
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a83b4a7-24bf-33d7-8b10-dfe0a0ea66f4.roa
File: 1a83b4a7-24bf-33d7-8b10-dfe0a0ea66f4.roa (raw, json)
Hash identifier: NLLvLkqEtMqalbzlQNxdbEPPy5z7IeZlfTbddT3tizM=
Subject key identifier: B1:32:0E:5B:65:5E:9C:0D:26:CB:D6:3F:81:E4:65:5C:7B:16:4F:19
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D6AAA9EA239E3A06E49FE7D00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a83b4a7-24bf-33d7-8b10-dfe0a0ea66f4.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 13335
IP address blocks: 172.70.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:9e:a2:39:e3:a0:6e:49:fe:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=a375106d-4991-49bf-a308-2a2e9d3b2afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:bb:8d:07:3a:40:a9:80:9f:b1:08:e5:6c:
92:ff:f4:e8:eb:64:ac:b6:f8:fe:31:50:31:ad:73:
b5:f1:07:7d:f2:c5:e8:b1:0a:16:e7:91:ae:ca:e5:
fd:88:fc:6d:5f:c7:44:e5:9a:5d:01:52:95:f1:b5:
13:8d:d7:87:ec:c7:29:1a:9c:f5:f9:a3:29:43:25:
5b:e2:53:48:00:06:bc:07:52:df:2c:41:f5:c6:a0:
c5:f3:82:0d:a9:64:ea:31:50:0e:9e:1a:ea:08:e0:
4e:e3:cb:2c:e5:db:fe:b2:40:3b:e0:25:60:ab:65:
27:59:cb:65:ba:f0:61:fd:c3:a9:ff:d3:70:41:79:
4e:67:e4:9e:2a:7c:17:1c:b8:c2:9e:24:ef:df:e1:
60:0b:cc:c8:0c:11:74:49:c7:4f:ab:be:50:c3:a5:
52:b7:49:c7:9e:0f:a2:52:a6:5f:84:7a:0f:6e:fe:
9c:01:a9:46:04:39:e7:9e:6b:e9:e8:da:e4:65:33:
5f:1b:6b:3c:68:3c:e8:a7:84:4e:a5:20:3b:4a:33:
63:98:9d:6b:6f:c0:44:ad:fd:27:a2:42:24:9a:3d:
94:7d:26:a9:f3:f9:06:70:ff:c7:a7:26:12:27:cd:
85:05:20:32:89:9e:cb:19:e4:72:86:5a:44:ae:de:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:32:0E:5B:65:5E:9C:0D:26:CB:D6:3F:81:E4:65:5C:7B:16:4F:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a83b4a7-24bf-33d7-8b10-dfe0a0ea66f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:0b:2b:6e:a3:73:0e:2c:e2:d2:37:c5:57:3c:50:79:67:07:
6f:b5:67:4b:06:1d:bc:c6:09:67:cb:5b:13:c3:18:40:cf:c7:
54:41:58:d8:bc:66:90:6c:95:2e:33:2e:a1:6d:95:b7:e1:4d:
98:8c:c8:71:eb:d1:27:4c:54:3c:a3:f4:a3:8f:a3:77:81:2f:
11:42:f9:8c:4d:79:3c:00:01:18:e8:20:8a:14:a2:b5:1a:19:
55:3e:63:cf:24:39:db:4f:6d:da:b7:b8:c5:67:ff:06:3d:17:
82:33:56:70:23:4d:af:b7:1c:8b:43:8f:b6:c3:5b:58:7e:9a:
67:66:ac:33:94:a6:dd:6a:50:e2:61:2b:cb:ae:ce:eb:58:fe:
1e:68:7f:05:41:0f:09:fa:6a:91:f1:65:fe:7f:16:96:fa:53:
d5:dd:39:aa:e9:63:81:db:fe:0f:27:66:2c:f4:b5:c8:81:c8:
9e:a7:64:14:3b:41:60:66:3b:38:52:10:ef:fc:8c:dd:09:20:
09:4f:9f:f0:09:84:8d:66:6e:79:25:a3:8a:bc:88:94:80:93:
47:cd:e5:9a:70:b8:b2:17:e3:18:f3:fb:3f:1f:8c:8a:db:2f:
e7:a9:de:92:c1:84:c5:c3:4d:7e:7c:3d:a4:b6:0e:a9:8a:6b:
2f:6d:98:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:04:29 2026 by rpki-client