
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0108a716-38be-31f8-b06e-ed9f9486b106.roa
File: 0108a716-38be-31f8-b06e-ed9f9486b106.roa (raw, json)
Hash identifier: d37VM4uz0CS/7mAkhKF/Y51sNZoDc2q0wPviTFjW89E=
Subject key identifier: FB:4D:7D:53:B5:01:F2:4A:D3:3F:1A:86:BD:ED:0A:4A:01:85:CB:51
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584F90A3149B7490D3A8766F0EC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0108a716-38be-31f8-b06e-ed9f9486b106.roa
Signing time: Tue 20 Oct 2026 13:00:13 +0000
ROA not before: Tue 20 Oct 2026 13:00:13 +0000
ROA not after: Mon 18 Jan 2027 14:00:13 +0000
asID: 13335
IP address blocks: 172.68.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:90:a3:14:9b:74:90:d3:a8:76:6f:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 20 13:00:13 2026 GMT
Not After : Jan 18 14:00:13 2027 GMT
Subject: CN=79352575-e036-4b4a-96d3-502eca26bb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:26:43:63:c4:e7:f8:b5:60:fc:3f:8a:d6:
83:ba:4c:1c:ae:ee:a8:85:c0:3e:eb:dd:82:ac:7e:
65:2b:da:9e:34:cc:88:1c:d6:11:3c:4a:78:71:81:
e8:67:c8:8e:1f:55:c6:3b:22:ba:c0:73:90:9b:b8:
b0:e7:59:96:a1:01:8b:0e:29:9c:7a:aa:30:f8:00:
4e:c0:83:0a:2d:85:50:5f:2e:48:8e:22:89:04:f1:
d2:fb:27:0a:79:9f:0e:d6:18:c4:f0:ec:ca:39:50:
8b:e0:c4:ad:b2:76:8d:ac:12:7d:a7:c1:52:2a:6e:
78:9a:32:cc:a3:85:0d:04:3c:d4:b6:90:61:b6:02:
bd:e3:cf:e5:80:7e:67:b1:cf:22:2e:bf:47:e2:79:
05:7f:0d:34:54:a6:fc:86:e4:da:49:7c:69:43:8e:
73:64:6f:a5:93:83:7d:02:a3:90:91:bc:e4:c9:b7:
49:aa:de:88:22:5a:41:d8:e9:88:32:18:44:a0:e6:
9c:b7:41:68:10:86:dc:ed:92:16:69:35:51:ec:44:
31:51:de:be:98:94:77:a2:87:c1:e2:85:04:d8:41:
95:57:01:73:86:fc:de:8f:be:a2:3f:27:52:1c:92:
ee:1f:fe:58:da:e7:44:fb:35:7b:e0:1f:9f:37:4f:
26:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4D:7D:53:B5:01:F2:4A:D3:3F:1A:86:BD:ED:0A:4A:01:85:CB:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0108a716-38be-31f8-b06e-ed9f9486b106.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:1d:ff:58:8b:ba:20:40:00:e7:b0:60:4b:77:a6:47:89:19:
61:6c:4f:0b:f2:92:b7:b0:a5:06:47:aa:51:db:fb:7e:4f:18:
96:bb:9c:09:bd:0f:99:78:1d:f2:fe:53:47:ba:66:08:3f:43:
a4:37:6e:8b:57:e0:eb:86:30:79:5b:91:e3:cf:92:da:1e:8a:
7f:8a:7c:a0:25:13:41:a9:13:57:3d:a7:63:b3:98:a7:15:f1:
4d:dd:bd:ef:ba:9b:f3:04:9a:52:b7:40:8e:2a:db:a0:00:dc:
09:51:33:00:29:be:d9:36:db:20:f9:0a:4b:7c:01:13:87:24:
0e:8f:12:c7:36:57:e9:e7:ba:9f:47:d1:7e:de:df:f4:28:f7:
4a:25:fc:19:d8:99:6c:d1:b6:70:e2:21:d8:a7:28:d5:98:59:
c8:4d:f1:a8:12:c9:b6:bb:35:e9:c9:73:d6:74:9f:82:d1:d6:
3d:be:8d:e3:f1:bc:ee:d4:47:64:41:3d:73:ba:d4:5a:e9:69:
fc:fc:a2:7c:43:d8:7b:21:91:dc:d3:ef:8f:60:cc:5e:a0:25:
fc:1f:36:60:cd:84:ee:41:7a:d9:66:e4:29:25:d3:f2:3e:ec:
29:e8:62:b8:67:67:65:10:40:36:8f:d7:b6:81:28:ee:77:59:
7c:fa:a3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 13:06:37 2026 by rpki-client