
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5be14a37-b219-3c75-8c68-d8a5bc8ec38d.roa
File: 5be14a37-b219-3c75-8c68-d8a5bc8ec38d.roa (raw, json)
Hash identifier: XP03seVXGVAO6GO16u0eqQnL1RkwFAemcDRQiUo+x64=
Subject key identifier: A5:28:4C:87:D5:4A:7D:8F:54:AC:58:91:7D:21:B0:5B:E5:91:16:39
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E253EF410D5C125D819517360
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5be14a37-b219-3c75-8c68-d8a5bc8ec38d.roa
Signing time: Fri 12 Jun 2026 09:00:11 +0000
ROA not before: Fri 12 Jun 2026 09:00:11 +0000
ROA not after: Thu 10 Sep 2026 09:00:11 +0000
asID: 13335
IP address blocks: 172.68.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:25:3e:f4:10:d5:c1:25:d8:19:51:73:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 12 09:00:11 2026 GMT
Not After : Sep 10 09:00:11 2026 GMT
Subject: CN=2fb9974e-c4a7-4b44-8934-d4358045677d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:38:ab:0d:3b:5d:57:6e:81:5f:50:3c:84:81:
40:1c:8b:b2:cf:87:d3:4d:0a:e8:68:2d:4f:fd:c4:
47:85:0d:66:a0:ed:e5:19:08:47:1d:8a:7b:5a:f9:
df:f0:77:d0:1b:61:c9:e1:e1:bb:8c:f5:c4:34:53:
76:36:27:cf:4c:da:d1:86:92:fe:7f:80:59:1b:fa:
85:cb:6c:74:78:a3:a6:34:f1:21:9f:ba:ba:0f:b5:
10:d1:85:71:31:f5:f5:1d:f8:55:68:5d:69:a9:24:
a9:c2:d1:69:e6:78:2d:7d:f2:9a:4d:27:71:20:94:
9f:5c:96:10:e5:24:0f:89:8b:2f:81:09:a5:5e:29:
2e:7d:58:e4:e0:44:2b:a9:e5:bd:87:8e:c9:07:20:
dc:b2:06:e9:08:1e:9c:1a:f5:00:c4:13:a5:c6:ac:
db:9e:99:47:8f:c0:46:04:1b:cf:f3:84:9f:38:af:
77:9e:72:0f:6a:10:1a:7f:65:ec:b6:6d:fe:84:d1:
7b:57:34:65:52:17:54:87:3f:9d:bd:a4:5a:34:57:
3b:7c:f3:f2:23:54:10:f8:72:0a:c1:4c:ac:76:94:
78:3e:49:e9:70:e2:8a:8c:04:08:1f:f6:cf:56:ac:
80:f1:3a:dd:5a:31:f9:a1:f5:41:76:39:e1:d9:ae:
fa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:28:4C:87:D5:4A:7D:8F:54:AC:58:91:7D:21:B0:5B:E5:91:16:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5be14a37-b219-3c75-8c68-d8a5bc8ec38d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:54:18:c3:27:17:fc:b7:fd:24:a6:96:54:1f:66:9e:da:75:
3e:48:e1:b2:2a:de:df:fa:5d:71:a7:c1:0f:75:a8:c4:c8:3a:
44:fa:b1:5a:fb:d4:95:91:16:10:de:d5:41:00:c3:0e:5a:2b:
bc:8f:9f:bb:5c:0f:73:c6:da:76:3c:05:fd:0f:05:66:ea:12:
ce:b6:10:19:75:4d:81:3d:99:73:d3:66:bc:1c:6b:ed:82:94:
04:f9:a3:36:15:dd:6e:cf:6f:c7:ff:e8:d8:e0:72:b9:ab:60:
21:c6:f3:9f:37:a7:e9:94:3f:ab:b7:4b:37:62:21:09:de:0f:
08:4f:db:b8:e7:d4:65:db:7b:6e:00:08:17:8e:c2:33:8b:5f:
31:02:7b:a7:18:6c:23:c7:96:b6:82:99:c5:2e:49:40:f1:a3:
d6:8a:5e:c0:62:c9:a9:08:48:e6:c7:da:c6:8e:c8:6f:90:a3:
e0:91:cf:8d:71:5b:8a:fc:84:c5:6a:c1:56:18:a3:71:8a:59:
cd:c1:81:66:07:99:d3:1d:54:a4:58:b4:e7:2d:c9:f0:6e:0d:
56:16:f9:8a:57:2e:a6:49:6f:88:f6:65:ad:0a:4d:01:97:ff:
41:48:a1:ef:6c:e5:7d:53:64:15:55:5f:30:00:ad:8a:ae:aa:
fd:ec:55:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:15:02 2026 by rpki-client