
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffefb04b-439d-329a-b0a7-11b8923ec659.roa
File: ffefb04b-439d-329a-b0a7-11b8923ec659.roa (raw, json)
Hash identifier: UcKqDZgdQPE3ol/GyXuAIQCOktJi0oioQ7E82JoBJgU=
Subject key identifier: 0F:9E:FB:27:E1:4F:F0:3E:C7:A8:A9:C7:02:50:CA:16:74:AA:3E:46
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EED52397C458E3982AD3DD300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffefb04b-439d-329a-b0a7-11b8923ec659.roa
Signing time: Sun 23 Aug 2026 01:00:12 +0000
ROA not before: Sun 23 Aug 2026 01:00:12 +0000
ROA not after: Sat 21 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 172.68.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ed:52:39:7c:45:8e:39:82:ad:3d:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 23 01:00:12 2026 GMT
Not After : Nov 21 02:00:12 2026 GMT
Subject: CN=a4652792-508c-441c-a271-41d310214f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:93:85:83:b4:43:4d:0e:b5:ec:df:39:f3:3a:
ee:c6:85:34:29:53:aa:5e:5f:1c:c8:25:a6:d8:16:
d0:20:db:46:ae:33:f4:16:b4:fb:43:d6:07:c0:88:
23:9c:3b:03:cb:61:75:49:f0:82:cb:d8:9c:f1:1e:
44:0a:0a:e8:e6:4f:e3:5c:37:45:18:59:79:9f:77:
63:8e:0e:a5:a5:b7:d5:fc:e1:09:66:b7:5a:14:30:
87:de:96:e5:30:ca:03:48:5f:d5:23:94:15:9d:47:
4e:48:fd:79:36:a2:f4:e4:61:4e:c1:a2:e6:21:e4:
55:13:69:fd:ba:38:5c:51:f0:f8:da:cb:c0:f6:81:
92:68:e1:c0:19:a7:bb:9e:00:e1:0b:11:b7:46:00:
3f:12:ee:f0:df:93:ff:bc:fe:e6:64:e7:27:2a:84:
68:e3:97:19:bd:90:16:87:ac:c0:cd:f3:4b:c8:4e:
26:ac:d6:60:72:70:7b:bd:94:72:51:67:a7:2d:26:
29:5a:89:74:4e:b6:29:a2:5f:45:1b:a3:11:da:c1:
9b:94:9b:c9:36:ad:3d:f2:70:6d:ba:97:65:d6:de:
1a:e7:87:e4:77:7d:0f:ae:fe:1e:72:80:ad:76:16:
5f:83:ab:49:3d:52:96:91:dd:d7:43:7f:6c:71:e1:
df:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9E:FB:27:E1:4F:F0:3E:C7:A8:A9:C7:02:50:CA:16:74:AA:3E:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffefb04b-439d-329a-b0a7-11b8923ec659.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:cc:50:ed:4e:21:47:c0:29:4f:59:0b:0b:3d:a0:7b:28:21:
b0:8b:e0:a6:b3:f3:39:63:e1:70:4d:95:00:8e:1f:bf:b5:f9:
36:cb:0b:0a:d4:12:b1:6a:ff:f0:35:87:02:88:51:a5:57:99:
4e:63:37:33:34:3e:fc:6b:65:f3:1a:f6:28:ad:e8:b6:54:31:
8a:71:ff:a8:19:96:7f:e3:4c:be:99:02:2d:cc:28:78:0d:e5:
4d:22:46:d3:15:38:01:b2:e1:aa:c2:b1:4d:98:f5:cb:2e:37:
9d:21:8f:7d:2b:3e:f3:a7:2d:25:b5:d1:59:30:f3:91:fb:da:
7f:60:fc:3e:c5:a4:1a:a0:b9:73:11:60:3b:d4:8b:01:82:82:
a1:eb:dc:c2:cb:f2:c8:15:e0:f0:5a:38:07:7e:1c:e9:f5:74:
3c:5c:8c:95:b0:f0:99:41:7c:c7:3e:c7:76:5c:36:71:11:fc:
e8:58:90:0a:46:5a:ee:79:01:e3:21:78:1a:85:46:13:4a:6a:
d1:7c:51:fc:b4:ff:dd:70:e9:7d:f5:1e:34:cc:e2:16:b1:42:
73:54:e6:a4:be:73:f2:6e:04:ae:4c:72:79:0f:c1:f7:b4:8e:
25:73:98:c2:2b:4f:6b:cd:99:91:e2:d1:24:f4:2f:88:a7:63:
6e:11:a3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:37:31 2026 by rpki-client