
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/968a90ac-8b9c-34d4-9924-a9a02cc8f903.roa
File: 968a90ac-8b9c-34d4-9924-a9a02cc8f903.roa (raw, json)
Hash identifier: 0XHqrW4U8D+acKc9d8IdmzY/rlacyqGGkKt8+OXi8fg=
Subject key identifier: A3:75:D8:3B:B9:B4:C2:E5:07:65:A6:8B:01:41:F3:BE:4E:A0:02:A9
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584DD24A41EC540582982176ED80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/968a90ac-8b9c-34d4-9924-a9a02cc8f903.roa
Signing time: Wed 13 May 2026 15:50:57 +0000
ROA not before: Wed 13 May 2026 15:50:57 +0000
ROA not after: Tue 11 Aug 2026 15:50:57 +0000
asID: 14789
IP address blocks: 172.69.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d2:4a:41:ec:54:05:82:98:21:76:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: May 13 15:50:57 2026 GMT
Not After : Aug 11 15:50:57 2026 GMT
Subject: CN=8fd1abc0-cb2d-4d2d-831f-59e4d11b8210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9c:ab:72:8c:8a:37:0a:c9:5e:12:63:b5:ad:
94:b6:7a:46:62:39:df:2d:4a:ce:c1:2a:f3:4b:11:
ae:45:b8:1a:61:d6:d7:20:33:c2:32:fe:0f:e1:69:
7c:5a:a5:71:af:36:3b:e1:45:6b:8c:ba:2f:d9:65:
b3:38:78:20:2b:a6:a3:4e:2e:f8:94:c8:e8:4a:11:
70:a2:23:18:f4:06:03:9f:19:d1:01:76:52:79:da:
d4:51:29:cd:62:b4:2e:fb:92:c5:fb:6f:be:78:4d:
3a:54:98:58:be:a2:0f:64:48:0f:a1:54:95:6c:95:
ec:f6:24:06:83:f3:6b:c1:55:11:cd:e2:9c:60:bd:
80:e9:ce:4b:56:d3:15:74:82:93:02:d3:c3:06:c0:
3e:30:17:bb:2a:71:4d:09:61:0d:69:b0:70:33:7d:
1a:c5:19:d9:c0:c2:0a:c8:20:26:15:1a:cb:dd:f3:
ae:f2:cb:5f:88:67:97:c3:ad:cc:6d:56:91:ed:99:
7f:eb:64:5a:69:38:a8:21:69:64:61:0e:d4:0d:1e:
a9:57:e9:5e:2a:99:1b:4d:01:61:e8:30:ba:04:5e:
cb:da:c1:0d:94:10:86:0f:01:b0:38:ea:6b:2b:a7:
50:4a:08:3d:19:86:72:27:eb:a4:3a:ac:ff:8a:7a:
6c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:75:D8:3B:B9:B4:C2:E5:07:65:A6:8B:01:41:F3:BE:4E:A0:02:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/968a90ac-8b9c-34d4-9924-a9a02cc8f903.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:8e:de:9b:3e:d8:63:e5:be:3e:b1:ab:4e:46:72:aa:4d:7e:
ca:3e:96:df:11:f4:e0:a4:76:d7:6b:90:4a:6a:ce:ee:77:05:
46:b0:84:8e:cd:b1:1a:78:f7:10:bd:9d:93:33:c7:c6:ec:4b:
c4:d6:ab:68:06:30:25:36:1b:bb:bd:9d:db:97:d7:cf:b2:40:
9e:67:26:dd:93:c6:c6:32:fb:6d:39:ed:6c:d8:52:07:23:9a:
ba:d1:db:78:02:21:af:75:16:c8:6c:99:d1:75:21:3a:12:cc:
c6:71:b3:9d:ab:ff:da:d8:c2:44:d0:4b:74:90:16:5f:7b:87:
9a:73:b1:7e:9b:8f:c2:ba:ce:87:80:dd:d4:9f:45:96:8e:d0:
b8:1d:40:27:e0:f4:17:d5:e0:bf:64:16:73:13:d0:95:38:6e:
77:db:ea:1e:e6:fc:00:40:b5:61:a5:41:47:ff:1c:21:52:a2:
4c:af:eb:b9:00:94:ec:e5:3b:a9:8e:65:41:ff:f7:71:f8:8c:
65:ca:a4:17:93:1b:a4:2b:be:9f:fe:7a:87:7f:8e:d3:a8:6f:
b5:a0:a2:06:9c:5a:44:48:0f:98:67:92:0b:3c:1b:df:58:50:
67:f0:b6:17:9e:e0:d1:24:aa:00:0f:ba:d5:77:cb:06:b6:13:
8c:e7:cd:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3SSkHsVAWCmCF27YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDUxMzE1NTA1N1oXDTI2MDgxMTE1NTA1N1owLzEtMCsGA1UEAxMk
OGZkMWFiYzAtY2IyZC00ZDJkLTgzMWYtNTllNGQxMWI4MjEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5yrcoyKNwrJXhJjta2UtnpGYjnfLUrOwSrz
SxGuRbgaYdbXIDPCMv4P4Wl8WqVxrzY74UVrjLov2WWzOHggK6ajTi74lMjoShFw
oiMY9AYDnxnRAXZSedrUUSnNYrQu+5LF+2++eE06VJhYvqIPZEgPoVSVbJXs9iQG
g/NrwVURzeKcYL2A6c5LVtMVdIKTAtPDBsA+MBe7KnFNCWENabBwM30axRnZwMIK
yCAmFRrL3fOu8stfiGeXw63MbVaR7Zl/62RaaTioIWlkYQ7UDR6pV+leKpkbTQFh
6DC6BF7L2sENlBCGDwGwOOprK6dQSgg9GYZyJ+ukOqz/inpsAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKN12Du5tMLlB2WmiwFB875OoAKpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTY4YTkwYWMtOGI5Yy0z
NGQ0LTk5MjQtYTlhMDJjYzhmOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADiO3ps+2GPlvj6xq05GcqpNfso+lt8R9OCkdtdrkEpqzu53BUawhI7N
sRp49xC9nZMzx8bsS8TWq2gGMCU2G7u9nduX18+yQJ5nJt2TxsYy+2057WzYUgcj
mrrR23gCIa91FshsmdF1IToSzMZxs52r/9rYwkTQS3SQFl97h5pzsX6bj8K6zoeA
3dSfRZaO0LgdQCfg9BfV4L9kFnMT0JU4bnfb6h7m/ABAtWGlQUf/HCFSokyv67kA
lOzlO6mOZUH/93H4jGXKpBeTG6Qrvp/+eod/jtOob7WgogacWkRID5hnkgs8G99Y
UGfwthee4NEkqgAPutV3ywa2E4znzVo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:41:06 2026 by rpki-client