
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11b89bd0-db2d-35b1-82f1-0bc39d3ff2f6.roa
File: 11b89bd0-db2d-35b1-82f1-0bc39d3ff2f6.roa (raw, json)
Hash identifier: wy54RyXfBpxirtIH79H4PGyMhCkawZo4PS+ZxwbbBOg=
Subject key identifier: F7:B4:1C:81:C7:1E:D5:57:A2:49:12:61:E9:F3:F2:45:ED:3F:B9:B6
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EED522AB7A7301BD1185A2F18
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11b89bd0-db2d-35b1-82f1-0bc39d3ff2f6.roa
Signing time: Sun 23 Aug 2026 01:00:12 +0000
ROA not before: Sun 23 Aug 2026 01:00:12 +0000
ROA not after: Sat 21 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 172.64.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ed:52:2a:b7:a7:30:1b:d1:18:5a:2f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 23 01:00:12 2026 GMT
Not After : Nov 21 02:00:12 2026 GMT
Subject: CN=5daaf8c9-af26-4bbd-b79d-ba5b790850e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:4c:92:e6:89:60:12:c0:06:83:d3:56:65:
cc:88:3a:0d:db:f6:b5:4b:a2:f4:9d:00:b3:8a:24:
94:f2:9a:52:1b:a4:37:5b:99:9b:bf:68:25:14:20:
ed:87:39:ae:40:5c:21:11:ce:70:be:4e:1e:a9:c3:
a9:63:f5:35:de:0f:aa:ca:08:3c:23:da:98:9f:78:
8e:98:11:97:07:b7:e3:e9:18:77:4f:57:73:1e:0d:
f7:7e:79:8c:4a:ff:ef:24:69:64:69:ca:67:06:2a:
17:8e:7d:20:2b:6d:a1:29:e4:7e:22:41:72:23:5b:
c5:4d:aa:29:5a:b4:1f:23:c9:44:06:df:2d:79:35:
ef:fc:4f:85:6f:fa:34:af:77:fb:2d:39:3b:61:fb:
5e:6b:ce:5c:29:75:a4:ff:5f:3a:aa:63:c1:f0:63:
63:c3:dc:12:c4:b5:dc:5a:c3:08:79:2b:31:77:4c:
a8:ba:97:36:c4:05:e3:90:c1:6f:39:cc:98:5e:bb:
78:73:1b:b0:59:14:f9:b4:62:58:df:12:fa:0a:39:
5b:25:a6:d0:30:f0:b4:37:f1:17:42:54:dc:b1:8c:
62:54:3b:99:86:41:0d:b9:eb:2f:e4:49:0b:77:87:
9d:36:8c:ca:5d:7d:45:be:29:24:28:b7:71:1e:b2:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B4:1C:81:C7:1E:D5:57:A2:49:12:61:E9:F3:F2:45:ED:3F:B9:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11b89bd0-db2d-35b1-82f1-0bc39d3ff2f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:0a:2a:5b:7d:4f:f0:3c:1d:e9:2f:64:f4:ae:e9:d4:1e:28:
3d:46:b4:1a:17:7a:68:bf:11:54:72:b2:da:3d:33:0d:ef:57:
ca:2b:da:92:5b:49:0b:9f:87:ce:48:82:0a:fd:05:62:81:54:
e6:0b:12:54:16:91:57:75:68:a1:6d:ed:8d:8c:dc:1e:e4:7f:
14:37:7f:51:67:02:15:22:a6:66:7b:bd:3c:23:8d:06:4e:cd:
a3:5c:ec:45:ad:a5:f8:9d:6b:cd:50:c9:8b:c5:a6:15:4e:01:
82:26:c6:3b:0d:57:41:db:8c:ef:bd:c0:aa:5a:86:2a:02:79:
08:40:bc:5f:ef:5f:42:61:f8:ca:e4:89:46:14:24:76:4f:cc:
4f:b7:43:5f:f0:8a:7b:d1:4d:4e:2d:38:57:3f:52:bc:9c:10:
da:bd:c1:4a:db:a7:6a:ff:20:be:8c:0d:dd:45:d9:82:23:a2:
91:88:f0:85:69:5e:68:58:a7:26:48:eb:18:20:63:c2:92:c5:
9b:08:2e:19:2a:00:ac:3c:79:13:2d:7e:94:0a:de:09:6e:f7:
b7:9b:8f:63:75:cd:4c:58:15:e1:94:32:8c:68:fe:92:b8:7a:
0b:69:bf:b9:32:e6:ae:ec:69:f6:9c:45:12:1a:c9:29:81:33:
b1:46:f1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:57:03 2026 by rpki-client