9e:cc:c0:6d:5d:df:9f:3f:58:c9:16:89:21:60:c1:e5:a3:
6f:be:14:6d:f8:87:85:f8:7c:df:27:31:e7:44:9f:2b:02:d4:
e2:98:71:a4:c2:a0:84:f2:8b:98:c4:df:11:68:24:11:65:6c:
7f:03:e4:6f:48:87:b5:34:6c:0f:7d:69:71:a5:eb:8d:7b:50:
aa:4d:44:b7:d5:4e:6b:5f:04:b2:7a:98:87:94:c1:5b:15:97:
30:a3:6e:cb:08:6e:89:10:2f:d3:83:18:7a:a3:44:ff:17:41:
c7:1c:e9:b5:bf:86:47:b7:d3:86:8b:70:c5:81:52:9d:ce:bd:
89:dc:97:7b:c2:3b:59:c2:28:9f:9c:62:f9:75:a1:a1:38:f7:
6e:8c:a8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 03:10:55 2026 by rpki-client