
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cdb876cc-1748-3f86-a7b4-bbac25dc0127.roa
File: cdb876cc-1748-3f86-a7b4-bbac25dc0127.roa (raw, json)
Hash identifier: QKHoI3t7ArVLxLHMAeXK4E4RKK/hMQIPo6r8IEBvhf4=
Subject key identifier: DD:C7:37:7F:93:A5:A6:48:82:E9:51:DC:87:0B:DA:85:9D:27:0E:1F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584CE50C11199727B70C8439A400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cdb876cc-1748-3f86-a7b4-bbac25dc0127.roa
Signing time: Tue 17 Feb 2026 16:19:04 +0000
ROA not before: Tue 17 Feb 2026 16:19:04 +0000
ROA not after: Mon 18 May 2026 15:19:04 +0000
asID: 14789
IP address blocks: 172.71.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e5:0c:11:19:97:27:b7:0c:84:39:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 17 16:19:04 2026 GMT
Not After : May 18 15:19:04 2026 GMT
Subject: CN=4ba67daf-9b08-45e5-bea2-137401be2473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:72:9a:76:a8:e5:3f:c3:8f:06:67:78:6a:c5:
bc:19:9d:b7:87:9c:48:98:cc:55:82:60:5b:32:d6:
5a:80:76:c8:54:d9:aa:b5:04:2b:1a:78:7f:5c:79:
ae:69:fb:eb:36:bc:91:37:e9:2f:da:3f:8d:8c:d2:
8c:5e:a9:0f:f4:53:00:bf:9a:8e:9e:47:5b:02:57:
32:2c:41:f6:39:48:59:59:b3:d3:8e:96:30:50:49:
b5:37:95:05:27:22:83:37:99:79:3f:2b:1a:50:5b:
cd:10:b0:87:b8:7b:ba:be:36:93:0f:19:0a:a6:7b:
76:c4:4f:66:ec:b0:1d:23:41:9a:85:29:87:eb:3b:
17:74:92:8a:41:f7:d2:3a:02:56:0a:1c:b9:54:66:
1c:f7:4d:3e:c7:f7:80:72:44:f3:63:12:53:f1:86:
e9:3c:d7:4e:3d:7d:9d:4b:fa:2b:f1:51:d1:f6:1f:
55:47:a4:c9:08:2a:2d:88:07:e9:f3:ff:4a:c8:42:
f1:5e:2e:67:88:e4:6e:b6:87:f4:fe:39:49:d1:68:
96:be:3b:16:4b:17:cd:9b:3d:c1:d1:22:99:64:f5:
4e:17:8a:ba:4f:35:3e:b0:23:42:01:a1:b8:af:2e:
54:48:de:80:c8:38:78:1a:42:95:42:14:cb:40:c7:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C7:37:7F:93:A5:A6:48:82:E9:51:DC:87:0B:DA:85:9D:27:0E:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cdb876cc-1748-3f86-a7b4-bbac25dc0127.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:a6:24:9e:1a:67:5b:49:df:9f:77:45:9d:53:b3:30:b6:59:
0b:f8:e2:fd:cd:1a:e7:98:54:a9:70:d7:89:08:4b:aa:55:68:
8d:9b:ff:97:78:9e:f3:b3:38:a8:9c:42:8a:33:1b:c3:ec:c4:
91:1c:47:cb:ef:74:76:57:01:13:f5:be:6b:b0:0a:a9:28:47:
8b:b0:9c:ac:a7:08:1c:b2:2d:78:73:52:66:e7:9d:be:52:e6:
f6:69:bc:77:5d:7e:1d:b0:39:bd:ae:f2:f9:8c:be:f9:56:19:
88:96:95:c2:14:ca:17:f1:90:f3:e7:f3:21:60:c4:a7:9e:3f:
82:89:23:56:a4:90:12:e3:ae:96:aa:93:9e:ed:e6:2f:ec:69:
8b:b1:0d:af:ce:c3:af:eb:11:07:fe:fb:af:41:ae:78:bd:b9:
79:ea:bc:bc:3d:62:32:b7:25:cc:a0:94:c7:d7:59:c8:cc:7e:
f2:20:d8:94:29:b0:ea:1c:8c:49:85:f2:43:d5:62:29:c3:ba:
93:fa:a9:f0:a6:d9:ef:8e:5d:29:12:bf:08:23:3d:83:88:d6:
03:6c:3c:51:35:f8:5f:e7:d5:4d:c1:0e:83:e6:1f:f3:01:49:
5d:3d:e1:a8:dd:98:61:fe:aa:0a:a5:71:84:7e:ae:83:9b:e5:
7a:1a:95:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzlDBEZlye3DIQ5pAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDIxNzE2MTkwNFoXDTI2MDUxODE1MTkwNFowLzEtMCsGA1UEAxMk
NGJhNjdkYWYtOWIwOC00NWU1LWJlYTItMTM3NDAxYmUyNDczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHKadqjlP8OPBmd4asW8GZ23h5xImMxVgmBb
MtZagHbIVNmqtQQrGnh/XHmuafvrNryRN+kv2j+NjNKMXqkP9FMAv5qOnkdbAlcy
LEH2OUhZWbPTjpYwUEm1N5UFJyKDN5l5PysaUFvNELCHuHu6vjaTDxkKpnt2xE9m
7LAdI0GahSmH6zsXdJKKQffSOgJWChy5VGYc900+x/eAckTzYxJT8YbpPNdOPX2d
S/or8VHR9h9VR6TJCCotiAfp8/9KyELxXi5niORutof0/jlJ0WiWvjsWSxfNmz3B
0SKZZPVOF4q6TzU+sCNCAaG4ry5USN6AyDh4GkKVQhTLQMcZJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3HN3+TpaZIgulR3IcL2oWdJw4fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2RiODc2Y2MtMTc0OC0z
Zjg2LWE3YjQtYmJhYzI1ZGMwMTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEe8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB2mJJ4aZ1tJ3593RZ1TszC2WQv44v3NGueYVKlw14kIS6pVaI2b/5d4
nvOzOKicQoozG8PsxJEcR8vvdHZXARP1vmuwCqkoR4uwnKynCByyLXhzUmbnnb5S
5vZpvHddfh2wOb2u8vmMvvlWGYiWlcIUyhfxkPPn8yFgxKeeP4KJI1akkBLjrpaq
k57t5i/saYuxDa/Ow6/rEQf++69Brni9uXnqvLw9YjK3JcyglMfXWcjMfvIg2JQp
sOocjEmF8kPVYinDupP6qfCm2e+OXSkSvwgjPYOI1gNsPFE1+F/n1U3BDoPmH/MB
SV094ajdmGH+qgqlcYR+roOb5XoalQg=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:18:54 2026 by rpki-client