
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17592e75-04b4-3539-bc69-555829ab28d2.roa
File: 17592e75-04b4-3539-bc69-555829ab28d2.roa (raw, json)
Hash identifier: jGyWT995/wWU8nTWna94Lu0mARXPnAgvZxAN1z2hKmo=
Subject key identifier: B0:86:61:67:72:54:75:1E:B7:FC:4F:C1:A6:AF:66:05:9D:57:3F:28
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EEA87835FE5C1B12C33AB2580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17592e75-04b4-3539-bc69-555829ab28d2.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 172.68.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:83:5f:e5:c1:b1:2c:33:ab:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=5d02afb8-9427-4cc2-8e29-fe110e02d46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:3f:19:d3:b9:18:cb:6e:4d:90:87:1c:42:
11:cd:2f:8f:65:d3:b2:20:28:11:8a:31:75:d2:56:
00:77:44:ca:3e:37:21:f8:71:7b:e1:f5:e2:36:6e:
ae:88:74:bb:03:2b:8c:b3:0e:70:bc:9f:de:a7:ba:
53:6d:64:fb:45:ab:6d:56:96:7d:a8:76:97:b4:3f:
9c:3e:78:ef:48:fc:e5:14:0e:83:52:0a:c2:a8:ea:
55:0e:0e:88:d9:81:df:a9:d2:a7:4d:0f:75:36:ca:
8b:5f:88:db:c1:a4:98:21:2b:f0:19:f6:9a:19:6a:
5c:ba:ab:39:fa:de:74:93:40:c9:47:61:cf:08:e9:
4d:f1:c4:50:b0:51:97:fb:d0:33:a4:b8:13:d7:00:
d0:89:bc:28:5d:d1:ad:57:3b:d4:48:49:fe:81:bb:
46:94:f6:db:ab:46:f9:aa:49:20:66:fc:34:a3:4a:
12:4b:52:20:b4:8f:75:e9:e1:37:e9:4e:ba:ed:96:
74:0e:f5:c0:30:7e:70:53:ee:0b:27:83:97:0b:d1:
42:66:e9:ea:31:6b:12:d8:9f:11:29:6c:30:97:3a:
f7:10:cb:3d:db:23:63:ec:5f:d6:86:cb:94:c2:3a:
96:ef:c0:6e:64:a9:01:47:bd:c9:e7:ec:f7:ad:cb:
4c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:86:61:67:72:54:75:1E:B7:FC:4F:C1:A6:AF:66:05:9D:57:3F:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17592e75-04b4-3539-bc69-555829ab28d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:4c:27:39:f4:6e:4d:1e:50:b3:6f:03:fa:e9:17:2a:1b:44:
62:bf:7c:d5:5e:22:38:52:95:34:6a:22:cc:76:23:77:e4:1f:
b0:1f:f9:ee:5d:9c:3a:6e:51:81:1f:f0:2a:96:fd:70:b7:f5:
cf:49:f7:b6:95:38:50:f8:0f:ea:dd:24:ae:af:d6:9f:58:ee:
c5:90:c6:45:bf:11:9c:c1:67:93:0b:1d:7c:78:c9:1f:c8:ef:
38:84:da:7d:4e:6c:26:e6:07:c6:50:58:d3:b9:e3:e7:e3:03:
fb:3c:93:a3:ac:a3:0b:1c:d3:c8:c1:64:69:8e:7b:d9:7c:4f:
75:64:ac:33:a9:7f:14:0f:87:38:36:12:8e:1a:17:6b:ef:68:
f0:5f:29:b6:ee:4a:73:25:e0:1a:30:5a:d8:33:00:9d:5d:15:
22:c8:6e:6b:54:0a:a3:17:24:83:e2:42:25:f5:31:2a:a4:81:
53:1c:a6:1a:6c:97:4f:ca:a9:0d:05:65:36:4e:c4:c0:5e:05:
4a:0f:b0:84:50:dd:3e:8a:34:33:ae:4f:11:dd:47:76:e0:37:
7e:ff:cc:ff:b1:42:3d:06:82:78:7e:40:5c:6d:d5:a0:39:d0:
5d:ee:dc:81:d9:6b:1f:cc:03:bc:e9:18:3a:64:b7:a7:f3:c1:
02:e2:f5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:22:05 2026 by rpki-client