
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e7914dc7-6fb6-3301-947d-dbe655d9e227.roa
File: e7914dc7-6fb6-3301-947d-dbe655d9e227.roa (raw, json)
Hash identifier: ruZkRHg5d7F5dufQzgWBD7JBSR/m8Q7sHBdPsuwrO9E=
Subject key identifier: F4:DE:78:6B:20:BC:17:6A:62:3F:4A:E8:16:46:25:B9:80:7A:A5:FC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584CBC4C680307EC5FB37930DBA0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e7914dc7-6fb6-3301-947d-dbe655d9e227.roa
Signing time: Tue 03 Feb 2026 02:00:31 +0000
ROA not before: Tue 03 Feb 2026 02:00:31 +0000
ROA not after: Mon 04 May 2026 01:00:31 +0000
asID: 14789
IP address blocks: 172.68.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:bc:4c:68:03:07:ec:5f:b3:79:30:db:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 3 02:00:31 2026 GMT
Not After : May 4 01:00:31 2026 GMT
Subject: CN=d84d4e06-d9c0-48d4-83f2-61d6275da665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a9:18:ec:9b:f8:a7:f8:fc:d6:2e:8b:18:b9:
97:42:f6:ec:94:11:35:2d:fc:9f:64:9c:67:e7:7b:
a4:53:43:85:49:a6:3b:c8:cf:38:c5:37:28:00:65:
73:e9:f3:59:05:b7:be:0e:9c:e6:f7:b9:10:21:5d:
18:da:ba:e8:12:44:8e:50:6a:10:37:23:3b:41:f0:
53:75:ad:61:0c:cc:a7:b9:f6:8b:e8:d3:eb:32:09:
23:b8:96:66:e9:76:ab:5a:4e:69:81:29:ab:36:96:
e4:1b:8d:ad:cd:eb:1d:30:4a:e9:cc:87:0a:e0:13:
35:47:e9:47:e7:cf:b7:22:74:58:4e:86:df:d7:90:
25:1d:99:d9:57:78:aa:ba:5f:8d:c5:97:9b:ff:54:
e1:d6:07:9a:3c:c4:b3:bb:72:53:12:e6:ae:f4:65:
d7:4b:3f:fb:06:e8:99:b2:0f:ff:2c:95:06:cd:44:
2f:7e:a9:d7:23:54:be:ca:f1:25:34:8d:95:f1:83:
80:ef:30:2f:77:6b:ea:9e:c7:48:f4:01:b3:3a:a0:
77:5f:13:96:56:6d:32:1d:30:80:da:37:24:ad:1f:
95:81:27:8f:4c:6d:78:da:39:4a:99:57:70:f2:67:
2c:f8:36:d5:d1:83:a4:f2:cf:67:fe:51:21:bc:85:
2a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DE:78:6B:20:BC:17:6A:62:3F:4A:E8:16:46:25:B9:80:7A:A5:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e7914dc7-6fb6-3301-947d-dbe655d9e227.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:7c:43:8b:07:56:8c:03:fc:fa:5c:78:28:c8:bd:60:02:ac:
bd:08:b5:dd:10:71:2c:28:f7:e0:cb:05:84:0b:fa:dd:22:bb:
4c:36:ec:4e:2b:71:90:24:2c:fa:39:8a:be:c3:d6:ae:94:a6:
43:e4:45:d5:06:bd:a5:a8:2b:6a:48:39:ed:fb:d8:c4:96:7a:
f6:e0:c4:40:5f:f8:33:22:6e:70:a5:ed:ed:fd:b5:b4:c1:77:
c6:86:07:3b:db:94:6c:ab:26:89:30:29:f7:12:c5:c9:7d:3b:
71:eb:8f:db:95:6f:9a:78:3d:11:62:f3:c1:a5:c7:ec:48:8a:
f2:10:a6:9d:25:35:71:c7:39:0d:79:e5:c5:94:79:43:2a:76:
4f:87:37:79:be:fa:27:bf:e5:c7:e6:e6:0e:40:c9:3e:7c:0d:
14:d7:f8:88:51:cc:ab:f3:03:c4:34:cd:2f:f3:81:ad:49:9d:
84:ff:30:2d:a8:d0:93:62:bf:7f:d3:24:b2:ce:9c:2e:8a:a7:
ec:3e:ae:77:cb:94:70:b2:6c:cd:f0:b1:64:39:ea:01:26:cc:
4b:19:90:00:7d:70:ca:49:ba:f9:f0:a7:f3:5b:73:dd:bf:4c:
92:40:62:67:ba:5e:c7:98:6f:e7:19:aa:67:e9:0c:03:1f:bc:
41:20:6c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:01:04 2026 by rpki-client