
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/04c8f527-93f3-37be-8801-9b9cc7215ba6.roa
File: 04c8f527-93f3-37be-8801-9b9cc7215ba6.roa (raw, json)
Hash identifier: x2MYepgXCpyp+SuIIpHXgMMmiiojHpiLr2PjIvgUPco=
Subject key identifier: 8E:9E:AA:34:8E:A5:78:45:88:97:94:B2:57:AD:E2:7A:46:48:E0:7D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E0865E528E7227F6032B2C900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/04c8f527-93f3-37be-8801-9b9cc7215ba6.roa
Signing time: Tue 02 Jun 2026 01:00:10 +0000
ROA not before: Tue 02 Jun 2026 01:00:10 +0000
ROA not after: Mon 31 Aug 2026 01:00:10 +0000
asID: 13335
IP address blocks: 172.64.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:08:65:e5:28:e7:22:7f:60:32:b2:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 2 01:00:10 2026 GMT
Not After : Aug 31 01:00:10 2026 GMT
Subject: CN=2683d25a-6471-49b0-8c3b-87dabd3ec827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:68:1a:ee:85:a8:23:58:77:9f:19:7f:83:
71:1e:84:be:50:dd:51:29:dd:7d:a4:e1:9e:3c:74:
5c:6c:96:b3:61:44:9c:aa:84:7a:cd:0c:90:1f:d4:
a1:e1:aa:fa:6e:d8:af:42:cd:44:b6:38:cf:59:46:
87:46:49:7e:ee:e6:fb:f1:ec:24:0e:9f:44:d4:bf:
8e:2a:5c:a9:1f:b7:bf:02:68:49:4b:60:f0:b4:24:
cd:80:ed:a5:72:76:9d:a1:b2:bf:c4:71:ab:47:37:
43:00:55:8e:37:20:d1:d0:79:9b:ed:c9:db:51:d2:
e4:6f:14:35:24:51:48:2b:49:6a:d1:96:21:00:d4:
48:08:a9:94:d0:fb:6a:e6:83:3f:5f:6c:b4:56:32:
3c:cc:01:a5:bf:0a:8d:13:20:15:5d:28:50:fe:3f:
ae:64:d8:a2:d4:94:71:83:e3:32:69:a1:c5:15:df:
73:30:08:5d:7f:82:11:88:5b:1b:22:6b:95:0b:68:
24:94:7a:e9:ba:9e:ed:2f:38:cd:88:43:05:dc:91:
dd:eb:15:87:58:51:ff:7a:56:53:bc:3e:81:9d:1c:
b4:0c:1b:50:ae:14:43:8d:4b:d3:c7:e1:aa:6c:8d:
b8:d1:61:65:df:05:a0:f6:f4:ec:3b:49:60:30:c5:
22:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9E:AA:34:8E:A5:78:45:88:97:94:B2:57:AD:E2:7A:46:48:E0:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/04c8f527-93f3-37be-8801-9b9cc7215ba6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:e3:94:16:ad:a1:51:9e:bb:e0:2b:75:1b:d0:b2:ce:68:1d:
f9:83:9a:7f:46:02:3d:d8:ce:e6:c6:9c:10:53:21:0f:e6:1f:
aa:db:15:18:7d:6b:b7:97:c5:a3:3d:7c:7e:db:28:33:6a:e8:
f8:29:0e:b2:7a:7d:e1:3a:6c:3b:94:bd:69:4b:53:91:7a:90:
65:f2:25:14:94:ae:0f:26:67:53:8e:ae:bc:24:82:a6:5a:99:
e7:d7:86:f4:ed:22:62:08:db:1d:aa:5e:b8:4d:db:56:b6:69:
43:6a:29:b8:60:f0:95:c8:47:c1:5e:6c:58:ac:60:67:6f:2e:
d0:88:4a:43:00:4d:4e:98:3b:33:78:52:da:51:75:05:42:0f:
f1:b6:0e:92:19:3c:f4:16:50:2f:70:af:bf:21:ef:60:51:4f:
56:7c:5b:5a:0d:a6:dd:0b:cc:f9:75:fd:64:e9:cc:f1:80:37:
49:88:4a:15:53:c8:f0:08:3d:bd:69:1e:43:71:34:f3:5d:a4:
56:7f:8d:0f:43:85:9b:c6:01:fa:d3:ce:36:5a:c1:b7:5e:95:
12:64:a0:e4:41:a2:4b:e5:fb:bc:3a:22:57:c1:12:af:ce:84:
2c:77:91:89:92:4f:f7:1f:59:e0:7f:cd:78:36:d7:05:bb:c3:
89:48:b3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:53:16 2026 by rpki-client