
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c1622a1-825a-3792-8f8e-ea5706e374bb.roa
File: 8c1622a1-825a-3792-8f8e-ea5706e374bb.roa (raw, json)
Hash identifier: SFmkMTWzdb9luIvkiONpIB2BsCXfJRxlxSRZ+NWz9UY=
Subject key identifier: F9:F2:BC:02:3A:16:71:1D:A2:88:36:D2:77:14:FB:CB:0A:5D:EB:04
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D6C0FC8A6B83FE919C8D5CE40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c1622a1-825a-3792-8f8e-ea5706e374bb.roa
Signing time: Tue 07 Apr 2026 01:00:23 +0000
ROA not before: Tue 07 Apr 2026 01:00:23 +0000
ROA not after: Mon 06 Jul 2026 01:00:23 +0000
asID: 13335
IP address blocks: 172.69.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6c:0f:c8:a6:b8:3f:e9:19:c8:d5:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 7 01:00:23 2026 GMT
Not After : Jul 6 01:00:23 2026 GMT
Subject: CN=8d21cf81-59ff-4ca3-bab5-deb83b748ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:52:14:f3:b7:63:6b:c4:72:08:d0:19:2b:06:
06:43:da:e8:8b:38:6d:57:5a:ae:ec:a1:dc:f1:ee:
9c:62:d9:63:50:f9:de:1b:0a:a7:73:4d:c9:38:8d:
ed:24:56:f7:ab:ec:92:e9:ec:2d:4f:6c:21:04:cc:
09:91:0c:0f:ab:77:e4:04:13:90:1d:86:10:f5:f4:
d4:5e:17:4a:5c:66:b3:d8:df:2e:4e:db:2e:ab:1d:
c2:5e:46:a3:10:4e:5f:54:43:aa:59:0a:97:74:c9:
59:49:ce:32:8f:36:bd:78:01:e4:31:50:c9:d7:49:
d9:9f:13:36:83:9c:33:44:e3:fc:7a:1c:72:a0:a4:
70:75:fa:0b:02:f3:51:15:ba:10:fe:d9:49:6a:99:
2f:2e:1c:e1:4a:07:59:e7:7c:e6:1e:53:e1:72:96:
72:55:61:b5:31:26:fe:38:19:7a:1c:b8:ad:fc:44:
20:56:98:33:f2:00:84:a5:61:62:38:68:1d:ff:77:
f1:d1:aa:0e:3d:d4:25:35:33:a2:a2:fe:28:48:e2:
b7:33:e9:4a:4c:9a:8b:bb:6c:dd:7d:5b:10:60:8b:
0a:c0:10:47:b8:a9:c0:bb:ac:31:61:ff:7b:84:94:
aa:6b:31:f3:1e:a9:cc:74:c9:89:81:96:5f:a5:c7:
37:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F2:BC:02:3A:16:71:1D:A2:88:36:D2:77:14:FB:CB:0A:5D:EB:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c1622a1-825a-3792-8f8e-ea5706e374bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:71:59:15:a1:e9:bd:eb:d9:ef:9a:c9:a4:d3:85:7c:85:1e:
b0:4a:b3:01:a5:d2:e3:29:cd:ad:4c:e0:c8:dc:3d:87:ca:0f:
92:e6:c1:a6:67:e9:0c:38:b6:fd:7c:11:f9:62:62:73:12:11:
8f:5c:5a:c0:63:8d:f5:ea:37:0d:da:a8:71:4d:89:79:5d:5d:
3b:b7:63:de:db:88:64:26:03:aa:c5:1e:98:ef:1a:a1:f7:26:
57:c7:b6:2e:05:8d:75:70:7d:5f:ba:18:7b:28:bd:92:13:5d:
01:f0:c0:c7:d6:3b:38:c4:b5:8e:8f:bb:1d:b4:dc:44:c5:94:
82:2e:68:b5:58:0c:86:a2:4f:40:c2:3c:32:13:50:d9:89:87:
15:2c:0d:68:91:83:3a:32:69:2c:b3:78:49:bf:38:5b:86:94:
d7:34:48:ef:d8:d6:9b:39:cb:7c:a7:53:37:9a:64:e4:c3:ac:
aa:c2:c9:81:3d:ce:ef:e9:7d:a1:0c:a4:4b:49:7d:cd:db:69:
d3:d7:25:a5:6f:b5:ed:67:88:f0:48:5e:c0:33:13:43:fc:a4:
79:76:26:6e:ed:b2:ac:da:d7:a5:06:30:62:64:3f:3a:32:10:
7c:da:49:07:24:e1:ca:fc:55:e2:9b:d8:50:e7:e8:cd:e3:84:
f5:4c:13:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD8imuD/pGcjVzkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk
OGQyMWNmODEtNTlmZi00Y2EzLWJhYjUtZGViODNiNzQ4YmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lIU87dja8RyCNAZKwYGQ9roizhtV1qu7KHc
8e6cYtljUPneGwqnc03JOI3tJFb3q+yS6ewtT2whBMwJkQwPq3fkBBOQHYYQ9fTU
XhdKXGaz2N8uTtsuqx3CXkajEE5fVEOqWQqXdMlZSc4yjza9eAHkMVDJ10nZnxM2
g5wzROP8ehxyoKRwdfoLAvNRFboQ/tlJapkvLhzhSgdZ53zmHlPhcpZyVWG1MSb+
OBl6HLit/EQgVpgz8gCEpWFiOGgd/3fx0aoOPdQlNTOiov4oSOK3M+lKTJqLu2zd
fVsQYIsKwBBHuKnAu6wxYf97hJSqazHzHqnMdMmJgZZfpcc39QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPnyvAI6FnEdoog20ncU+8sKXesEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGMxNjIyYTEtODI1YS0z
NzkyLThmOGUtZWE1NzA2ZTM3NGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALRxWRWh6b3r2e+ayaTThXyFHrBKswGl0uMpza1M4MjcPYfKD5LmwaZn
6Qw4tv18EfliYnMSEY9cWsBjjfXqNw3aqHFNiXldXTu3Y97biGQmA6rFHpjvGqH3
JlfHti4FjXVwfV+6GHsovZITXQHwwMfWOzjEtY6Pux203ETFlIIuaLVYDIaiT0DC
PDITUNmJhxUsDWiRgzoyaSyzeEm/OFuGlNc0SO/Y1ps5y3ynUzeaZOTDrKrCyYE9
zu/pfaEMpEtJfc3badPXJaVvte1niPBIXsAzE0P8pHl2Jm7tsqza16UGMGJkPzoy
EHzaSQck4cr8VeKb2FDn6M3jhPVMExs=
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:03:51 2026 by rpki-client