
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/265d5dbd-a80a-3361-af88-2f4dff963349.roa
File: 265d5dbd-a80a-3361-af88-2f4dff963349.roa (raw, json)
Hash identifier: vAKpzzJbj+XmSL6PKUr/jxYABaJEWcMThp4NHHcWQgM=
Subject key identifier: 49:C3:A0:90:60:3B:8B:96:8F:F8:00:DF:2C:32:0F:13:DD:88:37:91
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E26A45853D836B141927B10C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/265d5dbd-a80a-3361-af88-2f4dff963349.roa
Signing time: Fri 12 Jun 2026 21:00:11 +0000
ROA not before: Fri 12 Jun 2026 21:00:11 +0000
ROA not after: Thu 10 Sep 2026 21:00:11 +0000
asID: 14789
IP address blocks: 172.71.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:26:a4:58:53:d8:36:b1:41:92:7b:10:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 12 21:00:11 2026 GMT
Not After : Sep 10 21:00:11 2026 GMT
Subject: CN=3a3c4a09-c55f-4490-bbe9-56364af4e0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:29:91:b7:73:b8:bd:97:f9:13:64:5c:a4:
36:ef:75:1e:9f:9b:b1:28:4b:9c:a0:01:c9:4f:99:
4f:0a:c4:0f:ec:22:fe:99:51:be:d7:51:65:0b:11:
f4:28:72:53:0a:66:39:96:79:06:f4:a8:74:54:e8:
6a:2a:25:3b:0b:d1:c7:1f:02:8a:83:d6:29:3a:be:
cf:d4:a2:11:fa:8d:8c:43:38:ed:57:23:52:e3:90:
f9:1f:99:85:a0:dc:e0:98:b6:5f:39:ef:66:03:f1:
dc:4d:ad:79:4d:82:fc:49:65:c4:b9:6c:db:52:46:
36:0e:c7:1f:8b:fd:37:b2:97:c4:84:35:18:49:38:
e5:d3:dd:83:40:8b:6e:7e:2a:46:03:af:5b:b8:a6:
93:b2:4e:2a:dc:e6:3e:2f:57:35:eb:a8:7b:87:83:
30:4b:87:14:a9:56:bb:82:7d:52:39:21:0e:79:ae:
f9:19:79:52:72:7a:09:cd:64:bd:ec:e9:59:87:5d:
70:2a:ee:89:df:7b:9f:ca:9d:78:5a:69:81:0b:16:
10:5d:2a:83:f0:ff:30:bb:ab:d7:0d:49:13:96:f9:
40:d1:48:12:bb:37:fb:64:db:a9:f6:86:91:21:2b:
19:46:80:70:6a:c3:6c:d7:fd:35:2f:45:2d:95:d6:
44:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C3:A0:90:60:3B:8B:96:8F:F8:00:DF:2C:32:0F:13:DD:88:37:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/265d5dbd-a80a-3361-af88-2f4dff963349.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:70:95:78:0a:ca:e3:e9:d1:e8:86:5e:8d:e3:38:7a:0a:38:
2b:b3:a5:0d:ee:a8:96:3f:11:54:a3:b0:36:d8:98:61:ea:f4:
bc:99:88:1f:3a:57:82:67:d9:0b:22:21:64:86:1d:ce:36:02:
8a:1a:6a:a6:75:72:10:c5:d7:e9:e4:9a:25:ab:0e:1c:d4:67:
ec:9f:d1:bb:5c:6e:2c:27:ac:41:02:50:12:bd:0e:62:49:38:
51:91:87:22:19:ed:b2:83:28:16:62:1a:34:e7:30:70:da:90:
e9:6b:d2:4f:8c:6f:e1:77:8e:cd:7a:61:7d:17:d0:f3:fc:a5:
98:be:63:b8:fd:54:52:34:d4:f5:1a:d4:48:8f:df:5e:3d:76:
3c:d6:2e:dc:c1:64:98:0e:b8:7f:44:1e:a7:2e:cf:30:01:45:
eb:c6:76:00:5d:7b:e6:93:61:e0:99:46:4d:cb:3b:26:a1:a1:
f4:3c:91:83:bf:62:42:b3:e7:98:3a:b9:ce:d3:a9:a0:cc:bf:
e2:0a:94:bb:93:34:29:03:28:d6:87:7f:f0:28:31:e3:a2:2b:
85:47:a1:05:6a:dd:ea:74:51:bf:de:2e:77:1b:19:ab:5e:29:
96:9b:83:4b:ef:32:66:28:db:14:8a:fe:89:ed:be:0c:ea:03:
19:41:f1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:53:35 2026 by rpki-client