
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da59fd2d-323a-3905-9f5f-8b77b9fd1e82.roa
File: da59fd2d-323a-3905-9f5f-8b77b9fd1e82.roa (raw, json)
Hash identifier: XhBwkWJQk1K2BBodW8/PJghTDftoOjtwklq20x7yLmc=
Subject key identifier: F1:BC:1E:96:85:C7:75:F7:BA:57:DE:C5:62:10:1F:FE:8E:0A:8D:D5
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D6AAAA6FBB7D580E2ECBD6980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da59fd2d-323a-3905-9f5f-8b77b9fd1e82.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 13335
IP address blocks: 172.68.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:a6:fb:b7:d5:80:e2:ec:bd:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=9f5e1b21-cba6-4c96-8966-c6a6bddc78a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:10:45:3a:0f:d7:c6:e0:5d:3f:ba:84:1d:
8c:02:5b:5a:74:9f:62:88:d6:7a:f9:d1:c8:8c:15:
a7:f1:5e:f7:92:01:cf:57:d8:c4:0b:a4:48:4b:88:
9a:d3:27:6b:c4:a9:76:82:5b:4a:e2:11:9d:82:94:
6b:00:16:8f:de:63:d0:fa:0a:b6:cd:e1:d2:40:2c:
be:63:dc:b7:b4:53:84:6b:43:fa:2f:47:99:96:ed:
1e:cf:ad:eb:da:b9:8e:3a:a0:92:74:2b:e8:97:41:
10:ce:1e:fa:40:ab:f0:be:72:c5:ff:dc:75:51:a2:
5d:34:0b:43:ad:61:00:1a:04:99:3c:12:c6:08:a2:
6e:96:65:72:7e:ae:46:10:91:50:96:41:92:8e:90:
1d:a8:1c:d7:e5:cd:7b:d8:b4:e5:ba:7f:e0:cc:c7:
b4:9c:fc:01:2f:40:44:66:62:5c:a2:a6:bf:7e:fd:
bd:5f:33:1c:b5:39:c3:ac:08:30:11:fb:49:66:bc:
eb:e6:99:2c:de:25:00:03:f2:e2:d3:9a:ef:7a:47:
eb:7a:a0:8e:c5:0b:d3:9d:76:ad:f7:ee:24:85:70:
ed:42:46:c2:a7:62:2e:2d:9b:e5:e1:21:b1:0c:8b:
5b:87:f8:cd:4d:15:68:63:df:97:de:14:0c:40:f4:
1e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BC:1E:96:85:C7:75:F7:BA:57:DE:C5:62:10:1F:FE:8E:0A:8D:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da59fd2d-323a-3905-9f5f-8b77b9fd1e82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:5c:4a:c2:56:39:c2:5c:1e:21:1c:2c:6b:94:43:1a:73:2f:
1f:f8:7b:2b:dc:5f:2a:bb:b7:98:aa:ca:a7:a1:ed:66:10:d0:
d7:03:01:e0:56:55:7b:14:7b:ce:77:8b:73:25:c5:b9:6e:04:
e8:9c:9f:80:a9:b2:9a:18:64:a8:0d:c7:3a:08:a2:f5:d6:69:
96:74:ba:2e:7c:7d:46:a4:f7:27:74:53:20:af:6d:1d:06:f0:
42:80:9b:9b:4c:1e:3b:e3:ee:6b:95:7a:3d:1c:8d:2f:0a:b3:
f8:14:c2:20:39:e9:73:c6:f0:4d:28:10:31:7f:2a:b9:93:fa:
23:c0:34:aa:f3:fb:26:9e:45:69:09:3b:f0:81:ae:c1:ac:33:
8a:ec:a3:e8:64:22:5c:a3:ed:42:7f:20:f0:92:26:e0:a2:3f:
98:26:ee:1b:c0:3b:ba:cd:cf:5b:fc:c5:f1:31:7e:13:67:f8:
ed:cc:45:dd:86:e3:77:d6:93:b9:90:09:be:0d:89:a5:57:55:
a8:44:d6:e9:b6:37:7c:78:1e:f6:12:59:de:09:2b:d4:4e:6b:
8d:6a:04:9e:28:c3:30:48:ce:13:01:00:5c:17:1a:d1:67:02:
b9:bc:57:37:2d:ee:84:ea:ef:a0:22:79:30:70:51:39:c6:19:
95:e4:34:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqqb7t9WA4uy9aYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
OWY1ZTFiMjEtY2JhNi00Yzk2LTg5NjYtYzZhNmJkZGM3OGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow8QRToP18bgXT+6hB2MAltadJ9iiNZ6+dHI
jBWn8V73kgHPV9jEC6RIS4ia0ydrxKl2gltK4hGdgpRrABaP3mPQ+gq2zeHSQCy+
Y9y3tFOEa0P6L0eZlu0ez63r2rmOOqCSdCvol0EQzh76QKvwvnLF/9x1UaJdNAtD
rWEAGgSZPBLGCKJulmVyfq5GEJFQlkGSjpAdqBzX5c172LTlun/gzMe0nPwBL0BE
ZmJcoqa/fv29XzMctTnDrAgwEftJZrzr5pks3iUAA/Li05rvekfreqCOxQvTnXat
9+4khXDtQkbCp2IuLZvl4SGxDItbh/jNTRVoY9+X3hQMQPQe1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPG8HpaFx3X3ulfexWIQH/6OCo3VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGE1OWZkMmQtMzIzYS0z
OTA1LTlmNWYtOGI3N2I5ZmQxZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArES8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKtcSsJWOcJcHiEcLGuUQxpzLx/4eyvcXyq7t5iqyqeh7WYQ0NcDAeBW
VXsUe853i3MlxbluBOicn4CpspoYZKgNxzoIovXWaZZ0ui58fUak9yd0UyCvbR0G
8EKAm5tMHjvj7muVej0cjS8Ks/gUwiA56XPG8E0oEDF/KrmT+iPANKrz+yaeRWkJ
O/CBrsGsM4rso+hkIlyj7UJ/IPCSJuCiP5gm7hvAO7rNz1v8xfExfhNn+O3MRd2G
43fWk7mQCb4NiaVXVahE1um2N3x4HvYSWd4JK9ROa41qBJ4owzBIzhMBAFwXGtFn
Arm8Vzct7oTq76AieTBwUTnGGZXkNJA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:20:12 2026 by rpki-client