
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/439459c9-55e4-3227-88ac-cc00dce2b1c9.roa
File: 439459c9-55e4-3227-88ac-cc00dce2b1c9.roa (raw, json)
Hash identifier: hHwfSXQkTShL2r9pk6Q9EjJNDV84dtzQ4CQzG1RiSqc=
Subject key identifier: E9:27:00:96:8E:C8:8E:2A:C4:B8:66:55:25:0F:44:78:A8:F0:1E:6A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D67DFD59BC33C7A5951100080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/439459c9-55e4-3227-88ac-cc00dce2b1c9.roa
Signing time: Sun 05 Apr 2026 13:00:31 +0000
ROA not before: Sun 05 Apr 2026 13:00:31 +0000
ROA not after: Sat 04 Jul 2026 13:00:31 +0000
asID: 13335
IP address blocks: 172.64.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:67:df:d5:9b:c3:3c:7a:59:51:10:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 5 13:00:31 2026 GMT
Not After : Jul 4 13:00:31 2026 GMT
Subject: CN=d771059a-8de5-4c74-8199-f2937926f959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:71:07:4f:49:93:32:83:56:5f:01:08:df:9b:
45:a9:53:6d:50:70:49:a8:76:fe:80:3e:28:ab:07:
20:82:7b:32:1b:c4:28:ea:b1:23:08:86:09:84:2f:
f8:a3:de:f4:ef:f2:96:d5:58:d0:8d:d5:b5:4c:43:
6e:5c:d5:89:28:3b:71:14:94:54:61:11:c0:82:d2:
c3:ee:7f:22:e9:82:d7:11:6a:ca:e6:a5:49:ef:01:
50:0a:c5:21:09:98:b8:80:d5:14:d7:5e:32:0e:be:
a5:0a:24:e0:00:83:ac:23:ee:5b:d6:7c:89:35:68:
a4:0a:e0:fb:c1:f8:cc:67:6d:fd:b9:d4:00:17:ca:
0b:e6:6b:e4:54:c7:12:81:b1:bb:b1:9e:24:6f:4b:
2e:86:9c:85:e8:28:34:c9:bb:2f:66:16:b3:42:af:
16:e7:3b:24:d8:f7:bd:00:1d:bb:f2:81:bb:13:39:
0d:d8:66:25:4d:91:87:d1:ba:42:c7:45:fd:e8:f9:
db:2d:21:8b:f1:d4:3f:c3:0e:22:70:47:de:61:7d:
39:a2:5b:8c:6f:d7:30:f3:21:46:ce:ba:80:5c:e1:
36:7c:b9:f0:4d:e1:00:5d:d9:ce:5c:2e:80:84:1b:
bb:f7:8b:83:a4:ec:c5:8d:44:fe:ad:62:10:94:5a:
79:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:27:00:96:8E:C8:8E:2A:C4:B8:66:55:25:0F:44:78:A8:F0:1E:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/439459c9-55e4-3227-88ac-cc00dce2b1c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:2f:19:da:6d:19:5f:9a:f2:8c:15:7c:96:da:92:89:07:1f:
fd:db:de:a9:4a:bd:47:e0:ef:61:73:b4:d0:59:a5:dd:e4:ab:
ea:68:a0:34:14:c7:7c:88:a9:59:0a:be:7d:fe:93:f8:44:c2:
d7:43:c1:9c:fe:74:ac:97:c7:c3:b0:14:f0:f8:84:f6:4e:cc:
3f:8e:30:81:25:55:ea:31:0b:af:6d:fa:d8:7b:02:0a:f7:98:
ac:70:4d:ee:26:1d:64:df:cd:ca:1e:e1:3d:0a:21:b9:11:2f:
1d:93:59:12:4a:ac:06:1f:17:65:8a:85:66:21:7c:a7:fe:c3:
33:f4:b7:55:af:b9:e1:dc:ff:c5:f5:ce:fe:d6:82:64:6a:25:
2c:ab:f3:72:ef:f5:f6:ce:1f:bd:20:bc:db:76:55:26:82:97:
0e:ef:79:32:31:0e:b9:91:91:d0:28:f4:3d:d4:63:b5:75:0b:
94:62:dd:64:df:71:f1:3a:7f:45:e8:0d:0d:7a:52:0b:45:db:
08:01:2d:de:27:16:14:dd:f9:49:a8:bd:93:1c:ae:4b:ce:24:
8d:be:dc:37:2e:e1:02:a5:6a:1a:1a:57:49:8f:8b:b7:a0:cc:
8a:e5:d9:03:90:2d:33:a6:02:8f:d2:7b:e3:4a:39:9e:a6:65:
53:4d:58:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:30:23 2026 by rpki-client