
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1de7960-1381-3f30-9985-24f97a3b12e2.roa
File: f1de7960-1381-3f30-9985-24f97a3b12e2.roa (raw, json)
Hash identifier: WZoSh7Zm+uXnzt6tvH6bN9gAeUjTG9zrXikTb675H5U=
Subject key identifier: F8:44:8E:E3:50:78:0C:78:D8:6A:D8:7C:DE:C7:0C:59:7D:50:30:B1
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D6AAAA677FA90909C98D47BA0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1de7960-1381-3f30-9985-24f97a3b12e2.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 13335
IP address blocks: 172.68.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:a6:77:fa:90:90:9c:98:d4:7b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=64bdcbfe-fd3b-48e2-885b-d26aca4e8b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2c:47:2f:aa:1f:97:6f:41:29:a9:2c:40:55:
0c:a1:e2:68:b7:7f:79:82:4d:62:4a:99:5d:8c:00:
05:24:20:4f:1d:e0:bd:5d:b4:0e:cf:df:0e:2b:72:
13:6e:ef:29:a6:26:a9:12:7e:52:f8:61:5e:44:2b:
96:94:d7:83:15:a3:c8:bd:f6:92:b1:b2:44:d8:c8:
c1:40:7d:5c:9f:c4:86:f2:81:c9:44:3e:94:6f:b6:
3c:28:d7:91:d3:b3:16:bf:c5:67:93:1b:40:6f:70:
90:e9:08:59:ff:6e:2e:d6:63:0f:4e:91:7a:eb:fc:
ed:27:88:05:bc:6b:d5:4c:c6:e0:f5:5c:58:5d:94:
ca:b8:08:ac:77:fb:35:6e:8f:0f:ca:12:58:5d:c6:
50:8a:60:a1:4c:f6:ac:88:c9:79:7c:15:e9:be:c8:
26:84:2a:ec:07:93:2c:3d:35:e6:62:eb:62:35:f5:
21:3d:0b:d9:7d:4e:32:c2:92:14:5b:df:5d:07:1e:
6e:c5:96:3d:86:ae:90:b1:90:11:7d:a0:c5:01:d2:
5a:ed:d1:a2:ff:a8:94:75:82:23:1e:66:11:f4:44:
a1:09:c7:74:d9:be:c6:a0:71:31:c0:3c:3d:47:ca:
70:28:8d:3e:76:b2:06:2e:4f:d0:8d:96:dd:4b:09:
66:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:44:8E:E3:50:78:0C:78:D8:6A:D8:7C:DE:C7:0C:59:7D:50:30:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1de7960-1381-3f30-9985-24f97a3b12e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:de:e7:2f:30:08:17:ec:df:34:b5:89:4e:12:ff:b0:20:57:
69:db:9b:25:bd:43:71:61:35:76:8a:91:8b:eb:de:84:1f:42:
d6:50:df:83:25:a9:cf:6d:e4:bb:b3:54:92:f3:c9:37:a0:44:
e3:dc:22:6b:b5:5e:8b:00:87:6a:ae:53:cf:6e:1a:60:7c:84:
9a:fe:34:14:67:00:a0:a3:64:d2:91:d6:de:24:4d:e8:16:e8:
6a:43:14:b9:7f:97:6e:29:f7:41:ca:13:e4:c3:5a:cf:b3:a5:
a0:cc:5d:60:aa:33:9c:9a:8b:67:a3:d0:9a:2c:2a:d0:f7:65:
5b:70:8a:0a:e2:3b:37:a2:d0:ca:de:45:00:74:57:8d:51:aa:
5c:22:75:d3:dd:a4:de:ec:40:b0:a0:ef:36:ff:e6:65:70:f5:
55:37:33:36:65:8e:8c:41:f1:bd:20:a8:f1:91:33:35:6f:99:
6e:e0:1c:8d:03:16:09:7e:0d:81:90:c6:41:1c:a9:6c:c2:6c:
d1:dd:1f:8e:4c:71:17:d9:29:7c:cb:ae:f0:e3:67:6a:cb:eb:
0d:e7:9f:69:4c:bd:11:b2:d4:c5:f8:46:b0:4d:1b:33:84:cc:
c5:25:b5:4d:bc:e3:14:e7:30:e0:ae:50:62:ea:53:c5:e8:9e:
ef:09:9e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:12:37 2026 by rpki-client