
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/810875bd-6e03-36df-9391-d1cefd6ab120.roa
File: 810875bd-6e03-36df-9391-d1cefd6ab120.roa (raw, json)
Hash identifier: 22H1Ry7y5E5pZEDqx2EAmeokGeND2EX/Vyp4pyE1jA0=
Subject key identifier: 00:03:6A:60:B2:3A:E1:65:15:07:CF:0F:68:A2:A9:66:83:C3:BB:FB
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D4EBFAE1021335F0F88E38B80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/810875bd-6e03-36df-9391-d1cefd6ab120.roa
Signing time: Fri 27 Mar 2026 13:00:40 +0000
ROA not before: Fri 27 Mar 2026 13:00:40 +0000
ROA not after: Thu 25 Jun 2026 13:00:40 +0000
asID: 13335
IP address blocks: 172.64.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4e:bf:ae:10:21:33:5f:0f:88:e3:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 27 13:00:40 2026 GMT
Not After : Jun 25 13:00:40 2026 GMT
Subject: CN=ff7492c4-1052-4e8a-8d58-b09f76798339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:57:98:b9:29:da:3d:2e:18:ed:e6:73:e1:
91:6e:98:cb:c1:da:5e:f6:41:21:59:e5:62:5d:ec:
a5:9e:00:3c:a0:3d:33:3f:72:40:25:18:70:ed:8e:
6f:5c:6f:a2:9f:91:33:61:86:95:00:59:a2:e8:34:
62:9f:23:60:12:96:e7:4d:33:09:f7:9c:ec:6c:e4:
ac:d2:ca:96:f5:9e:d6:2f:2f:3e:24:51:49:84:ed:
ac:73:dc:13:ca:a5:16:20:aa:4b:37:07:68:15:2d:
05:23:17:64:7e:13:5f:9d:c6:31:ed:df:26:1f:da:
a0:28:87:72:6e:1c:69:ad:94:80:e7:61:78:b9:d4:
e3:c6:ea:ae:10:77:31:b2:05:48:26:3d:35:82:f1:
30:37:01:08:97:88:31:4d:2b:a0:44:f1:db:5b:09:
e8:8b:de:a6:2a:80:d2:77:98:1c:47:22:24:60:f4:
dc:7a:81:12:63:49:86:92:80:e4:9a:e1:5e:62:88:
09:b1:41:a8:aa:8e:30:9a:cf:a3:75:86:aa:95:c8:
c7:00:1d:13:33:ce:5a:c5:92:36:67:b9:aa:a1:69:
5d:84:d2:cd:a5:12:cf:73:b2:9c:b7:de:06:f9:75:
7f:fe:36:c2:ef:40:f7:c8:66:b9:52:4e:b6:06:1f:
0a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:03:6A:60:B2:3A:E1:65:15:07:CF:0F:68:A2:A9:66:83:C3:BB:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/810875bd-6e03-36df-9391-d1cefd6ab120.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:43:e3:01:58:78:05:8e:3b:e1:26:90:ab:39:dd:a1:19:3f:
0d:5c:f7:01:e1:5f:7f:59:f5:ba:f7:20:ed:d0:0c:25:88:94:
42:14:1a:14:22:b9:0b:77:20:bd:93:c5:7b:7d:ae:36:13:aa:
1e:d3:cb:9f:bf:fb:aa:ff:e8:8d:45:2e:63:30:7e:0c:d4:63:
bf:08:69:00:f7:f7:a1:ce:4a:44:99:4b:ca:6e:e2:bc:f3:28:
27:7f:2a:ff:31:7c:2d:e5:98:c5:95:7c:77:8e:2b:c7:71:37:
b1:6a:92:21:7f:02:6e:35:2e:18:9c:1d:44:61:95:53:7c:0d:
50:54:43:d2:ac:4b:28:dc:b4:c7:71:84:59:8e:96:8f:65:94:
55:e6:f2:49:eb:9a:c1:bd:2a:a6:34:dc:f9:a0:40:17:d5:bb:
72:25:19:88:0b:b5:cc:37:3d:d0:57:7f:f5:9c:01:57:7a:e8:
70:53:31:0e:e1:48:53:52:07:d1:a2:49:9c:3c:ce:6c:ca:87:
14:ef:5a:cd:1d:b1:9e:7e:de:39:a5:0d:0c:8f:62:14:c0:fa:
7b:7e:9e:0e:d9:f0:4a:c3:ff:1d:32:90:37:13:36:c6:0a:13:
9d:6b:20:97:81:14:c3:86:d9:1b:83:a1:4f:f1:1d:e9:69:93:
d1:3d:ad:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:43:41 2026 by rpki-client