
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/249cd7ff-21a7-3dd5-9242-70ca57730096.roa
File: 249cd7ff-21a7-3dd5-9242-70ca57730096.roa (raw, json)
Hash identifier: h1oPvLQDu6YnI5t3qReUHI2jLPYWkLFqZ69FHDSuk4U=
Subject key identifier: E5:8D:EF:6D:B9:DA:2E:22:FB:65:38:0A:DD:44:D6:3D:18:1D:BA:0C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D703FF1CE87806945A2972640
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/249cd7ff-21a7-3dd5-9242-70ca57730096.roa
Signing time: Wed 08 Apr 2026 13:00:33 +0000
ROA not before: Wed 08 Apr 2026 13:00:33 +0000
ROA not after: Tue 07 Jul 2026 13:00:33 +0000
asID: 13335
IP address blocks: 172.69.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:70:3f:f1:ce:87:80:69:45:a2:97:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 8 13:00:33 2026 GMT
Not After : Jul 7 13:00:33 2026 GMT
Subject: CN=e30125f9-951c-4b6f-8efd-611e99d4b30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:5a:08:58:35:55:fe:85:74:81:10:3e:be:
25:2c:f9:01:70:29:1a:f6:36:c1:bb:82:a5:10:16:
ba:97:78:74:a1:da:cd:c9:e1:e6:35:af:72:70:54:
14:91:2a:b9:41:fe:36:72:b0:71:fb:32:28:4f:0a:
1d:ec:e2:29:06:bd:56:4c:fa:6a:03:26:8a:37:37:
03:c6:b5:9c:ab:bd:74:95:d5:2b:e3:94:43:cd:bb:
43:9d:17:97:e3:9d:c8:22:65:8d:fa:9e:c5:8a:83:
9d:c1:6d:c2:38:6d:ae:a4:13:78:f1:b5:02:ef:84:
22:bb:77:72:ea:0d:b3:db:2c:8e:d2:95:2d:5b:7f:
67:d7:42:0f:a9:68:dc:af:bf:0c:fc:6b:62:e0:ce:
dc:ca:f5:af:3d:17:6e:78:1b:af:d3:73:1a:8d:65:
2a:3c:70:00:f0:d8:74:48:4d:21:d5:83:01:04:ea:
55:9b:50:39:ad:5c:ae:72:01:1a:82:f0:e9:90:6e:
56:9c:91:13:45:c4:80:b9:01:9a:04:d4:5b:ef:f3:
24:11:ff:80:eb:36:08:9b:84:da:c8:de:cb:75:d3:
de:ae:ff:42:4a:0b:4f:64:08:01:1a:ba:08:b1:fa:
0d:38:a8:f2:64:88:e6:a3:a8:52:63:9e:f3:41:58:
5f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8D:EF:6D:B9:DA:2E:22:FB:65:38:0A:DD:44:D6:3D:18:1D:BA:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/249cd7ff-21a7-3dd5-9242-70ca57730096.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:92:d4:2f:f0:35:c2:f3:6b:53:54:ce:9e:f0:52:b4:5d:50:
f9:1e:31:62:df:36:8b:7d:f3:30:22:3a:2f:be:c8:c3:08:d1:
05:7b:0c:8a:bb:f5:d2:1f:67:3d:22:95:b3:94:80:f2:9a:40:
8c:f5:28:a5:8b:e4:0f:8f:44:a1:36:87:d8:01:33:47:a1:d4:
a1:0e:d0:43:91:4c:1f:3a:96:a6:47:a9:dc:aa:c8:bc:af:58:
91:88:d2:7a:43:84:49:a4:31:74:07:eb:bb:e7:bd:70:c4:36:
38:67:7b:58:9a:fa:12:c4:44:bc:84:e3:41:52:c2:c4:e5:1f:
1b:e5:97:d4:2e:43:e7:33:42:a0:44:ec:c8:57:a8:7d:cf:ac:
20:fc:64:a1:9d:11:18:08:69:3c:ad:11:fe:dc:49:96:a4:03:
ea:46:89:16:fa:00:7e:40:0c:c3:c2:6f:37:c8:de:89:4d:7b:
4c:19:57:55:26:34:33:11:6d:0b:7a:49:2e:92:5a:8a:3d:47:
ea:46:a7:3c:52:00:c1:f3:82:4b:3d:d9:87:cd:88:f4:7b:e5:
0e:d3:95:2d:81:74:17:3b:6e:7d:98:bf:56:09:dd:04:ea:42:
96:6c:a4:1e:af:75:08:e7:6a:b7:7e:03:3f:c0:62:39:f1:25:
cb:d7:ea:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:25:21 2026 by rpki-client