
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8951cdf5-ce90-391e-81ed-4ff99db0c9de.roa
File: 8951cdf5-ce90-391e-81ed-4ff99db0c9de.roa (raw, json)
Hash identifier: bgszubEaUANrfbxK7Jo/1dqJs7Vw4P07yQAAYSMccX4=
Subject key identifier: 7C:5D:EA:A0:70:97:1C:32:8A:D4:19:40:F3:7F:B2:42:FB:6C:F5:63
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D6AAAA44BC9D5D54C1BD9BD00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8951cdf5-ce90-391e-81ed-4ff99db0c9de.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 13335
IP address blocks: 172.69.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:a4:4b:c9:d5:d5:4c:1b:d9:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=7686e869-17e2-4de1-a01b-06d95f069bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:66:7f:57:d3:c3:f5:fe:39:80:3d:a2:27:
e6:ec:d4:51:a8:02:83:95:2d:7e:5b:37:84:30:33:
dd:77:57:34:bf:25:4f:08:7a:93:10:6e:10:93:07:
cb:02:08:51:88:60:16:b8:a6:7f:80:7e:22:89:5c:
4d:cc:8b:44:a7:bf:3a:d2:c1:50:9a:41:7a:84:1c:
56:4b:c3:1a:9f:83:d4:64:fb:69:27:9f:2d:b3:b9:
01:6b:e4:df:ee:86:93:c0:77:a2:e0:0b:1b:68:97:
ac:fa:87:45:59:03:bc:a7:1a:63:9f:1f:09:ba:52:
bf:06:b4:39:90:69:af:19:dd:3f:e3:b4:52:09:69:
58:a7:0e:48:04:0d:86:77:c5:be:10:ff:81:2b:06:
c3:b8:43:eb:43:99:cf:f4:04:21:ff:4c:78:dc:07:
42:2f:6c:2e:66:b3:7a:ff:0d:2e:48:b8:3d:89:43:
9f:75:09:e1:db:2d:5d:27:1e:09:1b:b2:92:0c:c7:
7c:5f:09:b7:aa:9e:ca:1c:36:41:79:a6:e8:c1:da:
23:d9:18:39:79:47:9a:a4:c2:53:81:b5:f0:c1:e9:
0b:3d:cb:0c:b7:f7:8e:7c:5e:3d:42:06:42:61:f4:
79:3b:3b:ba:3b:bd:9d:5b:25:19:42:ce:a5:67:d4:
c4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5D:EA:A0:70:97:1C:32:8A:D4:19:40:F3:7F:B2:42:FB:6C:F5:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8951cdf5-ce90-391e-81ed-4ff99db0c9de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:58:5a:28:53:2e:7b:92:a5:0d:f7:a8:3f:96:ef:52:e6:36:
d9:4f:50:94:cd:30:a6:19:c9:b8:ce:3a:15:95:59:77:54:76:
6e:3b:49:9b:2a:83:4c:59:73:d3:12:d3:cd:8e:8a:1f:38:5b:
23:3b:a7:78:73:c4:87:79:0f:cf:c9:11:46:9d:43:34:6d:cc:
95:29:a9:eb:af:35:f3:f1:bd:ad:79:ca:b6:4b:b9:fa:42:b6:
7c:c1:5b:83:bc:62:2d:28:f1:23:f9:7c:a5:6f:22:aa:00:6e:
a3:68:0a:76:9d:d3:8b:5d:17:2f:80:2c:97:9c:3f:91:a1:80:
c9:5f:51:10:69:d8:7f:f6:9d:f1:c2:be:b5:91:5f:0c:0e:4b:
0a:62:ce:02:f7:7d:04:8b:a7:9c:fb:e7:6b:b0:75:a3:68:71:
02:29:16:c4:3f:a4:c0:ab:f0:27:0a:cb:79:bd:dd:e9:08:f6:
9b:e3:32:a0:62:1a:65:72:71:45:b7:12:d9:fd:f8:f5:f8:08:
ac:31:2e:48:d0:69:a2:92:bf:e9:ba:9f:a2:97:88:02:8c:3e:
f4:7b:63:5b:5b:fd:65:65:0a:70:d9:28:07:85:87:dd:c1:53:
fd:3e:d8:b4:e9:17:e6:36:f2:59:27:c3:57:ee:b1:e7:17:6c:
c7:16:58:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqqRLydXVTBvZvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
NzY4NmU4NjktMTdlMi00ZGUxLWEwMWItMDZkOTVmMDY5YmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsVmf1fTw/X+OYA9oifm7NRRqAKDlS1+WzeE
MDPdd1c0vyVPCHqTEG4QkwfLAghRiGAWuKZ/gH4iiVxNzItEp7860sFQmkF6hBxW
S8Man4PUZPtpJ58ts7kBa+Tf7oaTwHei4AsbaJes+odFWQO8pxpjnx8JulK/BrQ5
kGmvGd0/47RSCWlYpw5IBA2Gd8W+EP+BKwbDuEPrQ5nP9AQh/0x43AdCL2wuZrN6
/w0uSLg9iUOfdQnh2y1dJx4JG7KSDMd8Xwm3qp7KHDZBeabowdoj2Rg5eUeapMJT
gbXwwekLPcsMt/eOfF49QgZCYfR5Ozu6O72dWyUZQs6lZ9TEswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHxd6qBwlxwyitQZQPN/skL7bPVjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODk1MWNkZjUtY2U5MC0z
OTFlLTgxZWQtNGZmOTlkYjBjOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEW9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACZYWihTLnuSpQ33qD+W71LmNtlPUJTNMKYZybjOOhWVWXdUdm47SZsq
g0xZc9MS082Oih84WyM7p3hzxId5D8/JEUadQzRtzJUpqeuvNfPxva15yrZLufpC
tnzBW4O8Yi0o8SP5fKVvIqoAbqNoCnad04tdFy+ALJecP5GhgMlfURBp2H/2nfHC
vrWRXwwOSwpizgL3fQSLp5z752uwdaNocQIpFsQ/pMCr8CcKy3m93ekI9pvjMqBi
GmVycUW3Etn9+PX4CKwxLkjQaaKSv+m6n6KXiAKMPvR7Y1tb/WVlCnDZKAeFh93B
U/0+2LTpF+Y28lknw1fusecXbMcWWHM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:52:39 2026 by rpki-client