
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b553b32-9780-3d84-bd19-b57cdc3c261f.roa
File: 6b553b32-9780-3d84-bd19-b57cdc3c261f.roa (raw, json)
Hash identifier: GOSJjkYmbSC3I2jEX9f9/mjgi1GCNcR6gSxKzXE/GuY=
Subject key identifier: 33:55:31:0D:0E:A2:A7:2F:99:06:BE:F7:E0:B5:11:40:44:80:26:D2
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D6C0FD3D133949308B3BE4B00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b553b32-9780-3d84-bd19-b57cdc3c261f.roa
Signing time: Tue 07 Apr 2026 01:00:23 +0000
ROA not before: Tue 07 Apr 2026 01:00:23 +0000
ROA not after: Mon 06 Jul 2026 01:00:23 +0000
asID: 13335
IP address blocks: 172.69.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6c:0f:d3:d1:33:94:93:08:b3:be:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 7 01:00:23 2026 GMT
Not After : Jul 6 01:00:23 2026 GMT
Subject: CN=146df095-0b7e-4fa3-871d-dc92b84c6a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:45:39:4e:26:39:81:08:0e:66:9c:82:cf:
c5:2c:18:44:79:de:39:42:a7:c0:19:b1:5f:5a:4f:
4b:7b:be:05:d1:e0:20:f7:bf:ec:b6:df:78:2d:8a:
38:88:a9:0a:5e:bd:46:0e:82:ad:f2:74:e8:b8:37:
4c:77:36:97:be:33:96:00:81:7b:f2:17:69:39:fe:
e0:61:51:cd:a7:fc:bb:43:f1:2d:d6:39:6a:c3:d8:
d0:0b:93:aa:16:07:59:84:84:63:43:eb:57:fd:3c:
25:7f:6d:10:32:f5:21:fd:7d:88:41:63:80:6c:e2:
3f:56:a5:e7:e8:10:73:cf:50:d8:30:76:c6:5e:b7:
35:56:a4:cf:de:e8:ee:04:a6:98:c6:0e:fb:99:d9:
d8:e1:30:40:04:33:43:21:53:31:30:aa:17:40:d2:
7b:c5:9f:1b:b7:5d:54:d1:43:2f:bd:77:15:6a:ea:
90:43:d6:08:2d:74:ba:f0:2c:45:88:cb:ff:68:86:
65:9b:42:01:16:e5:5f:ac:9e:77:c6:76:40:81:db:
b8:4d:97:1b:04:7a:20:25:7d:b3:ad:da:70:c9:0e:
ec:1e:24:8d:c9:71:b8:5d:c3:f2:a0:78:d3:0a:ee:
d5:88:4c:08:89:90:69:d9:dd:7e:fc:36:50:16:1c:
ac:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:55:31:0D:0E:A2:A7:2F:99:06:BE:F7:E0:B5:11:40:44:80:26:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b553b32-9780-3d84-bd19-b57cdc3c261f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:e9:d2:37:6e:eb:1e:de:25:5f:43:5e:b5:db:e3:8b:c1:6a:
d8:23:8d:b7:3f:44:a6:9b:01:a4:7a:74:40:97:0c:a8:37:55:
c4:3d:72:35:b2:1d:a9:07:d1:c2:c5:b6:9c:90:46:71:e4:f0:
08:13:38:cd:c3:bf:57:d8:20:8d:47:5f:94:da:f4:d5:77:06:
72:3b:51:1d:1a:49:65:5a:34:bf:a4:95:b3:d4:50:f9:7b:c4:
20:dc:31:56:04:cd:8a:c4:12:a0:0b:89:66:c6:96:60:86:69:
6e:68:c2:31:f9:3c:de:e7:a9:61:2c:1b:14:8a:43:e4:c9:e1:
f3:6e:73:cc:3e:0f:22:60:ce:0e:b7:13:fb:a1:e5:c0:80:8b:
af:6a:ec:e8:05:53:22:9f:b3:dc:f3:01:28:4a:02:39:05:12:
55:53:11:1e:a9:d2:d4:dd:ba:07:eb:8d:4f:36:91:9b:dd:98:
01:34:9a:2d:45:4a:03:e0:03:17:af:59:84:3f:0d:da:ec:f6:
d3:09:65:d6:74:2e:b4:e3:b1:90:21:d4:76:43:51:85:c7:34:
1c:23:2c:41:6c:f3:19:b9:b3:34:69:f4:2f:fc:7f:0e:bc:d3:
96:4c:7a:aa:00:26:b2:32:4d:da:6d:87:bf:0d:29:9b:da:5d:
15:d2:1c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:54:30 2026 by rpki-client