
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/095a255c-5d3d-3975-952c-37e54a4176aa.roa
File: 095a255c-5d3d-3975-952c-37e54a4176aa.roa (raw, json)
Hash identifier: 2wXkuOjvZ27WOHSJ9ZluOHiEhWsSOheXrweAJfme57g=
Subject key identifier: 75:4F:2B:F6:DC:32:AA:7C:BD:35:05:50:F2:A7:FE:D6:DA:B9:0F:A7
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D67DFE13A418AC60F4073C1C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/095a255c-5d3d-3975-952c-37e54a4176aa.roa
Signing time: Sun 05 Apr 2026 13:00:31 +0000
ROA not before: Sun 05 Apr 2026 13:00:31 +0000
ROA not after: Sat 04 Jul 2026 13:00:31 +0000
asID: 13335
IP address blocks: 172.70.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:67:df:e1:3a:41:8a:c6:0f:40:73:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 5 13:00:31 2026 GMT
Not After : Jul 4 13:00:31 2026 GMT
Subject: CN=ea7f9d19-d44e-4b62-90a1-0acb2393e2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:ef:bd:a0:04:9e:91:7f:ae:bb:25:a3:ad:
59:0d:81:81:b2:69:9a:ac:4e:f8:d0:17:6b:13:8f:
ba:0e:52:3b:91:c7:05:23:22:ac:4c:d6:ff:78:71:
9a:49:f9:0a:92:3e:4d:c4:bf:13:fb:c0:9f:a9:0b:
6e:18:d8:07:de:0d:9f:a1:87:fd:bc:3b:ed:21:52:
97:6c:58:00:3f:51:54:73:e3:2e:34:8d:e9:97:ca:
37:8d:ff:40:bc:b6:6a:83:d4:0f:57:74:df:e4:f4:
43:8f:98:af:4b:b2:a2:87:66:ce:a7:ea:cd:46:ad:
5e:34:1d:ff:4a:83:e6:9d:c6:47:a3:ba:47:c8:1a:
97:80:bf:25:5a:5e:33:ee:e1:f6:14:74:f6:d0:c4:
77:c4:8c:19:c8:00:f1:7b:00:08:98:61:2c:da:72:
de:2a:e9:ce:ae:39:63:74:79:c0:5e:d8:0a:ce:28:
cf:2f:b2:b5:87:92:05:28:ca:c3:7d:51:ca:aa:1b:
69:74:79:1e:aa:e9:02:e5:56:79:88:9f:b2:6a:74:
81:15:44:42:65:a2:19:1c:68:b8:6c:e5:2e:e9:1f:
60:8c:b4:df:21:b3:16:b4:8a:e4:00:c5:4a:f1:3b:
21:d4:04:53:8f:a9:41:b7:97:f1:dc:3f:0a:b0:4e:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4F:2B:F6:DC:32:AA:7C:BD:35:05:50:F2:A7:FE:D6:DA:B9:0F:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/095a255c-5d3d-3975-952c-37e54a4176aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:c4:cb:3c:bd:8d:c3:0c:34:3a:af:a8:26:81:3f:2b:bd:7b:
06:22:fd:cd:85:0f:41:a5:4f:f7:b6:64:c4:69:a3:c4:24:29:
94:0b:47:df:bf:d9:58:93:50:2f:4c:6a:93:d3:12:2b:0c:9c:
47:e3:42:19:11:45:16:e2:3c:88:08:1f:e8:74:d4:cc:09:85:
93:77:b5:f6:3d:eb:34:04:02:27:f0:e1:01:7b:28:a4:05:b9:
07:03:28:d8:6f:c9:eb:b8:97:63:4c:af:ad:58:f0:84:03:cb:
0d:25:02:2b:bf:29:76:16:f3:cf:21:8e:67:25:42:9f:b0:f0:
98:8d:55:62:3f:09:60:60:22:b8:42:3e:d3:6a:36:98:ea:b0:
69:4d:a1:f6:2d:0c:0d:19:a4:61:84:ab:60:84:00:fe:b8:99:
7f:75:f2:9c:8b:01:14:23:a1:cc:be:d3:fd:c0:82:7f:5c:a8:
b3:1a:06:b8:c3:36:a1:60:ae:0c:2b:15:c3:05:06:11:e6:e4:
d2:6a:18:76:48:5f:18:56:8b:7b:21:29:7f:b7:b0:94:47:ad:
1b:54:5c:4c:97:0c:03:dd:bf:33:16:c7:0e:22:aa:b0:67:2a:
09:0f:14:b7:b6:d9:53:93:f5:70:ef:9b:e7:64:04:2c:c4:1b:
d0:4f:2a:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3+E6QYrGD0BzwcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk
ZWE3ZjlkMTktZDQ0ZS00YjYyLTkwYTEtMGFjYjIzOTNlMmJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM3vvaAEnpF/rrslo61ZDYGBsmmarE740Bdr
E4+6DlI7kccFIyKsTNb/eHGaSfkKkj5NxL8T+8CfqQtuGNgH3g2foYf9vDvtIVKX
bFgAP1FUc+MuNI3pl8o3jf9AvLZqg9QPV3Tf5PRDj5ivS7Kih2bOp+rNRq1eNB3/
SoPmncZHo7pHyBqXgL8lWl4z7uH2FHT20MR3xIwZyADxewAImGEs2nLeKunOrjlj
dHnAXtgKzijPL7K1h5IFKMrDfVHKqhtpdHkequkC5VZ5iJ+yanSBFURCZaIZHGi4
bOUu6R9gjLTfIbMWtIrkAMVK8Tsh1ARTj6lBt5fx3D8KsE4CMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHVPK/bcMqp8vTUFUPKn/tbauQ+nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDk1YTI1NWMtNWQzZC0z
OTc1LTk1MmMtMzdlNTRhNDE3NmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMfEyzy9jcMMNDqvqCaBPyu9ewYi/c2FD0GlT/e2ZMRpo8QkKZQLR9+/
2ViTUC9MapPTEisMnEfjQhkRRRbiPIgIH+h01MwJhZN3tfY96zQEAifw4QF7KKQF
uQcDKNhvyeu4l2NMr61Y8IQDyw0lAiu/KXYW888hjmclQp+w8JiNVWI/CWBgIrhC
PtNqNpjqsGlNofYtDA0ZpGGEq2CEAP64mX918pyLARQjocy+0/3Agn9cqLMaBrjD
NqFgrgwrFcMFBhHm5NJqGHZIXxhWi3shKX+3sJRHrRtUXEyXDAPdvzMWxw4iqrBn
KgkPFLe22VOT9XDvm+dkBCzEG9BPKtI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:02:10 2026 by rpki-client