
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c6ac8cf-b7ac-3364-81bb-2666168000cf.roa
File: 1c6ac8cf-b7ac-3364-81bb-2666168000cf.roa (raw, json)
Hash identifier: ANyqErebwiW2DyGX/IMCdGTsFGLtv0ZRyqERBFgRylY=
Subject key identifier: A9:7B:F1:E6:A1:F5:8F:60:9E:98:DB:C6:10:92:14:B8:4C:DA:E8:B8
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584DBF0C6FE651B51534DFF7BA00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c6ac8cf-b7ac-3364-81bb-2666168000cf.roa
Signing time: Wed 06 May 2026 18:26:02 +0000
ROA not before: Wed 06 May 2026 18:26:02 +0000
ROA not after: Tue 04 Aug 2026 18:26:02 +0000
asID: 14789
IP address blocks: 172.68.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 11 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bf:0c:6f:e6:51:b5:15:34:df:f7:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: May 6 18:26:02 2026 GMT
Not After : Aug 4 18:26:02 2026 GMT
Subject: CN=aa8d83ed-62ec-4d81-a2f9-8f129a8750c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:a8:2f:9c:99:b1:2f:24:7e:45:27:70:a6:
93:bb:ae:86:7c:c7:70:2d:6a:37:31:33:3e:85:d5:
49:81:af:ab:6b:ae:96:a8:ff:fa:14:74:f0:4c:0a:
14:d5:8d:d9:11:2e:17:fb:f2:d5:73:09:5e:80:a4:
c7:85:7a:a2:b7:46:05:6b:cd:c6:f8:58:1a:da:05:
b5:ea:36:87:f9:99:b1:45:08:54:17:aa:84:28:3a:
85:a5:00:a0:14:77:5d:c0:72:23:4c:74:6f:a4:1d:
f5:90:fa:16:96:db:65:bc:ae:dc:a5:9c:29:86:fc:
f7:74:97:37:39:76:d5:73:b8:b2:f0:30:0c:93:b2:
53:8e:7d:f2:79:0b:a7:61:a7:fe:88:9f:80:fb:d8:
a5:46:2b:8d:eb:59:bf:df:20:a4:a1:84:fd:04:fc:
87:5a:a0:a3:aa:52:71:b8:f5:09:03:6d:1b:70:73:
3c:78:f5:e7:53:f0:31:b7:28:54:e5:93:75:1e:af:
73:a9:93:13:da:46:60:ba:6b:cd:27:11:51:6e:1f:
bd:27:53:a0:f7:29:92:79:07:6a:68:0e:0b:b4:20:
d5:55:a3:40:33:0d:af:12:e1:ac:65:3a:d4:e6:c4:
fb:ba:7c:7c:9a:5b:47:cb:44:03:6a:77:2b:4c:82:
ed:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7B:F1:E6:A1:F5:8F:60:9E:98:DB:C6:10:92:14:B8:4C:DA:E8:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c6ac8cf-b7ac-3364-81bb-2666168000cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:5b:4e:5d:e0:3a:0b:ca:01:90:e7:8c:63:8a:f8:47:2b:0e:
6f:be:1d:f9:86:0e:b3:17:1c:8e:a0:cb:5d:e2:af:ac:a7:a5:
b8:d8:9a:ac:d1:e2:8e:82:9c:f1:52:cc:59:ab:64:84:04:74:
9b:cf:24:28:15:7c:97:0a:d3:39:ae:8b:1a:ad:59:2b:9c:3a:
91:7e:0a:57:8e:fd:c5:36:fd:f2:fa:51:47:26:b8:d4:75:34:
8d:3c:4d:f2:57:d2:d3:2f:88:3c:c4:04:d7:2e:25:c6:85:b4:
96:94:2e:58:e7:12:13:bb:82:83:d8:da:32:97:d5:0b:01:50:
fc:e0:5e:11:1c:ce:be:93:84:da:05:69:43:ab:d6:b9:9c:45:
24:e4:27:61:e6:11:97:59:c7:27:16:ad:a0:da:63:5d:ad:40:
90:23:09:78:bb:8b:ec:66:cb:81:a9:22:73:05:15:57:b8:32:
ad:4b:41:37:b5:35:cd:68:77:16:9f:13:ae:9c:db:4c:24:7f:
f7:ce:9e:bb:cd:f2:e8:69:12:09:74:41:da:d6:2f:fa:67:4f:
11:e6:aa:c8:8d:bb:3a:5b:43:0d:28:12:20:8f:0e:db:e3:dc:
42:29:d3:90:32:66:f3:c3:ed:0e:3d:43:95:ec:60:85:53:f8:
ad:17:fc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 06:09:55 2026 by rpki-client