
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/281263a3-971c-3965-88f1-27c35caa37de.roa
File: 281263a3-971c-3965-88f1-27c35caa37de.roa (raw, json)
Hash identifier: c/hbVnmoabtn0FEX4dL9U2vh0xJF5XBpIHQkDI36T2M=
Subject key identifier: 6A:4C:09:08:71:1E:B9:5F:9B:A1:8D:03:0F:F5:17:26:AC:ED:10:2F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D71A5188FA2BFEE40E6B0E740
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/281263a3-971c-3965-88f1-27c35caa37de.roa
Signing time: Thu 09 Apr 2026 01:00:23 +0000
ROA not before: Thu 09 Apr 2026 01:00:23 +0000
ROA not after: Wed 08 Jul 2026 01:00:23 +0000
asID: 13335
IP address blocks: 172.71.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:71:a5:18:8f:a2:bf:ee:40:e6:b0:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 9 01:00:23 2026 GMT
Not After : Jul 8 01:00:23 2026 GMT
Subject: CN=25a98142-8204-4432-acbb-09d08c14f620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:63:2c:71:b8:db:8b:37:0b:3b:78:c6:cf:81:
0e:30:4e:f2:33:31:8a:f4:57:43:c5:67:13:3c:10:
88:d7:67:cd:b4:e7:39:ca:c2:18:1e:bc:7d:4b:79:
5a:16:27:92:c0:a8:d8:2f:0b:25:e1:f6:01:d5:de:
88:f9:f5:1b:01:8d:6c:d4:67:b4:b7:8d:d6:72:49:
58:c2:5e:fc:67:2e:d6:f5:e5:b9:ac:d7:8c:ab:64:
99:a8:bb:28:e0:da:b4:12:ca:2f:c9:36:49:e7:dd:
a8:7d:11:7c:aa:90:8a:45:81:97:a0:1d:53:e9:db:
fa:e6:ca:45:27:7f:a6:70:56:51:69:25:20:36:cf:
72:ef:33:c2:9c:67:d9:18:49:70:60:47:e8:9c:ea:
1c:15:d0:09:26:72:a2:c3:b6:38:b5:72:11:59:95:
0b:8e:05:f1:a6:95:33:89:9f:d1:bc:d4:8d:f6:d2:
8a:31:97:b0:a1:8c:6d:67:cf:e7:df:cb:0c:74:77:
96:e3:eb:a5:12:f2:01:ca:aa:9a:ac:49:2c:0e:c6:
3a:c6:44:65:42:97:32:24:72:16:49:1c:12:6f:03:
4d:1b:56:2f:e4:f0:58:c1:7e:1c:92:0e:98:c0:d4:
db:04:e6:a2:8f:75:53:b8:ae:cb:b2:0b:6d:b0:d9:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4C:09:08:71:1E:B9:5F:9B:A1:8D:03:0F:F5:17:26:AC:ED:10:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/281263a3-971c-3965-88f1-27c35caa37de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:bf:6a:89:21:c5:a3:dc:81:2f:cd:05:c3:34:05:c5:9b:80:
fe:b9:85:78:d1:5c:2c:57:93:39:38:0e:1f:7c:e5:0c:29:a2:
49:9d:05:f7:76:ff:08:dd:63:d4:df:09:43:85:39:79:a3:61:
da:a5:da:5a:cc:ac:8b:46:a3:73:bd:9d:08:76:69:49:23:ff:
a8:bd:f7:d9:04:4c:78:65:25:56:d2:c7:8b:e3:ee:74:45:9a:
55:f3:95:c9:ab:d9:26:d5:f0:d3:b7:25:d6:cb:87:a4:af:99:
6f:e5:f8:d4:a9:bd:cf:a0:3c:f5:21:59:70:8c:f0:4c:b5:97:
21:3b:56:41:a5:ac:cb:25:48:43:17:50:30:32:39:99:df:28:
36:8f:7c:59:5d:44:db:47:60:78:0c:ce:61:79:b0:d1:16:62:
cf:72:aa:7d:4f:d0:8a:2e:00:6f:26:71:78:18:fb:df:f8:20:
4f:ef:01:69:73:d2:ad:a9:44:70:1f:f9:38:d6:d1:12:43:92:
58:cc:90:6e:d3:42:a1:db:8a:fe:3c:7b:88:1f:37:46:96:fd:
12:94:8e:44:c6:f1:04:34:46:db:63:2a:fd:51:e7:13:99:9a:
cb:77:8f:04:8f:7c:59:83:60:22:fc:d9:1d:6f:fe:98:96:f7:
75:66:59:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:46:14 2026 by rpki-client