
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afd61a45-4551-3ab1-a3bb-928990ff0f81.roa
File: afd61a45-4551-3ab1-a3bb-928990ff0f81.roa (raw, json)
Hash identifier: YFRDJm+PHb581gs9zqb7+JbW7yI1Nj1tChfB+iGTd70=
Subject key identifier: B5:0B:6A:4E:5E:AC:03:6C:BD:DE:41:5B:7A:0A:35:E2:17:33:F8:3C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D905A9FC2BB53C44D9A699A80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afd61a45-4551-3ab1-a3bb-928990ff0f81.roa
Signing time: Mon 20 Apr 2026 01:00:24 +0000
ROA not before: Mon 20 Apr 2026 01:00:24 +0000
ROA not after: Sun 19 Jul 2026 01:00:24 +0000
asID: 132892
IP address blocks: 198.41.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 11 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:90:5a:9f:c2:bb:53:c4:4d:9a:69:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 20 01:00:24 2026 GMT
Not After : Jul 19 01:00:24 2026 GMT
Subject: CN=b4708837-24af-4b64-969c-70e15bf75cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4a:6e:1c:88:85:f3:87:58:5b:0c:3d:8d:cf:
8e:9d:4f:78:49:7a:29:40:c6:35:3a:94:2a:de:46:
5c:e9:f4:0d:40:42:d9:eb:e5:4c:46:63:55:48:55:
62:e6:9b:ed:30:b6:1b:d3:47:37:80:ee:8e:00:94:
31:05:b3:dd:ff:f7:5c:67:a5:75:30:bd:4a:c0:88:
57:93:29:9b:47:f9:bc:c8:a4:63:bf:69:41:71:de:
95:50:83:91:f1:c1:d1:0a:b3:9b:9e:59:7b:31:3e:
d0:db:49:6f:1c:0b:f3:4a:74:06:d3:bf:a9:4c:b0:
9c:55:0c:9f:6d:19:18:c9:c7:5c:1a:2c:d1:ce:4a:
60:b6:33:fd:b5:36:fa:89:93:a8:44:40:9d:73:c2:
07:03:01:24:9c:f5:6d:81:81:62:b2:11:78:62:b6:
59:3c:4c:e9:56:6e:32:6f:20:32:39:7e:14:3f:49:
95:be:85:dd:d5:e2:e7:30:82:28:90:da:62:81:bb:
14:46:72:6b:23:35:35:87:72:c5:77:d5:16:7f:79:
8d:df:69:94:96:a5:71:16:57:c9:b9:11:78:2c:4c:
45:97:0d:a8:7a:ff:86:84:28:58:ad:e4:d3:e1:1f:
b7:c9:55:ac:db:34:0c:36:9f:90:26:d1:b1:c7:f6:
9a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0B:6A:4E:5E:AC:03:6C:BD:DE:41:5B:7A:0A:35:E2:17:33:F8:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afd61a45-4551-3ab1-a3bb-928990ff0f81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:38:c2:f4:d3:c2:0b:da:04:b1:db:7c:38:49:9b:55:83:db:
14:ec:f6:e9:88:0d:4b:b1:c0:2c:a3:03:74:ed:fc:b9:69:3f:
16:7f:5d:84:e2:eb:1b:7a:7b:c2:5f:6e:75:05:d4:a5:79:d5:
ef:6e:95:f7:04:f1:cc:4e:ee:b6:58:de:9a:6c:46:37:c9:8e:
13:00:a5:47:67:cd:b2:52:73:01:0f:43:31:2c:bf:7e:4e:a0:
bd:27:f8:ce:4f:ec:1b:79:df:2f:90:47:73:90:b8:4d:ae:b3:
8f:c3:5a:8a:b6:61:01:f5:55:99:a8:ea:0d:24:ad:4b:fc:b8:
a8:2e:f7:ae:87:74:02:4c:2f:1c:50:73:8f:63:65:e6:b3:c8:
7b:83:cd:ea:bd:11:b9:64:cb:e8:ae:0d:cc:da:03:42:e1:49:
da:33:90:df:e2:31:83:3f:9f:10:4a:75:a3:00:90:74:41:d0:
cd:36:dc:6b:e3:9f:6c:41:58:00:8f:13:ae:75:d9:5f:59:ba:
8b:88:d0:f2:9d:86:a7:6d:34:9a:86:08:ff:86:d4:1f:e9:00:
e8:bc:46:24:05:33:31:7f:ad:18:d5:9e:42:33:06:4c:cc:55:
17:53:f7:eb:98:d8:1f:0f:75:35:d8:63:c0:b3:4f:56:30:cd:
05:30:14:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 06:13:09 2026 by rpki-client