
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca89da4f-c69d-3094-b678-d8cc2946ecca.roa
File: ca89da4f-c69d-3094-b678-d8cc2946ecca.roa (raw, json)
Hash identifier: z0z9Z9P9evdVygWLHdSQ5+/DKLLgJoAFRUFFjtWz0As=
Subject key identifier: 1E:2D:CA:90:B5:1F:32:38:C3:6F:00:7D:BD:F5:62:8B:C6:89:AA:DF
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EEA87881C907C490390D30580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca89da4f-c69d-3094-b678-d8cc2946ecca.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 162.158.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:88:1c:90:7c:49:03:90:d3:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=821b1be9-3789-48a0-b4e2-af2bb055621c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:37:5d:32:80:0b:50:d9:12:b1:12:a6:b0:
d3:38:36:37:f5:4e:6f:8e:83:5e:c0:6a:31:30:36:
83:68:ab:78:24:8e:03:b8:56:6a:eb:b2:fa:f1:53:
12:9b:63:6d:15:04:9e:a8:f8:57:96:11:46:3e:c8:
14:37:97:50:d7:0d:53:b6:73:2a:71:08:ac:00:c6:
f9:be:87:a4:1c:91:89:ed:92:3a:0c:36:39:8d:d1:
9c:bb:d0:91:1b:e9:77:ea:ee:d3:dc:1b:29:39:e4:
3d:a8:14:29:d5:d9:bc:1e:d6:9e:d9:e7:31:67:ed:
0c:8d:3e:94:35:9d:09:c7:e3:1f:37:88:b2:a4:1b:
9c:8a:74:97:e0:20:25:b7:51:d8:47:20:bd:d8:5f:
c0:2e:bf:a1:1b:c2:ae:d7:78:b9:15:66:c4:5c:63:
69:de:1d:96:d2:a7:94:84:1c:55:d7:8a:89:05:99:
21:79:67:88:3a:8b:2d:11:55:fa:19:49:8e:d3:f4:
95:8f:fd:70:44:0a:1e:99:64:49:3d:0e:ba:a6:94:
a2:02:93:88:08:33:f8:1e:f4:96:5f:fc:77:3c:c9:
b8:00:1b:51:fb:5a:58:4f:52:25:66:06:bc:ff:c0:
e5:be:cd:5a:bf:fc:dc:23:7a:d3:62:88:fd:b3:92:
99:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2D:CA:90:B5:1F:32:38:C3:6F:00:7D:BD:F5:62:8B:C6:89:AA:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca89da4f-c69d-3094-b678-d8cc2946ecca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:e1:70:9c:43:75:45:27:d0:29:74:90:a1:f2:cc:15:9b:e8:
d4:f7:18:99:9e:0a:24:b5:bf:e2:87:16:26:94:fc:39:4d:95:
7a:f8:8b:8b:f5:07:04:b9:f7:7e:51:db:fb:4c:aa:70:1e:d9:
1b:b7:1a:7e:25:04:ca:ea:2f:91:c5:50:c4:5a:6f:4d:2d:ae:
b8:6d:79:86:fa:97:ac:82:12:f6:49:ba:bc:67:02:6c:e5:88:
2d:c0:d3:04:25:2c:1b:89:52:b4:ed:1c:f1:6e:f3:3f:39:cd:
3c:a8:99:b3:b0:61:56:68:d4:83:72:a9:56:c2:ab:5b:99:a3:
a1:ee:31:e2:35:75:8e:9e:d1:20:c6:77:01:b2:ae:04:82:b7:
c9:0f:94:56:12:12:8c:a7:09:85:93:22:46:5c:6c:3f:17:e3:
4c:b7:a4:f7:3a:53:76:11:dc:d6:1f:5d:47:37:97:3f:66:6e:
6f:25:9a:f2:2c:22:31:61:18:78:41:87:06:12:77:9f:79:28:
a6:45:2c:7b:27:56:2d:06:86:e2:e9:ad:30:8f:09:d6:07:40:
3b:8e:1a:3a:6c:c5:31:4d:7c:c2:01:2a:19:9c:6c:65:ba:fd:
bc:65:52:36:5b:de:e5:6f:b6:54:fa:a6:7e:7e:11:b1:e9:75:
06:7a:23:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:44:17 2026 by rpki-client