
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/346b0604-a4dd-345c-9c23-8b8c6112222e.roa
File: 346b0604-a4dd-345c-9c23-8b8c6112222e.roa (raw, json)
Hash identifier: MPuwB65UJefmaFo+XgviQ0Wj7uPsyF/TemJvBmiy/mI=
Subject key identifier: 10:9C:1E:42:1A:E3:52:5E:0D:DF:5B:BC:FD:DA:59:C1:40:8E:F2:45
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584CEE8CC2DDB3DA6347F4CAD800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/346b0604-a4dd-345c-9c23-8b8c6112222e.roa
Signing time: Sat 21 Feb 2026 02:00:32 +0000
ROA not before: Sat 21 Feb 2026 02:00:32 +0000
ROA not after: Fri 22 May 2026 01:00:32 +0000
asID: 13335
IP address blocks: 172.68.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ee:8c:c2:dd:b3:da:63:47:f4:ca:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 21 02:00:32 2026 GMT
Not After : May 22 01:00:32 2026 GMT
Subject: CN=c7305411-ff51-4de2-a42a-e2577fa1f258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:33:21:bc:2c:db:67:99:10:fd:40:df:56:f5:
ab:66:61:85:82:78:1b:44:5e:02:c7:b6:a1:3c:b9:
90:31:2e:b2:15:9e:cb:f5:cf:b5:03:08:fc:e7:72:
57:79:d3:4b:60:e3:09:f1:64:3a:c3:be:bb:28:4b:
4c:33:da:b5:e7:03:1c:16:63:e3:b4:5d:bb:f1:03:
13:47:5a:22:53:0c:88:23:ac:69:b8:7e:6f:6c:3e:
42:4e:3a:86:e6:19:bc:93:70:0b:92:7f:23:c2:12:
ce:3a:25:8a:74:8e:3c:ee:d9:7a:b1:3d:14:b6:2a:
d3:3a:4d:fa:e7:9c:97:45:71:b0:64:5b:a7:9b:a0:
30:80:93:63:9b:d3:26:eb:dc:b0:bf:39:4b:e4:c2:
c0:db:3e:b1:ae:a6:1b:89:d8:68:cc:94:9a:4b:3a:
a1:58:86:03:73:ae:f4:8a:7b:5f:1b:0e:ec:0e:d6:
bd:40:38:66:8f:76:fa:4a:be:c3:ce:88:e6:00:12:
9d:a6:0a:0e:b5:86:01:8b:6a:bd:86:e2:9f:10:8d:
05:ef:4f:d9:07:c7:35:f3:8a:ca:e5:4e:a2:ff:a1:
3f:e4:1b:bd:23:25:71:eb:a1:47:e3:a0:1c:ff:df:
03:ba:17:69:18:47:6d:60:72:b0:cc:19:a3:c4:30:
f9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9C:1E:42:1A:E3:52:5E:0D:DF:5B:BC:FD:DA:59:C1:40:8E:F2:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/346b0604-a4dd-345c-9c23-8b8c6112222e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:e9:df:5b:be:2c:e9:21:91:07:bb:dc:20:46:d6:a0:d2:e7:
2d:ab:05:8f:7a:cc:6a:1a:62:4c:9a:a1:b7:7b:5f:de:6b:fe:
10:51:1d:35:10:a5:02:4f:4b:8b:10:75:70:74:a7:a1:61:88:
55:bf:6b:12:fa:63:b1:2b:45:39:d1:89:ab:16:22:b2:cb:5b:
b3:ec:80:31:77:a0:2f:23:f8:c9:cb:16:71:30:b6:28:7a:a4:
69:6c:c5:b4:15:17:5d:09:c1:98:ff:21:63:d7:d6:49:17:2a:
e6:67:81:75:1c:a0:70:e6:a9:bd:2f:a8:78:5f:8e:eb:65:64:
ba:50:e4:16:fa:c1:e2:fb:b2:9e:83:3b:1c:6a:89:3e:85:c0:
9b:8e:29:4e:86:e0:c1:79:36:1c:e3:b6:05:90:e7:80:fd:d3:
86:ba:73:0e:85:cf:e2:e7:31:c1:00:fc:e9:c9:c6:d3:eb:c5:
22:ca:99:e4:a7:d0:a4:cf:a8:85:62:fa:ef:04:99:67:86:47:
7c:57:ef:2d:4f:6a:3e:4e:f3:3d:56:48:96:fa:7c:85:50:2e:
80:7c:f9:96:e7:e2:99:29:55:81:2a:12:31:c2:86:7f:b1:3f:
53:1c:71:50:71:2b:1c:93:de:e0:39:c5:72:4a:4e:a0:92:0a:
88:e6:54:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:09:03 2026 by rpki-client