
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13bdd12c-e525-3c32-b643-17c7933e7532.roa
File: 13bdd12c-e525-3c32-b643-17c7933e7532.roa (raw, json)
Hash identifier: Xb3DrdDuEN4as0gbxBrhBUyw+J+sne4P13jdMvTsa5o=
Subject key identifier: FB:15:12:A2:0D:9C:37:1C:F0:F9:0A:F7:82:BE:20:9A:C8:E4:59:A4
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D6AAAA5C8E232E6929A624480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13bdd12c-e525-3c32-b643-17c7933e7532.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 13335
IP address blocks: 172.68.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:a5:c8:e2:32:e6:92:9a:62:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=1cf9d8af-b977-4550-95fa-e62a6036f6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4d:58:47:90:8c:7e:2b:f2:fd:e3:fd:50:d8:
f3:ef:c0:47:53:bc:f6:93:df:e9:f6:62:6f:76:a6:
62:40:82:0a:3b:83:a5:10:20:f0:4a:ec:7e:21:52:
43:8f:63:2f:94:24:6a:3b:4e:08:b9:3c:2f:f0:6e:
b8:a3:ae:03:d8:dc:cb:36:9f:66:d7:2c:be:ea:5f:
00:36:1e:37:43:b5:0b:52:4e:7f:53:d2:1c:c7:29:
79:21:e4:09:48:f8:b3:9b:cd:8d:be:69:b1:58:9e:
32:99:51:8d:60:1e:29:12:bb:87:20:57:a5:7f:93:
e8:53:3d:b6:27:ae:a8:ac:d5:5f:74:72:f3:9f:78:
8d:86:51:74:56:10:f2:62:ae:99:11:1a:d0:d5:8f:
82:06:26:b2:70:c6:ca:0a:81:2a:71:d3:08:7d:33:
1b:87:24:ac:7b:90:8c:56:d3:92:28:bc:ed:44:d4:
18:1c:b9:ff:44:62:ae:07:dd:b2:84:8c:e0:2a:4e:
2e:1e:3d:40:16:dc:79:7f:1f:e8:da:c9:59:99:6a:
75:01:98:76:9c:93:b3:29:5a:61:95:bd:8a:c7:91:
97:f8:85:b0:0a:e0:49:9e:8f:cc:53:2e:c9:ee:6a:
13:de:ad:49:86:02:d5:63:7d:9c:39:ef:a2:3a:d8:
00:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:15:12:A2:0D:9C:37:1C:F0:F9:0A:F7:82:BE:20:9A:C8:E4:59:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13bdd12c-e525-3c32-b643-17c7933e7532.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:23:e0:25:16:84:23:1b:21:28:e5:62:75:72:07:79:22:65:
bb:50:28:c9:5f:a5:00:b2:d2:7c:31:18:c2:17:0d:c4:01:29:
a1:6c:53:d4:96:99:22:04:66:c3:8e:93:17:f9:14:f2:44:8c:
0b:fd:56:14:e6:8f:45:8d:7e:13:0b:98:b6:37:60:7a:57:51:
3a:48:f7:8a:44:fa:f1:f7:2d:59:a4:49:06:4b:91:5a:69:50:
51:94:7e:77:36:33:24:a4:aa:d5:2f:19:d7:ce:b3:1b:ec:7f:
95:60:77:11:69:9d:4e:3d:3d:77:e3:58:34:88:e9:17:f6:13:
0d:ab:77:7a:53:d6:ea:5b:2d:d8:20:b6:0b:ca:39:ef:c1:bb:
2d:cf:c9:15:7d:da:03:f9:f6:00:0d:10:3d:6b:7b:35:ac:0a:
81:27:ad:f5:25:96:ee:55:a1:e2:44:bc:a5:98:ab:27:bd:0b:
75:43:34:f2:57:2b:99:e8:83:48:a8:37:ba:b1:f1:cc:d9:f7:
c8:46:ae:4b:b8:5a:40:1e:bb:1e:b6:56:46:2c:2a:f3:ca:20:
b3:24:09:0f:a5:0a:0d:8a:71:bf:f9:8a:90:01:29:ec:07:16:
11:fa:f2:6e:f4:76:b0:c2:d9:2d:27:d5:21:27:6e:7f:e8:d9:
f7:26:54:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:08 2026 by rpki-client