
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/26fba228-0b5b-3ee8-90c9-3e66895a71cb.roa
File: 26fba228-0b5b-3ee8-90c9-3e66895a71cb.roa (raw, json)
Hash identifier: PgrUmaw66EOatsPmeKwA5d93HEJh7C74CjBcL4zyj24=
Subject key identifier: 47:81:C0:85:3D:56:25:9C:33:8C:EF:03:81:E6:47:92:78:64:38:B1
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BB02D0B373F5CA9B411A86D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/26fba228-0b5b-3ee8-90c9-3e66895a71cb.roa
Signing time: Thu 30 Oct 2025 01:00:30 +0000
ROA not before: Thu 30 Oct 2025 01:00:30 +0000
ROA not after: Wed 28 Jan 2026 02:00:30 +0000
asID: 13335
IP address blocks: 172.71.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b0:2d:0b:37:3f:5c:a9:b4:11:a8:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 30 01:00:30 2025 GMT
Not After : Jan 28 02:00:30 2026 GMT
Subject: CN=0485dd7b-865a-4d8b-ac3c-3fbf0e9127b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7f:b5:36:a1:77:ca:58:e2:df:9c:a7:47:fe:
66:a6:8d:40:f5:34:16:6b:05:d2:bf:c1:3d:0b:6a:
47:b1:b0:e9:60:09:68:ae:ad:fe:59:da:b4:b4:62:
44:c5:3f:4d:ea:35:50:0d:3c:67:6f:9d:6b:54:3a:
67:51:fd:59:7b:c7:8c:da:f4:9d:d5:71:47:5f:0e:
f8:7d:b9:13:9b:39:5e:8b:6d:1c:86:a8:84:83:c2:
61:75:8e:ff:57:94:50:8f:4e:bf:4f:c4:63:2e:e7:
07:0c:85:05:bf:e1:4a:d3:17:5d:06:c1:28:95:af:
22:42:94:13:54:08:94:75:be:3b:e2:e5:5f:98:bd:
14:e7:a3:0c:62:b0:aa:14:95:80:a5:aa:4d:8e:ca:
79:1c:ee:b1:f5:5b:de:24:50:55:85:db:b1:2e:e4:
c4:7f:49:b0:36:72:e0:36:d8:1e:26:95:28:aa:28:
6c:a6:f7:d7:c3:01:21:a9:91:ca:ce:30:0f:c3:80:
52:0c:b3:39:68:2d:e6:d2:35:74:68:cf:75:41:52:
07:0d:17:83:15:d8:c0:4f:3b:57:a9:e9:82:85:b9:
64:b0:9c:b2:6a:fb:62:1d:39:67:f2:03:13:0c:3a:
09:b4:58:18:b3:0e:06:f9:d8:47:7e:e4:9b:fa:b0:
2b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:81:C0:85:3D:56:25:9C:33:8C:EF:03:81:E6:47:92:78:64:38:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/26fba228-0b5b-3ee8-90c9-3e66895a71cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:9d:08:20:b2:d1:46:bf:a5:cf:61:6b:1e:81:d0:62:17:e9:
c2:89:45:dd:62:56:e8:98:17:05:7e:d9:a6:16:c7:a7:fc:6f:
4e:76:45:16:3a:59:ce:16:72:f3:ab:22:93:4a:5d:29:f0:f6:
ea:76:93:70:b9:80:e0:a2:8f:a9:65:ec:67:f4:65:87:c3:43:
b4:c5:c3:1d:e3:13:9c:93:c3:29:d3:bc:17:0d:fd:7e:23:6d:
d9:5b:2a:0b:65:8c:e3:41:af:b5:f9:a4:60:fe:6a:f4:62:d1:
e9:38:13:bf:51:c7:42:38:da:3e:3a:b8:17:87:38:96:a8:dd:
5b:45:06:89:ff:f7:b8:0f:71:52:99:d6:bc:94:9b:8c:40:08:
51:c6:76:e6:1e:f0:71:55:64:28:d7:ed:99:f8:d5:45:59:7c:
78:b2:82:32:34:5c:73:23:25:23:d4:27:de:be:ee:50:04:9c:
be:f5:c5:a4:73:87:76:f7:be:70:40:c8:5c:ae:75:fb:e9:af:
a5:ab:49:e0:f5:f6:c9:97:f8:58:3c:e8:70:87:7c:71:4b:d5:
46:1a:b4:36:76:73:3e:b6:58:01:de:1f:eb:d3:83:2f:36:41:
eb:bf:2d:df:18:11:7c:2a:50:5d:1f:77:43:7b:1e:fe:40:b3:
ff:3f:e7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:32:29 2025 by rpki-client