
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42994a69-182c-326f-b80c-adb381440cc9.roa
File: 42994a69-182c-326f-b80c-adb381440cc9.roa (raw, json)
Hash identifier: mTbYRKyk9OLm8RRkcLV/YtNe/m4hoox2+Pc6vmJWhe4=
Subject key identifier: 7C:9E:5B:18:14:F5:AA:FD:35:15:8D:82:C5:2C:F7:4B:5A:87:4C:F6
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EF44CB8BAED5018F1035DBB80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42994a69-182c-326f-b80c-adb381440cc9.roa
Signing time: Tue 25 Aug 2026 13:00:12 +0000
ROA not before: Tue 25 Aug 2026 13:00:12 +0000
ROA not after: Mon 23 Nov 2026 14:00:12 +0000
asID: 13335
IP address blocks: 172.70.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f4:4c:b8:ba:ed:50:18:f1:03:5d:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 25 13:00:12 2026 GMT
Not After : Nov 23 14:00:12 2026 GMT
Subject: CN=d3e4891d-ce7c-4be2-9184-e910a1dc701a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:1b:68:96:47:5a:29:76:d9:63:8b:87:f4:
49:b6:4f:0c:c9:2b:e0:93:cf:87:ab:04:9b:80:77:
50:42:35:d0:18:19:8c:ce:52:d5:93:39:e8:22:77:
6a:c8:99:77:89:a9:72:91:98:75:4e:c0:66:da:ab:
47:46:97:6e:e4:c1:8f:ab:c4:c2:d6:e2:47:af:c8:
fa:3b:b1:40:f7:11:2f:fc:63:2f:1f:5d:46:5a:6a:
39:13:60:22:f5:d0:aa:a7:be:e6:50:d4:89:17:11:
0c:87:78:53:b3:e8:fa:47:81:e6:ba:20:c3:d3:9f:
84:36:fe:f4:df:4c:72:71:84:68:77:60:b1:61:13:
72:12:58:ab:a1:5a:80:3f:e0:5a:e5:9d:08:a3:b9:
c6:0e:2d:d3:bf:3f:b5:10:5d:83:e7:fb:7b:5c:b0:
27:00:9e:55:87:e5:c5:c9:87:bc:4e:a8:be:c4:ff:
39:0b:1b:6f:b7:4b:41:d6:25:fb:91:cb:b3:e0:89:
ac:ca:33:e2:e4:f7:a0:3d:d0:16:0a:72:e0:e4:b4:
52:c5:6d:2f:37:c0:d5:54:4d:82:58:10:12:62:f2:
ab:35:10:aa:f4:84:1f:27:bb:fa:14:a3:5e:37:2b:
1c:1b:3f:3c:d2:c5:aa:e6:84:42:51:c0:81:11:e2:
b5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9E:5B:18:14:F5:AA:FD:35:15:8D:82:C5:2C:F7:4B:5A:87:4C:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42994a69-182c-326f-b80c-adb381440cc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:f1:7f:25:7d:2e:12:d4:32:7a:3b:a2:75:67:22:81:ae:c2:
9c:0a:6f:bc:eb:90:9b:d2:53:7c:c2:4a:df:59:5c:38:58:80:
90:04:0a:d9:83:90:e6:3b:5a:75:b0:92:0a:63:ee:0c:2c:e8:
77:b2:73:79:79:23:a8:e2:d1:89:32:fd:29:49:73:71:e1:1b:
1e:19:47:f8:85:ba:30:d3:59:9c:dc:26:aa:3f:46:f6:a3:10:
9e:b3:41:b9:02:d8:b0:b8:f8:cb:8c:4a:83:17:92:85:2c:0d:
aa:3b:b6:f1:79:54:77:bf:2a:6d:e8:95:78:8f:73:20:9b:d7:
03:00:80:98:61:89:02:eb:15:7c:95:25:45:d8:fb:ad:22:f8:
5b:fe:98:fa:3e:56:be:92:68:18:f0:55:7e:07:f6:cd:13:ec:
fb:6d:16:94:3f:6f:89:c9:d0:dc:5c:1a:33:b1:30:a4:0a:31:
54:9e:76:ef:1a:56:24:19:19:3b:ec:0a:e2:77:fa:32:7b:7c:
50:6e:30:51:db:47:9e:0d:d5:8b:e6:2d:2c:f7:97:cd:15:77:
a2:ff:0c:d3:63:8b:32:b7:af:27:32:29:24:d9:1a:20:93:9e:
8b:9f:97:bb:c0:59:92:37:77:22:55:00:51:a1:2f:d7:26:93:
c7:e4:92:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLi67VAY8QNdu4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk
ZDNlNDg5MWQtY2U3Yy00YmUyLTkxODQtZTkxMGExZGM3MDFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEYbaJZHWil22WOLh/RJtk8MySvgk8+HqwSb
gHdQQjXQGBmMzlLVkznoIndqyJl3ialykZh1TsBm2qtHRpdu5MGPq8TC1uJHr8j6
O7FA9xEv/GMvH11GWmo5E2Ai9dCqp77mUNSJFxEMh3hTs+j6R4HmuiDD05+ENv70
30xycYRod2CxYRNyEliroVqAP+Ba5Z0Io7nGDi3Tvz+1EF2D5/t7XLAnAJ5Vh+XF
yYe8Tqi+xP85Cxtvt0tB1iX7kcuz4ImsyjPi5PegPdAWCnLg5LRSxW0vN8DVVE2C
WBASYvKrNRCq9IQfJ7v6FKNeNyscGz880sWq5oRCUcCBEeK17QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHyeWxgU9ar9NRWNgsUs90tah0z2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDI5OTRhNjktMTgyYy0z
MjZmLWI4MGMtYWRiMzgxNDQwY2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADPxfyV9LhLUMno7onVnIoGuwpwKb7zrkJvSU3zCSt9ZXDhYgJAECtmD
kOY7WnWwkgpj7gws6Heyc3l5I6ji0Yky/SlJc3HhGx4ZR/iFujDTWZzcJqo/Rvaj
EJ6zQbkC2LC4+MuMSoMXkoUsDao7tvF5VHe/Km3olXiPcyCb1wMAgJhhiQLrFXyV
JUXY+60i+Fv+mPo+Vr6SaBjwVX4H9s0T7PttFpQ/b4nJ0NxcGjOxMKQKMVSedu8a
ViQZGTvsCuJ3+jJ7fFBuMFHbR54N1YvmLSz3l80Vd6L/DNNjizK3rycyKSTZGiCT
noufl7vAWZI3dyJVAFGhL9cmk8fkkoM=
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:25:22 2026 by rpki-client