
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8b5f545-8d59-3559-b440-3648cf897e34.roa
File: c8b5f545-8d59-3559-b440-3648cf897e34.roa (raw, json)
Hash identifier: E0gW9X0vu93CHDkaA2tD58WubhW5qEFOAYRyXN5aQeo=
Subject key identifier: BF:C6:88:BB:6B:E6:E2:54:E9:D5:5D:22:C6:CC:F2:8D:95:78:9A:41
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D6AAA9C6CCEB8772762AB92C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8b5f545-8d59-3559-b440-3648cf897e34.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 13335
IP address blocks: 172.68.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:9c:6c:ce:b8:77:27:62:ab:92:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=92b46aab-75df-455c-9328-c57c38eb4e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:62:f9:2c:aa:d8:09:3a:4f:53:eb:7c:65:a0:
6d:69:3a:48:7a:42:f9:82:37:b3:eb:8e:72:d5:d7:
2a:24:f3:fd:a1:47:06:e8:9d:c2:a6:fd:f2:dd:d8:
18:58:b7:11:ef:9e:33:60:43:0c:04:31:70:35:6b:
be:29:ff:84:22:4d:ee:59:f0:e2:fd:01:63:ac:a9:
3c:28:b3:3f:fe:0a:29:84:02:d3:2b:30:af:df:9e:
b9:d3:49:ee:ef:31:78:e5:7a:21:69:44:92:de:13:
86:9b:1c:bf:93:42:56:c3:4f:21:cb:de:00:db:92:
6e:ea:9c:c0:c9:43:05:1d:c8:8b:a1:e3:93:c9:31:
cc:c5:3f:2a:11:01:64:70:9d:55:3b:a6:11:86:15:
4b:17:73:61:25:6d:4b:c0:ca:4e:b5:9b:27:64:e2:
80:78:3b:93:78:ed:1d:09:d3:36:67:54:c7:8d:c9:
60:65:02:a6:5d:ee:74:5c:00:38:f0:6a:a1:25:8c:
6a:27:95:dd:f9:87:ca:f6:ab:0b:c1:29:d2:5f:b9:
24:49:50:39:ee:52:a9:48:ae:c7:c0:81:b2:8b:2c:
bb:6f:46:49:db:e3:b3:bf:5f:82:af:b5:4f:e6:bf:
09:a3:6e:18:5a:0b:4f:60:f2:97:c2:f8:c8:b5:f8:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C6:88:BB:6B:E6:E2:54:E9:D5:5D:22:C6:CC:F2:8D:95:78:9A:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8b5f545-8d59-3559-b440-3648cf897e34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:04:4e:a3:10:f7:af:0e:7f:d3:e4:48:38:dd:b8:5c:62:30:
c4:57:47:5e:37:c8:ad:be:9d:83:b1:d9:a3:31:94:99:fc:1f:
56:3b:5d:f9:a1:4d:4a:80:48:d7:9c:ae:97:be:93:43:8f:60:
b8:7d:72:50:bc:9d:6c:4f:19:7c:30:b2:c1:a4:bb:51:ca:88:
de:c1:92:9d:fb:b6:45:a5:de:5f:76:13:7e:5e:65:9b:8f:3b:
4f:c3:17:f4:c2:c6:ce:27:9e:c0:52:13:24:d9:9b:78:47:49:
b0:7d:1a:f8:65:6a:db:9a:56:66:9b:ba:d5:44:b0:29:e8:b3:
2b:4a:e8:62:12:c1:c7:df:5b:08:b6:2a:01:38:22:24:8d:fb:
02:49:d0:5b:8f:4a:b1:53:25:4f:ad:d7:ed:96:46:27:fa:15:
a3:e6:96:b9:06:be:15:77:0c:99:0b:97:52:a1:6d:d5:52:3a:
01:98:34:fb:fe:3c:74:f2:be:fd:59:dc:a1:ad:1e:f2:5b:85:
20:f6:33:85:93:b4:48:0b:f4:6e:4f:9a:6e:3a:fa:90:1b:0f:
d2:27:7f:b1:03:96:8e:15:81:b9:a8:4c:35:23:78:62:41:1d:
1e:32:e6:a3:b1:81:bf:96:6c:ad:28:26:3b:3b:06:b5:de:23:
8c:5c:b4:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqpxszrh3J2KrksAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
OTJiNDZhYWItNzVkZi00NTVjLTkzMjgtYzU3YzM4ZWI0ZTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWL5LKrYCTpPU+t8ZaBtaTpIekL5gjez645y
1dcqJPP9oUcG6J3Cpv3y3dgYWLcR754zYEMMBDFwNWu+Kf+EIk3uWfDi/QFjrKk8
KLM//gophALTKzCv356500nu7zF45XohaUSS3hOGmxy/k0JWw08hy94A25Ju6pzA
yUMFHciLoeOTyTHMxT8qEQFkcJ1VO6YRhhVLF3NhJW1LwMpOtZsnZOKAeDuTeO0d
CdM2Z1THjclgZQKmXe50XAA48GqhJYxqJ5Xd+YfK9qsLwSnSX7kkSVA57lKpSK7H
wIGyiyy7b0ZJ2+Ozv1+Cr7VP5r8Jo24YWgtPYPKXwvjItfgCYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL/GiLtr5uJU6dVdIsbM8o2VeJpBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzhiNWY1NDUtOGQ1OS0z
NTU5LWI0NDAtMzY0OGNmODk3ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIIETqMQ968Of9PkSDjduFxiMMRXR143yK2+nYOx2aMxlJn8H1Y7Xfmh
TUqASNecrpe+k0OPYLh9clC8nWxPGXwwssGku1HKiN7Bkp37tkWl3l92E35eZZuP
O0/DF/TCxs4nnsBSEyTZm3hHSbB9GvhlatuaVmabutVEsCnosytK6GISwcffWwi2
KgE4IiSN+wJJ0FuPSrFTJU+t1+2WRif6FaPmlrkGvhV3DJkLl1KhbdVSOgGYNPv+
PHTyvv1Z3KGtHvJbhSD2M4WTtEgL9G5Pmm46+pAbD9Inf7EDlo4VgbmoTDUjeGJB
HR4y5qOxgb+WbK0oJjs7BrXeI4xctFA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:16:43 2026 by rpki-client