
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a829a908-ab10-356c-93c5-6065f8404138.roa
File: a829a908-ab10-356c-93c5-6065f8404138.roa (raw, json)
Hash identifier: l6hqGyT8ZRIUoFwnwrv4+GeBY6ksp5JSx2A4Fd5bOj0=
Subject key identifier: ED:FA:BB:08:CB:F9:25:77:29:CD:49:F4:4A:7B:51:F9:81:D0:24:0E
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D7F9AA2622399C54B4FE88980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a829a908-ab10-356c-93c5-6065f8404138.roa
Signing time: Tue 14 Apr 2026 01:00:24 +0000
ROA not before: Tue 14 Apr 2026 01:00:24 +0000
ROA not after: Mon 13 Jul 2026 01:00:24 +0000
asID: 13335
IP address blocks: 172.64.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7f:9a:a2:62:23:99:c5:4b:4f:e8:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 14 01:00:24 2026 GMT
Not After : Jul 13 01:00:24 2026 GMT
Subject: CN=a5985153-c2a9-4cea-8e09-285aa9c4bec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b4:72:ba:9d:94:3a:6d:8d:6b:0a:ee:a5:84:
67:0c:b2:f3:53:59:c8:09:d9:6b:61:59:68:6b:cf:
5c:ac:46:54:4f:c1:e5:aa:fd:11:cb:cb:43:98:ab:
f8:08:8a:ac:ba:1f:86:a5:dd:ed:52:1d:29:8a:37:
f0:24:9a:37:00:cd:bc:da:89:9a:72:f1:db:f0:a2:
f1:61:40:43:ab:6c:d3:f4:d8:36:2b:61:24:b4:4c:
58:b5:00:77:3c:4b:7c:78:e3:0d:80:10:53:39:cc:
bd:46:bb:67:99:51:7c:9b:c1:f3:1a:1e:d4:64:de:
8e:6a:34:62:78:14:2d:47:0e:84:c5:9e:23:c8:f2:
8d:51:9d:0b:25:1a:13:4f:76:ae:d4:70:7d:bb:28:
7e:41:25:60:8a:e7:12:a4:3a:0f:60:f9:b8:bd:b6:
2c:0b:f5:bd:e7:9a:b9:b6:96:b9:31:63:f3:44:69:
1e:6c:df:dc:3a:d6:a8:73:c9:41:26:da:cb:25:37:
0b:2c:c7:62:42:c0:9c:07:31:a7:98:f8:60:a5:3f:
6d:60:6a:b5:c3:53:c7:7f:f4:6e:c4:55:12:11:86:
80:36:78:da:92:db:0d:49:a3:50:63:f4:d0:b2:42:
80:a1:80:fc:93:d6:b7:dc:58:5c:ba:3a:44:ab:8a:
3e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FA:BB:08:CB:F9:25:77:29:CD:49:F4:4A:7B:51:F9:81:D0:24:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a829a908-ab10-356c-93c5-6065f8404138.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:4c:78:a1:de:48:97:c9:0e:ec:83:3a:e3:cc:60:2c:14:b8:
4a:40:80:6a:ad:74:45:9e:96:8b:7b:1f:cb:9f:49:51:cc:c0:
11:8a:8d:e0:e8:12:66:67:81:c9:5a:d3:c4:7e:ef:81:da:51:
4a:56:d4:b2:a9:30:a5:e5:87:d4:f6:e4:d0:a3:f3:fd:0a:8e:
0d:1a:04:7c:6f:1c:5e:c0:8c:f9:05:66:58:29:e8:96:33:a7:
22:3a:e4:16:ce:95:e8:4a:df:d1:9b:07:3a:5d:eb:68:3b:9f:
22:03:60:49:ae:65:5b:f6:59:27:2d:e0:6c:64:ae:0d:57:34:
8e:0a:46:59:3a:ef:76:19:b7:ca:e6:65:79:06:89:c7:58:66:
8a:58:30:c3:fb:69:36:85:f3:37:5f:0d:60:b5:f0:57:c7:89:
c4:e3:5b:68:97:10:4a:6e:91:43:75:98:ef:83:7f:b2:d5:32:
27:8b:52:9a:4e:a4:90:ec:f5:5c:2e:46:f2:6a:4d:6f:b7:21:
1d:11:c7:2f:73:cd:53:28:1d:67:5e:6b:22:9f:ea:29:15:e5:
6f:23:0f:41:20:73:d5:3a:a0:e8:71:7b:2b:d3:e3:86:70:17:
23:b6:d6:9f:5f:46:d5:8d:4f:e5:a3:11:3d:c9:d0:99:dc:52:
b5:61:70:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:05:52 2026 by rpki-client