
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/481cb2a2-f993-3240-b148-77d704915144.roa
File: 481cb2a2-f993-3240-b148-77d704915144.roa (raw, json)
Hash identifier: Z+hjZrLGX6+U7RnluaHvHRQ2c5h2WwrS38aosgg5nOQ=
Subject key identifier: 2F:E2:81:07:CC:3C:E2:E4:B5:0A:F8:61:7C:F1:DC:D7:85:AE:DB:8A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D71A512695F75167CC16EC1A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/481cb2a2-f993-3240-b148-77d704915144.roa
Signing time: Thu 09 Apr 2026 01:00:23 +0000
ROA not before: Thu 09 Apr 2026 01:00:23 +0000
ROA not after: Wed 08 Jul 2026 01:00:23 +0000
asID: 13335
IP address blocks: 172.70.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:71:a5:12:69:5f:75:16:7c:c1:6e:c1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 9 01:00:23 2026 GMT
Not After : Jul 8 01:00:23 2026 GMT
Subject: CN=27245d2b-d6d7-4a22-a0c0-5e57205d348e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:0f:8a:21:bc:78:a5:da:63:73:9b:d0:4a:
71:67:e1:99:e0:f0:0a:87:b0:6e:2c:e5:9f:2d:4c:
4c:a9:67:94:f3:ba:13:63:81:b2:64:8e:c7:3d:27:
7d:76:5c:2f:43:47:bf:9b:d5:9b:bd:14:68:5c:64:
4e:05:e4:7e:e3:b3:16:56:46:b6:95:eb:5e:35:c4:
52:a4:ac:e9:bd:a2:a6:5f:82:90:08:1c:f0:a9:50:
8c:47:16:4d:78:0d:d1:5d:59:97:49:f7:b8:ca:fa:
fa:9d:df:3d:4a:7a:70:8f:84:9d:49:b4:86:94:c2:
d3:9a:d9:d7:f5:c2:56:da:04:e6:cb:24:9a:38:50:
4b:c1:ba:f0:c1:72:28:e1:ea:e7:69:85:89:6a:54:
86:41:67:bc:61:e5:6f:96:c6:d6:92:75:91:18:b2:
ea:9a:8a:f6:df:10:91:49:40:3c:a5:cc:70:7b:fb:
a9:a8:7f:b5:a1:7b:f2:18:e0:b4:75:26:02:61:6a:
f8:a6:f3:c6:83:b0:c0:30:56:55:d5:c1:5c:cf:63:
b2:b7:b3:ed:6f:dc:6f:45:cf:c7:be:0d:cd:21:d9:
ff:9d:47:f3:c8:d4:de:58:b9:39:5b:b1:aa:80:9d:
a5:1e:d5:09:d7:90:83:35:75:8b:72:ef:41:47:a2:
36:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E2:81:07:CC:3C:E2:E4:B5:0A:F8:61:7C:F1:DC:D7:85:AE:DB:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/481cb2a2-f993-3240-b148-77d704915144.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:33:e3:2a:14:f6:3c:aa:98:ee:db:99:f2:c5:00:ab:12:68:
1d:91:d8:78:67:7b:29:6d:f8:66:6f:fc:fb:f3:f5:1e:fd:9c:
63:2d:61:9c:84:ba:9b:e6:e0:16:87:06:4a:6a:7f:62:a5:22:
b3:dd:74:56:89:95:2f:85:56:89:93:63:d6:3b:32:12:01:ce:
c0:c3:68:16:22:13:2f:d7:bb:c9:b6:7a:fb:85:ee:f5:69:55:
dd:3e:01:07:51:d3:ce:e5:37:38:00:c7:fe:3b:6a:2a:ad:1c:
d2:5b:4e:42:ab:09:d5:11:2d:f0:c9:a3:c0:a2:ee:bb:83:70:
81:37:c6:c0:47:59:81:4a:ba:95:fc:8d:83:e8:ab:a5:50:75:
2d:c4:32:bb:e0:20:03:1e:b9:e8:ef:5b:24:cd:43:31:6b:31:
49:bd:08:ff:e8:48:c7:a9:53:56:b3:6b:dc:4a:e3:92:c0:eb:
92:da:6f:89:ce:60:ad:15:a5:68:9b:c9:2e:59:3c:8f:35:d4:
f5:74:a9:01:2c:2c:ee:a9:a5:ec:a6:d8:eb:6e:f7:1a:07:cf:
9a:61:5d:ae:ed:5f:e6:7b:fa:96:12:f8:43:ff:86:f2:c1:c6:
09:42:87:87:f9:22:90:9c:5d:c1:35:dd:1e:25:2a:bb:0e:85:
d7:ad:d2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:30:27 2026 by rpki-client