
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38f04789-bbe7-3d34-8d74-0ee8e1e83360.roa
File: 38f04789-bbe7-3d34-8d74-0ee8e1e83360.roa (raw, json)
Hash identifier: acDFgG5zg8TNFWwTsbvKBF2UuAjD3EYzejNE8a4m6U4=
Subject key identifier: 30:F5:FF:9B:43:9C:74:98:66:21:76:B0:F1:C4:99:D4:27:52:A6:5D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D67DFE7BD392D31C30D535600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38f04789-bbe7-3d34-8d74-0ee8e1e83360.roa
Signing time: Sun 05 Apr 2026 13:00:31 +0000
ROA not before: Sun 05 Apr 2026 13:00:31 +0000
ROA not after: Sat 04 Jul 2026 13:00:31 +0000
asID: 13335
IP address blocks: 172.64.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:67:df:e7:bd:39:2d:31:c3:0d:53:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 5 13:00:31 2026 GMT
Not After : Jul 4 13:00:31 2026 GMT
Subject: CN=6b99697b-4119-433d-aff1-c79f37930923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8a:b8:c7:1e:c8:a1:7e:c0:2a:ee:6e:11:72:
81:d8:81:0b:6f:c1:68:c4:f8:13:e2:e9:27:df:ac:
b3:9c:94:26:78:26:90:3f:5e:8c:79:9c:61:7e:56:
df:db:eb:aa:d2:16:86:e6:50:26:70:25:51:c3:04:
c0:95:d3:63:7d:22:3f:a0:1c:3d:73:b4:64:2d:7e:
72:d4:b9:76:56:ba:0d:be:bc:a4:37:a0:60:1f:62:
95:65:e6:17:77:2d:8f:0a:fa:b3:33:f6:8d:f9:d8:
0c:33:56:a4:f0:f6:14:7c:e1:07:16:6c:f0:6c:73:
76:c9:73:33:e1:cd:fe:6c:58:8f:e7:9e:4e:42:58:
dc:ee:44:be:95:bd:e9:8e:c7:9a:e2:7e:de:0c:41:
4f:b7:a5:af:ba:1b:4f:0d:3b:0f:26:62:f3:cf:ed:
c4:35:5b:a0:44:76:be:49:9a:cb:7b:89:3c:7f:b6:
72:8d:f7:7c:46:9a:cb:7a:d2:36:75:24:b3:30:8d:
1a:92:93:62:b2:bb:b5:a1:b2:4f:c5:9b:fb:57:d5:
bf:0b:41:c3:06:c8:ab:50:97:df:9b:84:85:8f:3c:
14:b8:19:bd:28:b9:4f:48:ca:37:05:37:d5:5b:bd:
df:da:52:a0:fb:2e:09:32:a0:6f:57:b4:f7:13:67:
b6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F5:FF:9B:43:9C:74:98:66:21:76:B0:F1:C4:99:D4:27:52:A6:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38f04789-bbe7-3d34-8d74-0ee8e1e83360.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:1d:a4:f0:20:f7:12:26:e5:c5:06:1c:53:d7:b4:4e:a1:3a:
75:22:51:9f:29:58:05:ab:2f:81:37:8b:8c:35:0a:4f:19:9f:
b9:5a:79:7c:b4:ba:26:9b:a9:50:53:95:2b:96:12:59:cc:ed:
d3:8e:a0:05:95:5b:9e:7a:78:e6:ad:5f:1c:c1:bd:9a:06:98:
ea:e4:fa:53:01:88:38:c4:1c:aa:41:0d:40:27:c3:aa:ff:3d:
c3:11:b2:46:07:31:cb:52:c3:6f:0a:f5:ab:73:f0:3a:c5:2a:
99:f1:73:c9:a6:b0:28:2e:4e:5e:9d:a8:fc:fb:c8:f1:9e:2d:
4e:49:3e:e3:83:ce:20:8b:09:ae:43:04:f4:17:98:e7:f9:c8:
4a:04:55:b2:d9:4d:d9:03:ab:6c:45:b3:fb:0c:1f:52:59:d1:
35:73:4b:c5:39:ac:be:35:e6:31:e5:db:1e:74:94:4c:88:ce:
bc:ca:26:0d:0d:98:f5:48:20:f2:0b:98:d3:af:d4:f5:42:bb:
cc:90:f1:ad:97:5a:47:f1:71:88:ea:b5:27:fd:a0:57:03:e8:
5d:e8:6c:21:e6:5a:fb:1c:3c:c2:c1:48:3c:78:11:3c:92:68:
6f:74:3d:04:ff:cb:fe:dd:a6:92:8b:0f:ba:eb:8c:3f:9a:d9:
4c:22:2b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:43:56 2026 by rpki-client