
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8ad512b-d6e7-3a12-828e-b4345cd65769.roa
File: f8ad512b-d6e7-3a12-828e-b4345cd65769.roa (raw, json)
Hash identifier: GFK8sgfKwOdaPUZ1FRLx0xm8m7XPA0alOSuFr9NnTG4=
Subject key identifier: 38:80:1B:BE:81:F5:C8:DB:C4:EA:2D:19:E0:36:80:43:51:EE:8C:5E
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EE423357ABA6C78FA21B90640
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8ad512b-d6e7-3a12-828e-b4345cd65769.roa
Signing time: Wed 19 Aug 2026 18:03:45 +0000
ROA not before: Wed 19 Aug 2026 18:03:45 +0000
ROA not after: Sat 27 Nov 2027 05:00:00 +0000
asID: 395747
IP address blocks: 198.41.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e4:23:35:7a:ba:6c:78:fa:21:b9:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 19 18:03:45 2026 GMT
Not After : Nov 27 05:00:00 2027 GMT
Subject: CN=dc063c44-90e2-40ae-a178-21dd98049781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8c:65:fa:28:6b:40:49:4b:38:5a:d3:63:1e:
ae:54:6c:9b:b1:8c:0b:67:f1:d8:d4:af:e3:3f:ba:
93:36:c6:c5:02:15:1a:79:b9:b3:de:89:4e:c2:87:
03:59:2e:a4:f9:bf:a4:8f:b5:d0:ea:6d:27:c7:af:
24:e1:06:27:a6:37:dc:ca:1a:50:fd:5f:bd:1c:a9:
cc:8d:ad:3f:71:fd:4e:31:25:ba:cb:dc:33:11:97:
1b:8e:89:1e:76:dc:b3:cd:97:55:63:b4:da:36:94:
c2:98:5f:41:8c:f7:22:63:7d:36:ba:0a:57:0f:b3:
d4:92:01:9c:06:06:bf:ea:0c:7c:d5:2f:ae:fb:ac:
40:60:78:d8:7e:92:fd:c6:d4:c3:57:7c:df:17:16:
9c:18:63:49:37:6c:62:76:fc:22:61:4c:7d:cd:38:
03:e4:84:03:ba:1f:95:5f:32:d8:12:6c:cf:4a:9e:
c0:c9:8f:0e:c3:0c:fb:8a:c4:67:b3:9d:da:87:7c:
1b:02:0c:6f:d6:55:2d:13:ab:4c:a1:e0:87:3e:ac:
b3:28:24:70:8c:ce:d5:dd:47:ad:5b:41:55:39:34:
d6:46:78:54:bf:8a:e3:4c:e2:e2:95:34:77:ba:38:
85:30:68:8d:a5:fb:45:4d:41:26:09:3c:4a:18:f3:
3d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:80:1B:BE:81:F5:C8:DB:C4:EA:2D:19:E0:36:80:43:51:EE:8C:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8ad512b-d6e7-3a12-828e-b4345cd65769.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:55:a6:5a:4a:b2:1e:27:cf:7f:61:44:54:16:61:37:bb:8c:
78:e9:81:5d:8f:9f:74:d3:b5:b9:0f:c3:ed:e9:2a:69:e8:24:
7a:6a:f5:fb:30:b0:ed:da:83:75:10:98:34:d9:cd:5e:90:d2:
27:6d:f1:88:f9:c0:d3:17:1b:f8:3c:76:d1:e5:7b:69:7f:ea:
1d:ab:f8:5f:e5:d9:81:24:aa:eb:5a:68:fc:2d:54:a2:86:c1:
9e:12:48:a8:db:3f:79:cb:3d:0e:af:e6:e0:fd:d6:7b:e2:e2:
7a:2d:88:0c:1f:e2:3e:02:7f:7a:74:8d:79:f4:69:e7:f2:73:
c1:73:a1:c8:45:96:a8:a8:be:ea:47:2f:38:78:7c:3e:b8:21:
de:11:5b:27:73:28:a9:11:f0:86:40:c0:e5:58:ec:5d:67:56:
9f:27:67:1e:ad:f5:42:7f:80:2c:1f:72:73:0e:2b:45:0d:e7:
ad:39:88:fb:f7:14:e2:fa:04:6d:e3:38:46:06:98:95:43:86:
86:82:36:33:56:8f:6a:4d:9a:95:78:70:f1:15:43:7b:f7:1e:
f7:f3:eb:1e:cf:af:8f:ce:ee:ca:32:18:81:36:d4:ed:d3:e0:
5d:03:09:ce:e4:65:6d:1f:17:82:79:56:33:e2:42:0d:76:bc:
5d:9a:23:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:32:27 2026 by rpki-client