
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/972449bb-7cee-3ab2-8b1b-a5de60bee399.roa
File: 972449bb-7cee-3ab2-8b1b-a5de60bee399.roa (raw, json)
Hash identifier: j2We2m2j5jC3T3boQH2nTW2BgWzwkl5JvTpgIJM8k8g=
Subject key identifier: EA:C7:59:25:E3:FA:E4:FE:E9:09:5C:9A:ED:B7:3F:E0:FE:40:B0:30
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D6AAAA3BB0C8DC7739BD77DC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/972449bb-7cee-3ab2-8b1b-a5de60bee399.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 13335
IP address blocks: 172.67.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:a3:bb:0c:8d:c7:73:9b:d7:7d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=7c16b7e8-abce-4742-8318-81320714bc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:76:34:2d:d8:03:26:fc:ae:be:a7:07:94:
e1:4b:bd:a6:a9:ae:a3:ee:8e:b1:19:bd:51:39:21:
39:1b:32:10:bc:8e:58:bf:e7:18:f1:59:76:cd:dd:
dd:81:d2:c6:28:d6:6a:01:dc:81:e4:a0:a6:13:35:
c7:b1:84:f1:49:b6:87:f0:ef:99:7b:be:18:04:68:
04:e8:46:df:e0:16:72:dd:c9:33:c7:07:db:98:62:
88:63:2c:e6:e0:cb:7e:08:fc:ec:2e:0d:ad:77:fd:
30:96:62:4d:0a:26:66:71:66:5d:fd:df:5b:29:34:
85:06:65:93:88:e8:70:a0:b0:85:1a:81:85:4e:c7:
15:11:fc:78:85:08:4a:04:73:e5:90:68:60:2b:29:
90:9c:7b:34:bc:d6:6c:9f:b6:4c:aa:d3:9e:a1:67:
56:b1:39:cc:b3:ab:f9:99:55:00:bd:c0:eb:f7:11:
45:f7:4b:2b:a4:b2:24:de:26:f6:8c:d5:5b:dc:57:
ed:89:c2:51:be:9b:7e:b3:de:00:a0:7f:81:55:98:
8f:58:09:be:20:21:47:b4:12:ea:a3:28:73:02:eb:
8d:aa:cc:5d:f6:3e:06:c7:b8:c3:8b:eb:98:14:a0:
1d:e0:02:8f:44:62:c4:5d:40:0c:1b:87:63:af:11:
5c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C7:59:25:E3:FA:E4:FE:E9:09:5C:9A:ED:B7:3F:E0:FE:40:B0:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/972449bb-7cee-3ab2-8b1b-a5de60bee399.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.67.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:ae:b2:9b:cd:e1:e6:53:82:54:34:b4:83:03:cf:fa:65:6f:
88:15:d0:a3:70:5e:5d:bb:54:1b:57:91:62:6a:4e:3f:dc:29:
27:6c:0b:c7:50:bd:2d:6a:18:48:d3:f3:8e:d4:f3:66:d9:8f:
ff:d6:dc:9d:11:25:7d:a4:36:77:69:19:80:f0:d8:46:f8:3d:
d2:e9:15:43:36:e6:3d:1d:cc:92:88:1a:9c:10:c3:0e:44:a1:
cb:92:c7:66:ec:61:1b:79:4d:8f:b2:07:76:7b:ab:2b:c3:44:
51:1f:ef:d9:fe:07:ab:97:6f:c1:5b:91:35:cc:88:e3:9b:97:
e7:45:56:b2:02:e2:77:73:a8:a6:51:b4:6e:8b:60:19:08:71:
71:ce:4e:d0:4f:e2:b1:46:33:58:25:ed:9e:24:7c:8a:a0:a8:
56:3f:45:1c:94:4f:e4:ee:a5:a8:0f:29:63:5c:53:85:18:6e:
9f:e4:1c:5d:38:68:6c:96:95:dc:80:ae:49:92:7c:b6:7e:3f:
4b:dc:c5:f6:20:c3:20:3e:4b:ef:06:36:2b:6f:92:54:17:07:
79:7d:b2:7a:d8:c1:a2:17:c8:3b:4b:5b:f8:02:93:23:d4:c6:
64:af:7b:d3:91:42:ea:97:11:d2:cd:4a:62:74:8e:93:77:2b:
74:1f:97:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:38:06 2026 by rpki-client