
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df0b97bd-0d9d-3c46-b63a-3763b897ab46.roa
File: df0b97bd-0d9d-3c46-b63a-3763b897ab46.roa (raw, json)
Hash identifier: Jvd0rDfKAhiTx+CL+NRjFkePvGdv/95r3dAniT2Bn1c=
Subject key identifier: CF:EE:23:A2:10:14:19:71:B8:81:2D:2F:A9:F2:86:DF:3E:15:D6:69
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EEA8786FD3A11B096850050C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df0b97bd-0d9d-3c46-b63a-3763b897ab46.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 162.158.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:86:fd:3a:11:b0:96:85:00:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=2c04b91b-d71b-497c-9c43-46d5489ac218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:0e:2d:43:f4:e9:ca:34:f3:49:69:5c:98:
9b:f5:06:2a:86:7b:51:40:66:c4:81:95:53:b5:6f:
51:bb:48:c9:e8:fd:aa:6c:a2:b9:ac:50:38:8e:0e:
29:e2:98:16:ff:ef:9d:22:d1:4e:66:06:db:f6:b0:
3d:f8:9f:e5:71:1a:14:30:a9:27:99:15:e6:be:d6:
24:31:23:c7:7b:7e:4a:96:c0:47:02:d2:e7:8b:a8:
95:9d:ee:74:51:7e:df:91:52:24:14:02:20:48:0b:
16:c5:a7:15:b0:9e:67:cb:64:12:59:e4:d3:b3:6d:
50:d4:cc:85:b2:14:8f:0b:04:9f:11:fc:b0:f4:ba:
69:56:82:b7:54:e1:25:56:94:7e:47:c8:0e:e4:5f:
98:32:87:7f:43:69:65:bb:e5:3c:6b:b9:3b:cb:bc:
5f:5f:1e:7c:65:e8:69:93:67:99:6a:2f:97:cb:84:
68:46:bc:46:74:99:60:e6:58:34:ec:7b:c7:66:dc:
8e:8b:26:5c:b7:c9:2d:4b:1d:83:94:a9:62:ad:76:
4b:0b:94:14:52:b0:5a:dd:b0:ef:42:06:51:10:42:
8a:a5:c7:15:8e:f2:fb:0f:87:0f:db:4c:43:0e:ef:
b5:b4:e1:c7:04:8b:6f:c6:61:97:ec:c6:0d:d5:be:
09:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EE:23:A2:10:14:19:71:B8:81:2D:2F:A9:F2:86:DF:3E:15:D6:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df0b97bd-0d9d-3c46-b63a-3763b897ab46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:b6:c5:9d:08:47:dc:9c:6c:a3:bb:1d:fe:62:99:f1:48:02:
59:50:56:a0:64:02:47:27:33:4f:82:72:88:28:09:01:03:1a:
7c:50:f8:74:5f:4c:92:7b:66:79:12:a9:24:8b:d7:41:90:42:
5d:5f:c8:c8:77:e3:8d:ad:20:2f:66:01:1b:66:32:93:fd:7d:
f5:2d:50:f6:19:e7:81:49:a9:c2:ea:7e:b3:7e:55:bf:cb:97:
0e:e6:fa:36:73:53:c9:c8:aa:ea:94:b2:cb:2c:f0:3e:e6:0a:
28:a3:4e:24:e2:05:fc:9b:a2:a5:0d:ef:80:71:10:6b:37:a8:
1e:a1:93:ff:ca:7b:ad:97:9f:2a:37:fd:6c:06:d9:fd:1f:55:
86:9b:cb:eb:da:f6:04:e5:98:f3:27:35:ab:eb:3c:31:46:bb:
db:df:41:a0:4b:84:4a:d7:3e:c2:a2:81:ee:1d:a2:6b:80:25:
66:09:df:96:3b:36:18:e0:52:de:85:0d:75:d2:82:a3:b4:6d:
e5:82:47:13:97:ae:8d:33:c3:f1:77:0f:b5:e8:33:a5:d2:5c:
ce:92:c1:2c:15:6e:39:0d:c7:13:f8:42:3c:df:1f:2c:ef:b8:
aa:42:38:eb:0a:35:73:28:9f:af:ed:d0:ad:a2:d0:60:37:20:
08:5a:1a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:41:05 2026 by rpki-client