
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/72425b35-47f4-32dc-ade5-884e8d715f19.roa
File: 72425b35-47f4-32dc-ade5-884e8d715f19.roa (raw, json)
Hash identifier: CHuLo5fKC4T/ufvGgl/B0cDdYZ4otfOuySyd6fFlz80=
Subject key identifier: 7F:78:50:B4:10:AC:7B:F8:42:6B:D7:D2:A9:FF:CC:C0:C1:B6:44:1B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D6AAA9570EEEB8729C7F170D9
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/72425b35-47f4-32dc-ade5-884e8d715f19.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 13335
IP address blocks: 172.64.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:95:70:ee:eb:87:29:c7:f1:70:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=0cfcc8ea-aaa2-4afb-990e-2a88ca9cb716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:3f:30:ce:41:a5:b3:95:af:aa:74:10:6c:
fe:0d:1d:51:f5:99:d5:04:70:b0:da:72:c8:bf:d1:
2a:bc:26:c6:10:43:47:92:e8:e5:ba:51:9a:5f:18:
27:ce:ed:35:96:ab:9a:d1:0b:7b:bf:b4:5a:d7:88:
2e:f2:d8:9c:6c:87:c1:8b:01:f2:7e:39:0a:f3:f4:
8c:55:6e:d3:0f:47:69:57:d2:d0:42:7c:1c:f1:c9:
db:70:2a:18:ce:87:68:78:34:ce:70:3e:81:f7:19:
6e:cf:cd:fc:3d:06:43:f3:df:d5:0b:78:be:89:6e:
76:82:8b:85:ed:34:0b:66:d7:d7:19:e6:6a:5e:f6:
07:83:08:ba:eb:4e:12:08:b4:a3:e3:3c:87:a3:90:
f8:70:f4:e9:7c:ec:57:27:6a:08:35:f4:03:ff:13:
71:eb:b4:74:ca:b0:4f:cd:a8:f1:be:3d:03:9a:16:
1b:a3:cc:0b:58:dd:a6:1f:8e:a2:0b:4b:e7:04:7a:
7f:42:53:4d:1b:25:82:79:0c:6a:71:c9:1c:23:1c:
26:d5:71:b3:bd:9e:2a:9c:2b:f3:b5:5a:f5:97:f9:
66:6f:99:08:cf:46:a4:62:a3:f6:3e:6a:e7:f8:0c:
06:cc:56:4b:98:40:33:31:90:53:c1:f1:16:a7:2c:
e9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:78:50:B4:10:AC:7B:F8:42:6B:D7:D2:A9:FF:CC:C0:C1:B6:44:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/72425b35-47f4-32dc-ade5-884e8d715f19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:ff:7f:fa:cf:06:9d:e9:d2:37:61:7f:5d:d2:36:1d:f2:ca:
db:7c:07:24:b1:6b:0a:9c:33:51:a4:43:9d:80:c2:72:f4:a8:
e5:e2:60:e1:a8:1d:a1:fb:b8:01:19:ad:33:ec:e1:e6:35:47:
00:e8:91:86:ed:13:05:f1:98:81:6e:7d:b4:ce:58:7e:9e:be:
b0:ce:19:5f:7f:2d:e8:ed:cb:35:c3:eb:53:df:91:c4:9f:1a:
61:70:fe:35:50:af:e2:5b:74:49:3c:07:26:18:a7:8f:69:cf:
c6:4b:4a:1b:dc:ff:e4:19:6b:8e:90:47:7d:7e:3b:e2:5f:c2:
65:5b:77:24:9e:a7:f8:5d:e2:0e:f9:36:48:a9:84:b8:48:eb:
37:ed:22:7f:d8:05:99:00:4f:88:d5:72:1a:ea:f5:d5:9c:b3:
b8:d2:03:f9:a1:0a:29:73:2c:b3:58:21:a3:1e:ad:0a:1b:1d:
0a:b5:b8:7a:c6:1d:93:b9:38:83:97:a8:7f:d2:4b:ae:fb:67:
d1:ae:30:1e:c7:8b:b3:7a:39:01:5a:9c:7b:68:e9:63:77:3f:
a9:bd:34:20:9e:ca:d9:b8:d5:a4:a2:38:c3:aa:a0:91:c5:f4:
6a:62:a0:6d:f3:47:de:14:46:aa:4d:cf:83:d2:47:28:b7:97:
45:09:eb:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqpVw7uuHKcfxcNkwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
MGNmY2M4ZWEtYWFhMi00YWZiLTk5MGUtMmE4OGNhOWNiNzE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEg/MM5BpbOVr6p0EGz+DR1R9ZnVBHCw2nLI
v9EqvCbGEENHkujlulGaXxgnzu01lqua0Qt7v7Ra14gu8ticbIfBiwHyfjkK8/SM
VW7TD0dpV9LQQnwc8cnbcCoYzodoeDTOcD6B9xluz838PQZD89/VC3i+iW52gouF
7TQLZtfXGeZqXvYHgwi6604SCLSj4zyHo5D4cPTpfOxXJ2oINfQD/xNx67R0yrBP
zajxvj0DmhYbo8wLWN2mH46iC0vnBHp/QlNNGyWCeQxqcckcIxwm1XGzvZ4qnCvz
tVr1l/lmb5kIz0akYqP2Pmrn+AwGzFZLmEAzMZBTwfEWpyzp5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH94ULQQrHv4QmvX0qn/zMDBtkQbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzI0MjViMzUtNDdmNC0z
MmRjLWFkZTUtODg0ZThkNzE1ZjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEAiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAED/f/rPBp3p0jdhf13SNh3yytt8BySxawqcM1GkQ52AwnL0qOXiYOGo
HaH7uAEZrTPs4eY1RwDokYbtEwXxmIFufbTOWH6evrDOGV9/LejtyzXD61PfkcSf
GmFw/jVQr+JbdEk8ByYYp49pz8ZLShvc/+QZa46QR31+O+JfwmVbdySep/hd4g75
NkiphLhI6zftIn/YBZkAT4jVchrq9dWcs7jSA/mhCilzLLNYIaMerQobHQq1uHrG
HZO5OIOXqH/SS677Z9GuMB7Hi7N6OQFanHto6WN3P6m9NCCeytm41aSiOMOqoJHF
9GpioG3zR94URqpNz4PSRyi3l0UJ6wc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:22:12 2026 by rpki-client