
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8671393-394e-3846-b473-dd02157d2c89.roa
File: d8671393-394e-3846-b473-dd02157d2c89.roa (raw, json)
Hash identifier: 9AKVdayPVwT/rg/caIeTLf+XpL3WaGcY6eLRqCoj6Is=
Subject key identifier: 48:01:F2:9B:7B:C4:8C:BC:04:DE:34:91:6F:0A:08:EB:CF:79:A3:A3
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EEA8783277FD6B98EEBE1EE00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8671393-394e-3846-b473-dd02157d2c89.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 172.69.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:83:27:7f:d6:b9:8e:eb:e1:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=93dff69e-f7a4-4221-9edb-fe2e004bbffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7c:69:61:69:3f:d7:fc:4b:2a:41:b5:7c:5a:
36:bb:bc:51:43:28:0e:56:6b:6e:2f:b8:76:fd:4d:
44:25:eb:b2:83:cf:fd:72:00:a2:2f:39:2f:47:45:
12:61:14:7a:34:81:df:df:ca:bc:ac:af:a2:a2:0f:
9c:d8:10:67:4d:78:9a:0c:ec:f0:52:d8:85:89:c8:
08:f2:21:e5:8c:ed:57:78:a3:00:58:4c:98:ba:35:
d2:fc:d7:6b:78:c7:2a:28:b7:06:aa:cf:25:99:ee:
3a:9e:b5:64:14:30:d5:70:b1:3e:17:8f:4c:f5:19:
45:b7:c4:7e:3f:16:03:a9:01:25:4f:ce:a3:e6:ea:
88:ef:64:f0:2b:6a:00:34:fe:24:90:3a:97:00:fe:
e1:c9:52:78:56:cf:c8:aa:6b:45:77:68:b6:85:5c:
cc:1c:0d:d5:8e:0b:32:37:27:df:69:ec:4b:2e:c0:
1c:aa:51:63:46:c7:6f:25:86:a4:36:59:47:bb:2c:
56:b1:55:0b:4d:8b:37:cb:0e:76:b0:48:24:20:33:
32:d0:93:d4:82:1e:50:13:b2:2a:01:ff:53:cb:1d:
c2:e4:fb:d9:0d:f7:92:9f:75:6a:c3:f9:1a:e4:af:
0d:47:89:46:c3:3a:19:cc:58:f0:19:14:6f:47:56:
ed:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:01:F2:9B:7B:C4:8C:BC:04:DE:34:91:6F:0A:08:EB:CF:79:A3:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8671393-394e-3846-b473-dd02157d2c89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:f2:67:a5:f1:3a:8e:1d:94:50:86:20:90:ac:10:cc:13:b5:
74:c1:4c:4f:9b:45:55:3c:d3:e0:ef:76:6d:c9:2f:6c:3c:19:
9b:5a:34:07:36:cb:39:55:a6:20:a8:3d:8c:42:c1:31:2e:3b:
6c:a8:ea:67:c9:98:89:89:8a:07:90:ad:5c:96:18:f0:7a:8e:
bb:92:66:2e:9e:4d:f4:42:c4:11:c7:bc:75:04:15:f1:7e:13:
98:5a:28:27:08:5e:18:89:30:b9:dd:73:af:cd:14:c2:26:16:
36:34:64:c4:4e:e9:ec:26:ff:79:ae:5e:17:e5:64:5a:d4:46:
3f:9f:91:5b:05:2f:f7:a8:c4:74:7e:a9:32:3e:05:04:47:a7:
ae:c5:3d:f8:12:85:cf:e9:b4:1c:ca:48:1f:4d:ce:13:97:dc:
9d:27:61:bc:c1:e4:e2:20:ef:e3:87:06:6b:f8:43:72:5b:67:
f2:e5:b8:ad:a4:26:ce:23:f2:2e:5a:91:e8:36:50:03:02:b5:
17:af:31:7a:23:fc:a9:27:83:bd:4f:ae:0f:e4:e9:ab:01:16:
22:33:33:cc:ac:26:13:77:d0:68:d4:9d:bc:6c:0b:96:96:c8:
6e:67:91:03:06:f2:a1:34:60:28:43:8a:7a:e9:8b:6a:e0:2e:
a0:29:e2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:05:08 2026 by rpki-client