
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d95b3da1-95d0-3a1b-9281-392ee1e73d34.roa
File: d95b3da1-95d0-3a1b-9281-392ee1e73d34.roa (raw, json)
Hash identifier: hJwy+/OTEeJ/tHAj6a4BvOpgjnRWvzu2bVYmPOvgnzA=
Subject key identifier: 47:CB:8D:F2:53:77:20:0C:51:14:05:D8:C7:19:72:8F:A4:66:EC:B8
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D6C0FC56A6163A0F6BCA9F180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d95b3da1-95d0-3a1b-9281-392ee1e73d34.roa
Signing time: Tue 07 Apr 2026 01:00:23 +0000
ROA not before: Tue 07 Apr 2026 01:00:23 +0000
ROA not after: Mon 06 Jul 2026 01:00:23 +0000
asID: 13335
IP address blocks: 172.69.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6c:0f:c5:6a:61:63:a0:f6:bc:a9:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 7 01:00:23 2026 GMT
Not After : Jul 6 01:00:23 2026 GMT
Subject: CN=d4ad6171-3dc2-4e84-9b43-8473805c0c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2e:b7:d0:7f:5a:3e:26:a3:2e:94:54:1e:c3:
f7:25:38:b5:b0:6b:f2:01:95:de:2a:e4:51:c4:c7:
85:a8:01:e8:ac:b6:30:55:6f:de:f8:ce:f2:af:5c:
50:1d:bd:d5:7b:26:a4:5a:5e:38:37:23:51:b2:52:
cd:34:ba:1f:5d:20:ca:f9:f7:8d:7f:b5:cb:a3:5d:
11:95:45:65:2b:c1:47:8d:4c:eb:1f:49:5f:9d:72:
90:93:80:e2:d9:3c:88:29:50:25:0a:e6:96:30:36:
97:31:39:cc:e6:a5:ce:16:11:28:6a:ab:2f:13:ad:
0a:47:40:c7:6f:d6:da:53:64:fa:39:f0:ba:5a:b9:
a9:8f:b8:ce:06:c9:04:f2:41:8c:53:0c:34:5f:d6:
15:c9:09:2b:5b:ee:f7:76:e0:74:83:7b:62:34:9a:
23:ba:8b:fb:cf:fc:82:d4:f1:c8:f0:04:43:72:52:
b4:f4:b7:a7:70:1f:78:83:e5:29:11:dc:37:27:2a:
b4:eb:10:a0:cc:98:5d:2d:47:e1:47:d1:c9:74:ac:
54:f8:bf:c4:e8:33:80:04:e3:a6:c8:eb:89:7c:39:
d3:68:4a:c6:3f:76:92:37:ab:de:c4:62:02:b7:95:
d2:0f:30:cb:73:56:ac:2f:c0:fb:1f:c5:4a:58:8b:
de:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CB:8D:F2:53:77:20:0C:51:14:05:D8:C7:19:72:8F:A4:66:EC:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d95b3da1-95d0-3a1b-9281-392ee1e73d34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:8d:fd:d8:23:bc:3d:8b:7a:87:d4:a3:22:3b:ab:fa:77:37:
5e:18:45:ff:87:6c:99:ea:ec:e9:8c:bc:47:cb:08:75:b7:75:
cd:12:d0:23:ed:3f:bb:48:83:65:37:be:20:12:b6:9b:fd:4b:
75:b3:b6:52:f8:e1:7d:e7:34:f2:12:10:d7:f3:fc:e6:cc:54:
d3:24:d5:26:0f:db:ca:d1:9e:d3:66:f1:55:64:13:2a:1e:41:
ab:2d:89:8d:71:7e:9a:66:59:81:78:bf:d5:d9:f0:0a:fc:8d:
a8:b2:fb:51:e0:41:54:78:9e:ca:18:92:63:37:da:71:48:1f:
c5:f3:9a:cd:7b:9f:39:f4:ea:c5:ac:97:d6:28:b7:72:70:85:
fb:82:82:64:ac:ea:66:78:cd:cb:68:49:65:39:f4:4f:a5:31:
a8:29:8f:ad:af:7c:d6:c4:87:fd:00:41:fe:b9:45:f5:33:ae:
24:30:69:17:1c:c7:63:f8:0a:71:43:0f:8e:1f:c4:fd:a1:e7:
41:36:9f:0c:51:6e:b2:51:39:f6:c8:3a:06:1c:57:38:2f:d5:
98:2f:0f:f3:57:7a:48:14:e9:ae:c0:c8:e1:dd:7a:23:94:a8:
c6:97:03:58:6d:18:21:9b:df:a3:fd:2f:d9:a2:0d:0c:ec:4f:
54:54:68:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:51:10 2026 by rpki-client