
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7ca5b594-c72c-386b-b3b7-829272dbe8b6.roa
File: 7ca5b594-c72c-386b-b3b7-829272dbe8b6.roa (raw, json)
Hash identifier: +2gJQSNYFvknNI6TtVMUcm31mK7K7l5V7rxbDM2JZ5E=
Subject key identifier: 7A:04:18:FA:B2:08:59:9E:FB:09:10:64:CC:B3:E8:25:0E:92:60:D4
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D703FED3E4AA71BBE4C66C1C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7ca5b594-c72c-386b-b3b7-829272dbe8b6.roa
Signing time: Wed 08 Apr 2026 13:00:33 +0000
ROA not before: Wed 08 Apr 2026 13:00:33 +0000
ROA not after: Tue 07 Jul 2026 13:00:33 +0000
asID: 13335
IP address blocks: 172.69.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:70:3f:ed:3e:4a:a7:1b:be:4c:66:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 8 13:00:33 2026 GMT
Not After : Jul 7 13:00:33 2026 GMT
Subject: CN=f688baa3-7c9f-46dd-a8ab-aed95325fe92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:c1:b9:eb:1b:56:dd:2a:78:81:88:90:48:
2c:09:38:4b:89:9c:da:ee:06:aa:70:98:ab:f0:9f:
86:53:62:3c:d5:24:62:15:49:b5:6e:0f:f1:84:09:
6a:1f:ce:ed:bf:3e:de:c8:44:80:ba:7a:ce:2b:92:
bc:35:0e:a6:f1:50:f0:2f:35:37:83:9e:00:77:71:
6b:1b:af:fe:21:9c:61:0e:62:48:0b:3c:18:86:42:
8d:a3:1c:55:97:9b:aa:de:a1:df:a5:c0:e6:df:b9:
80:ba:1a:f0:e8:d0:14:be:6b:b7:49:25:b5:32:a5:
24:96:2c:9b:88:50:04:66:1e:db:fc:e9:73:e1:e4:
de:62:fa:b3:50:89:77:3e:a3:ba:52:45:d8:d3:c9:
ce:ce:69:63:08:40:96:87:8c:31:9e:7e:63:1e:12:
94:57:09:8f:52:eb:41:3f:c4:9d:55:23:09:41:d0:
ab:87:10:23:6d:94:c1:df:87:eb:b3:b6:61:c0:bd:
c5:be:d3:f5:99:85:b9:ac:15:a3:8c:a1:ce:66:ae:
da:aa:b6:68:db:d8:9f:5c:d0:6e:45:49:95:ed:97:
c9:42:1b:27:d3:38:34:f9:d0:54:be:a5:1e:97:39:
aa:d9:b3:be:39:8b:cd:a6:db:b2:7f:7d:fe:8f:e8:
a1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:04:18:FA:B2:08:59:9E:FB:09:10:64:CC:B3:E8:25:0E:92:60:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7ca5b594-c72c-386b-b3b7-829272dbe8b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:ba:34:e8:7a:0d:92:9d:93:df:44:2c:74:a2:5e:93:6e:fb:
a6:99:d6:97:3f:69:47:da:f6:35:ec:c9:c5:ec:0c:62:12:71:
6a:0d:18:ee:f3:5e:fb:e9:d9:5e:fb:4c:fb:e3:62:1b:74:75:
1e:a5:ae:bc:21:47:01:40:a5:3e:f1:bb:e1:d1:ab:db:2a:d8:
32:9e:ae:fe:25:37:c4:f4:b6:88:c3:32:3b:ed:c5:8f:9b:27:
3f:28:8c:82:4b:9b:f3:3f:bc:88:3b:0b:4b:77:48:4e:71:25:
bb:de:c8:37:fa:91:7b:45:9a:0f:85:28:1e:bc:a2:3c:4a:c3:
15:38:2c:25:77:5d:c8:be:e5:34:7d:8f:1f:2a:a7:69:91:c8:
3e:d9:6b:90:75:8f:31:24:29:94:cb:76:e5:73:fa:7e:1c:a4:
ef:1b:b8:5d:7e:06:5c:24:41:5c:68:44:cf:6d:e6:06:a9:5c:
20:95:6a:9b:62:28:b9:4f:0e:5d:82:29:e1:16:d5:fa:b0:ba:
16:c2:c7:3d:bb:bf:c7:d8:e7:a6:b0:93:fb:78:a0:b4:6f:5d:
b8:88:4c:75:e1:54:11:34:9b:3e:ed:a0:7a:39:ff:60:3c:b0:
bb:ca:e0:8d:ae:13:00:28:f5:2b:e0:d4:e4:e5:1e:79:5d:3c:
bd:53:53:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:27 2026 by rpki-client