
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/213699fd-2db8-3fde-9c39-0495d6d87bd5.roa
File: 213699fd-2db8-3fde-9c39-0495d6d87bd5.roa (raw, json)
Hash identifier: PbA5399v/Hg0xcnxNGnHohFDD5PHgtRKFsAW8xkLcaM=
Subject key identifier: 23:00:84:81:20:22:CD:6D:31:77:B3:62:FB:5E:19:E0:DF:19:1F:C7
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D86957CDED2AD9B44084B0500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/213699fd-2db8-3fde-9c39-0495d6d87bd5.roa
Signing time: Thu 16 Apr 2026 13:00:31 +0000
ROA not before: Thu 16 Apr 2026 13:00:31 +0000
ROA not after: Wed 15 Jul 2026 13:00:31 +0000
asID: 13335
IP address blocks: 172.64.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:86:95:7c:de:d2:ad:9b:44:08:4b:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 16 13:00:31 2026 GMT
Not After : Jul 15 13:00:31 2026 GMT
Subject: CN=67821c12-4552-4555-965b-3a4ee6e09e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:df:2b:44:26:84:30:c8:f6:ec:8d:bc:00:11:
07:d6:ee:a9:70:f9:9b:3d:61:15:88:f6:d4:10:79:
32:24:76:59:a8:51:23:ca:34:bc:dc:c6:81:42:dc:
90:2c:cb:c8:47:2f:d2:b5:9d:d9:48:54:30:b0:e4:
92:97:ad:bc:47:6e:56:70:1f:c1:89:40:30:6f:e7:
32:62:b6:d4:c9:f5:59:a6:62:98:16:64:3c:31:cc:
d7:4f:a6:40:92:a6:45:2f:15:e8:6e:6b:73:59:8f:
a0:00:0a:ef:df:8a:d2:69:39:1a:b8:94:a4:b1:3f:
ad:4d:b1:ac:65:1e:ec:91:a7:47:ae:18:63:74:c3:
d7:2b:be:0d:bc:42:31:3d:35:67:c0:12:db:32:c5:
be:5b:b0:dd:a5:10:03:6e:00:83:b6:93:dd:83:b9:
e3:16:b2:4c:b2:90:ec:fd:7b:42:cd:3e:a6:99:7b:
34:de:db:3d:ad:10:40:ca:f7:14:b8:44:95:5c:de:
26:3b:97:16:90:dc:fb:ca:0e:b3:7f:65:e5:f2:6f:
67:2e:80:c4:52:33:82:59:18:59:95:eb:2b:f2:e7:
e0:74:28:b2:52:37:bf:47:22:3d:7f:2a:35:8e:8c:
c3:b0:94:4b:fc:3c:0d:f2:7b:1d:c7:5f:dc:d1:44:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:00:84:81:20:22:CD:6D:31:77:B3:62:FB:5E:19:E0:DF:19:1F:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/213699fd-2db8-3fde-9c39-0495d6d87bd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:67:76:ef:df:e7:35:cb:67:98:b3:0a:0e:bd:24:db:b5:7f:
d1:71:8f:1f:31:62:ec:f8:10:d3:bb:ef:d1:c3:99:9f:21:a0:
0d:e2:0b:13:de:9e:0c:d9:c8:dc:dd:71:ee:da:fa:61:43:c1:
5e:06:f3:15:7f:15:b7:7e:11:1e:26:d7:37:c5:f6:0b:a9:03:
e5:7a:83:e3:97:35:db:7f:0e:f9:db:cb:19:9d:de:73:2f:b2:
9f:16:c6:35:67:43:e7:69:fc:f8:d1:db:64:e1:1c:1a:60:19:
62:da:24:71:bf:15:c7:0f:c8:e7:d0:5e:ef:8e:1d:f0:1c:ed:
21:73:1b:d7:e1:ce:4e:96:23:e2:be:bb:e4:fc:00:3f:a2:27:
3d:4d:8f:1f:c4:11:cb:f5:95:37:8c:31:6f:96:08:02:20:72:
33:94:2b:41:88:11:f6:0a:d8:ba:2f:3f:b7:a5:c5:72:e2:41:
df:7a:48:f7:7c:31:39:59:7f:4d:b3:57:2e:3b:3a:f0:d2:71:
d0:54:dd:5c:dd:d7:a2:49:99:ba:99:03:dc:97:be:0e:b8:49:
65:fd:f2:7f:cb:c5:d6:76:c0:37:26:94:a1:3d:b8:cb:b3:7b:
fe:a2:2b:e4:c0:d2:9e:ff:aa:e9:df:d3:06:7c:d9:3a:3b:72:
2b:a9:74:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlXze0q2bRAhLBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk
Njc4MjFjMTItNDU1Mi00NTU1LTk2NWItM2E0ZWU2ZTA5ZTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid8rRCaEMMj27I28ABEH1u6pcPmbPWEViPbU
EHkyJHZZqFEjyjS83MaBQtyQLMvIRy/StZ3ZSFQwsOSSl628R25WcB/BiUAwb+cy
YrbUyfVZpmKYFmQ8MczXT6ZAkqZFLxXobmtzWY+gAArv34rSaTkauJSksT+tTbGs
ZR7skadHrhhjdMPXK74NvEIxPTVnwBLbMsW+W7DdpRADbgCDtpPdg7njFrJMspDs
/XtCzT6mmXs03ts9rRBAyvcUuESVXN4mO5cWkNz7yg6zf2Xl8m9nLoDEUjOCWRhZ
lesr8ufgdCiyUje/RyI9fyo1jozDsJRL/DwN8nsdx1/c0UTGoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCMAhIEgIs1tMXezYvteGeDfGR/HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjEzNjk5ZmQtMmRiOC0z
ZmRlLTljMzktMDQ5NWQ2ZDg3YmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEAqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA5ndu/f5zXLZ5izCg69JNu1f9Fxjx8xYuz4ENO779HDmZ8hoA3iCxPe
ngzZyNzdce7a+mFDwV4G8xV/Fbd+ER4m1zfF9gupA+V6g+OXNdt/Dvnbyxmd3nMv
sp8WxjVnQ+dp/PjR22ThHBpgGWLaJHG/FccPyOfQXu+OHfAc7SFzG9fhzk6WI+K+
u+T8AD+iJz1Njx/EEcv1lTeMMW+WCAIgcjOUK0GIEfYK2LovP7elxXLiQd96SPd8
MTlZf02zVy47OvDScdBU3Vzd16JJmbqZA9yXvg64SWX98n/LxdZ2wDcmlKE9uMuz
e/6iK+TA0p7/qunf0wZ82To7ciupdEQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:07:09 2026 by rpki-client