
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3647078a-4ada-34e7-bb92-aef6698fe92a.roa
File: 3647078a-4ada-34e7-bb92-aef6698fe92a.roa (raw, json)
Hash identifier: SET+O1L9X+U5Q1RSmMAspFw1u7gtFxLbrwI7Bliq3Is=
Subject key identifier: CF:C3:2F:43:84:BC:F5:CD:A7:40:6C:87:82:87:40:B9:ED:8B:09:C6
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EE4233A328F2E36F03ADA5980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3647078a-4ada-34e7-bb92-aef6698fe92a.roa
Signing time: Wed 19 Aug 2026 18:03:48 +0000
ROA not before: Wed 19 Aug 2026 18:03:48 +0000
ROA not after: Sun 04 Jul 2027 04:00:00 +0000
asID: 13335
IP address blocks: 172.69.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e4:23:3a:32:8f:2e:36:f0:3a:da:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 19 18:03:48 2026 GMT
Not After : Jul 4 04:00:00 2027 GMT
Subject: CN=cd401d68-8826-436f-88d1-66e078a31631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:d1:e7:cc:4c:83:d1:ca:ba:79:07:6d:f0:
93:ed:44:20:ca:5c:c0:9a:6b:fe:75:e0:58:1c:48:
18:ec:61:cc:ff:6b:ea:42:8d:b0:ff:31:4e:f7:01:
e6:2b:9b:6b:c4:59:de:fc:40:c4:5a:15:7e:6f:39:
2c:1a:7b:61:e1:9f:35:61:a8:45:ec:86:ae:cd:82:
5b:7d:57:9c:b3:a0:d9:9c:9d:cd:2d:6e:f6:0b:1c:
ad:21:4a:96:73:bc:27:96:29:12:3b:60:c4:cc:25:
ad:de:8e:11:98:05:3c:5e:e5:8b:e0:4e:db:63:77:
dd:0a:cf:24:74:d6:20:ca:b3:80:ae:c7:04:5e:9e:
75:e5:cc:8a:8f:df:b2:68:af:f1:8b:3f:3c:f6:9d:
e5:9d:f5:2e:44:89:d7:f2:12:da:c1:c1:56:f9:46:
09:3b:42:fb:39:03:73:2d:97:92:b3:8c:f8:34:b2:
51:f5:12:95:03:16:32:61:c6:e2:15:af:a0:c4:6d:
1a:1a:13:f2:6b:40:bf:c9:76:1d:e5:2f:9f:ef:bc:
89:f8:2d:43:09:25:98:f6:e1:4e:ed:dc:cb:e5:5c:
c6:cb:ae:2d:54:dc:fa:c3:ab:4d:40:3a:8a:9f:a2:
d8:f4:7d:34:14:5b:b7:f6:33:6e:c5:a7:d9:d6:a4:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C3:2F:43:84:BC:F5:CD:A7:40:6C:87:82:87:40:B9:ED:8B:09:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3647078a-4ada-34e7-bb92-aef6698fe92a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:68:92:fb:78:32:85:39:2a:6b:da:da:ae:63:a8:03:7f:65:
26:db:3f:46:1a:5d:a5:be:35:9f:39:f8:b5:9e:30:2d:6b:18:
03:34:60:7d:dc:3e:98:d2:20:81:06:7a:98:78:04:d3:5b:ad:
f5:f1:3b:69:e5:1d:0b:5f:18:d6:bb:10:e9:66:59:8c:d1:2f:
4d:53:0b:78:a1:70:dd:06:da:6f:3f:c4:71:cc:29:12:f6:4d:
d1:41:1f:ae:93:0d:3e:69:dc:0a:ed:74:79:31:c1:4a:ed:43:
8b:33:07:9c:45:ff:3e:5b:50:71:25:ce:a1:d9:04:8a:50:b5:
3f:1a:ff:0a:d2:12:24:61:05:1d:98:3c:b1:6f:c7:c5:1b:02:
07:b1:40:9e:14:2c:ac:7b:50:34:0b:56:73:b3:e7:64:46:24:
94:e1:4f:fa:6b:c2:48:05:be:d0:3b:93:c3:8c:ed:ff:96:eb:
ed:85:51:9a:46:cf:4d:e4:8f:f6:d8:4e:da:7c:1f:e5:42:72:
66:13:51:71:a3:b8:54:b1:7e:4a:5b:61:5c:f3:41:8a:af:23:
fa:22:10:87:a5:6f:bf:7d:ca:c4:bb:fe:a2:3b:c2:e7:29:f1:
42:16:fe:bd:fd:9b:92:09:65:fd:1b:da:58:b4:14:2e:83:22:
09:33:a4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:15:56 2026 by rpki-client