
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4b06abe-b5c0-3f9b-8b7b-e96a40dc0af1.roa
File: f4b06abe-b5c0-3f9b-8b7b-e96a40dc0af1.roa (raw, json)
Hash identifier: RgaXBgAm9OnuHwwqZ7U8Rfxb4VlCskELyR2I7rT7q88=
Subject key identifier: 8C:F8:DF:45:19:B6:16:B8:C3:1E:50:F1:A1:99:5F:1C:98:D1:4B:B9
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D71A51E379D84A9991B481380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4b06abe-b5c0-3f9b-8b7b-e96a40dc0af1.roa
Signing time: Thu 09 Apr 2026 01:00:23 +0000
ROA not before: Thu 09 Apr 2026 01:00:23 +0000
ROA not after: Wed 08 Jul 2026 01:00:23 +0000
asID: 13335
IP address blocks: 172.70.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:71:a5:1e:37:9d:84:a9:99:1b:48:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 9 01:00:23 2026 GMT
Not After : Jul 8 01:00:23 2026 GMT
Subject: CN=44191f4c-22d8-44d4-ba3e-b388fb15d80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:c2:b7:e0:ee:c7:45:a7:36:75:9b:91:45:
75:53:37:29:07:0e:11:8a:04:67:22:11:15:22:58:
45:3a:60:37:01:5c:bc:c4:d7:9f:b4:76:e4:8d:52:
eb:95:8b:d9:56:4f:9f:bc:19:9e:3a:2a:3a:8d:ba:
34:59:35:1b:2a:60:d4:f0:8f:c1:b4:45:6c:8d:16:
5e:05:6e:1f:a3:5f:4e:67:b2:a7:ec:76:9a:63:76:
4c:ec:61:a5:67:09:5e:f4:4e:f4:91:f5:1e:97:ff:
9d:4b:68:50:87:aa:e5:ef:64:7a:07:ee:7a:ae:ab:
14:07:3e:5a:9e:0e:0e:a7:84:ce:f5:3e:e6:42:76:
29:0a:5a:51:6b:b8:48:1c:92:9a:7b:2e:2f:c4:35:
25:c0:a7:12:5b:81:51:65:97:28:f1:89:8d:cc:6e:
7f:56:cd:29:d7:91:c6:f1:4d:b9:9b:27:ad:e0:88:
e8:04:55:37:56:1c:6e:eb:1a:47:51:d6:b0:57:d3:
3c:14:df:b5:84:f7:9f:9f:10:6e:4e:d3:7a:99:29:
a6:98:db:75:93:79:52:86:65:ed:6b:18:c1:f8:d5:
a6:b3:b2:4a:ce:f0:39:73:a5:b6:f1:f4:24:40:c1:
c4:1d:40:c0:94:6b:6c:d4:ae:a8:c5:80:28:65:10:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F8:DF:45:19:B6:16:B8:C3:1E:50:F1:A1:99:5F:1C:98:D1:4B:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4b06abe-b5c0-3f9b-8b7b-e96a40dc0af1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:1a:7b:2e:d6:0c:95:b9:d9:81:13:f2:d1:02:4c:cf:92:e2:
23:92:fd:79:10:ca:41:80:35:c6:5f:3c:be:75:0b:3f:93:60:
2c:cb:72:f2:82:ed:1d:51:92:2e:12:70:11:41:23:fa:59:53:
26:83:ca:74:5e:c0:53:c5:a2:75:49:51:50:66:28:8a:2c:b6:
72:8c:fe:40:d9:b9:74:fa:bc:87:69:16:8a:5c:1c:5d:34:10:
f2:8e:b4:e1:a9:76:30:9b:42:43:48:ad:06:7c:43:0a:e4:c2:
44:3e:ff:c3:c4:2e:e4:5d:24:ba:b4:13:d9:a1:22:20:25:f8:
81:5d:a8:71:46:f9:8b:51:6b:a3:fb:f7:8b:45:72:ff:90:f3:
1c:99:6f:69:c1:eb:05:00:a9:b7:4d:f0:ad:76:88:8f:1a:a9:
37:2a:8a:05:4e:e3:14:c4:21:51:63:6f:ee:97:e6:bf:02:60:
85:aa:24:9e:e9:bf:6e:82:f2:ff:cc:17:47:0f:7e:89:c4:26:
5a:a0:9b:a0:e1:d9:e7:d0:24:3e:18:1d:2c:db:29:5c:d7:5a:
27:b1:ee:4d:28:99:b8:3e:8d:7a:9e:83:1b:a0:ba:db:14:4a:
db:36:06:a0:fb:89:ae:ec:bc:1c:64:a3:9f:c2:27:9d:3d:23:
33:53:c3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:10 2026 by rpki-client