
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be3b984a-4dcf-3fb0-809d-91f49ca0bc53.roa
File: be3b984a-4dcf-3fb0-809d-91f49ca0bc53.roa (raw, json)
Hash identifier: I1YBcXB0sD5PesJYCjpILj6AEZtMc45L6OEuq+u8coQ=
Subject key identifier: 9D:DA:4B:FC:69:13:E5:B3:5D:5C:B4:63:6D:F4:8B:5E:AB:89:2D:DB
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EF44CC6FF1872B1478D759500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be3b984a-4dcf-3fb0-809d-91f49ca0bc53.roa
Signing time: Tue 25 Aug 2026 13:00:12 +0000
ROA not before: Tue 25 Aug 2026 13:00:12 +0000
ROA not after: Mon 23 Nov 2026 14:00:12 +0000
asID: 13335
IP address blocks: 198.41.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f4:4c:c6:ff:18:72:b1:47:8d:75:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 25 13:00:12 2026 GMT
Not After : Nov 23 14:00:12 2026 GMT
Subject: CN=478b8607-9373-412c-b4c3-7c883833feb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:bc:90:6a:8d:35:83:6c:ce:21:8b:b8:e5:
d6:5d:0e:7f:73:81:67:f5:9c:a6:3a:dd:90:67:5c:
67:94:3e:50:24:ca:f4:11:0b:aa:0d:fe:cd:b6:ce:
de:31:b9:00:0e:f5:71:b3:96:61:b7:b6:1d:40:58:
b6:cf:12:1a:97:58:72:db:ae:27:85:05:c1:4e:e3:
3a:5d:d5:90:4f:13:96:bd:9c:b8:d4:98:45:5a:49:
98:15:02:d9:57:57:af:0a:cb:76:a4:e4:68:b1:62:
6e:19:06:7f:f4:74:ae:31:04:27:eb:56:36:69:bb:
c0:9b:0c:b5:fa:c6:4a:1a:1d:51:90:39:ec:a5:c1:
5f:85:16:37:20:66:e8:cc:0a:03:06:1f:ae:1e:c5:
cd:8a:0b:73:b3:2d:f2:3d:48:c6:4d:10:d0:46:9b:
44:e2:fc:bd:e8:c9:56:fc:05:b7:7a:03:6f:8d:53:
36:95:28:7e:38:33:5a:06:fa:53:24:3d:95:02:a2:
f7:77:7f:0f:28:7d:01:ef:fd:ea:f8:47:57:f3:7f:
9e:27:2e:bf:4b:ab:26:98:b1:8a:78:c4:60:fb:a4:
fd:f7:5d:b0:be:c9:7b:a9:eb:0c:87:ce:c8:ce:33:
69:e6:50:73:6c:44:a8:02:5a:48:47:0b:14:01:c8:
92:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DA:4B:FC:69:13:E5:B3:5D:5C:B4:63:6D:F4:8B:5E:AB:89:2D:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be3b984a-4dcf-3fb0-809d-91f49ca0bc53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:36:63:8a:8e:8b:03:b8:98:c7:65:86:f0:6a:66:ef:95:10:
12:26:ed:99:99:2f:48:a4:21:93:7d:14:09:5a:91:e0:28:92:
3a:5c:39:4d:e3:a0:05:43:b4:45:38:27:d7:09:c0:9e:25:01:
03:a2:55:c8:06:ce:b9:ff:27:75:58:ee:40:f6:66:66:1b:5c:
61:09:61:5b:f0:11:1f:1e:d6:0d:c4:18:ca:4b:82:c9:d4:12:
c3:bd:6c:2a:ff:91:bf:62:ff:0f:84:93:fc:5e:6e:6b:89:61:
f4:9f:49:3d:ba:78:06:f8:df:4d:ef:c2:19:b7:8e:cc:21:40:
86:c9:9b:6b:57:14:1d:a3:c1:ee:ff:a4:19:38:d6:0b:3f:96:
fc:44:47:6c:08:b9:05:99:eb:37:b9:a0:9e:ff:88:49:70:22:
31:ce:49:42:1c:db:13:a8:3a:95:2a:dc:74:4f:88:65:ae:26:
c7:bf:5b:ab:f9:d8:a6:2c:00:fd:0e:6c:a6:45:0d:20:3e:1f:
66:ec:31:89:f6:22:1f:17:f5:26:50:8d:0d:9b:38:ac:50:24:
29:33:b0:7f:e4:bf:89:80:23:5e:98:8f:d2:85:09:18:19:e6:
d6:d8:34:1f:68:b3:ad:a2:44:16:33:46:70:51:79:ca:fc:e8:
b5:22:c9:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMb/GHKxR411lQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk
NDc4Yjg2MDctOTM3My00MTJjLWI0YzMtN2M4ODM4MzNmZWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBW8kGqNNYNsziGLuOXWXQ5/c4Fn9ZymOt2Q
Z1xnlD5QJMr0EQuqDf7Nts7eMbkADvVxs5Zht7YdQFi2zxIal1hy264nhQXBTuM6
XdWQTxOWvZy41JhFWkmYFQLZV1evCst2pORosWJuGQZ/9HSuMQQn61Y2abvAmwy1
+sZKGh1RkDnspcFfhRY3IGbozAoDBh+uHsXNigtzsy3yPUjGTRDQRptE4vy96MlW
/AW3egNvjVM2lSh+ODNaBvpTJD2VAqL3d38PKH0B7/3q+EdX83+eJy6/S6smmLGK
eMRg+6T9912wvsl7qesMh87IzjNp5lBzbESoAlpIRwsUAciSAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ3aS/xpE+WzXVy0Y230i16riS3bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmUzYjk4NGEtNGRjZi0z
ZmIwLTgwOWQtOTFmNDljYTBiYzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGk2Y4qOiwO4mMdlhvBqZu+VEBIm7ZmZL0ikIZN9FAlakeAokjpcOU3j
oAVDtEU4J9cJwJ4lAQOiVcgGzrn/J3VY7kD2ZmYbXGEJYVvwER8e1g3EGMpLgsnU
EsO9bCr/kb9i/w+Ek/xebmuJYfSfST26eAb4303vwhm3jswhQIbJm2tXFB2jwe7/
pBk41gs/lvxER2wIuQWZ6ze5oJ7/iElwIjHOSUIc2xOoOpUq3HRPiGWuJse/W6v5
2KYsAP0ObKZFDSA+H2bsMYn2Ih8X9SZQjQ2bOKxQJCkzsH/kv4mAI16Yj9KFCRgZ
5tbYNB9os62iRBYzRnBRecr86LUiya0=
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:56:53 2026 by rpki-client