
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4703113f-73cd-30db-9904-be9d92a3bb85.roa
File: 4703113f-73cd-30db-9904-be9d92a3bb85.roa (raw, json)
Hash identifier: gKYquemTGJT82PvDf05k+8HKKin07BbcxzfyqnQUWCQ=
Subject key identifier: 32:3F:55:9C:6C:B4:A6:27:E2:D3:57:F6:C1:B7:63:37:93:EB:29:74
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E51E9F7F3384836EBB0D97A00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4703113f-73cd-30db-9904-be9d92a3bb85.roa
Signing time: Sun 28 Jun 2026 09:00:11 +0000
ROA not before: Sun 28 Jun 2026 09:00:11 +0000
ROA not after: Sat 26 Sep 2026 09:00:11 +0000
asID: 13335
IP address blocks: 172.71.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:51:e9:f7:f3:38:48:36:eb:b0:d9:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 28 09:00:11 2026 GMT
Not After : Sep 26 09:00:11 2026 GMT
Subject: CN=7d6dbdbc-db6f-4398-b2a3-43526ae76a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:93:63:be:63:ce:d2:c1:56:94:68:83:7d:
b6:54:ea:fa:5f:7d:01:bb:31:b8:6e:9a:93:0c:93:
73:93:cc:a8:3a:11:dc:a6:8f:8a:e6:e0:66:64:01:
2f:f3:df:f2:36:e9:4a:52:7d:d6:45:a9:0c:fb:9d:
79:24:c9:df:21:0e:fc:ae:7f:69:ce:81:79:77:d4:
eb:19:ec:7e:9c:4e:69:db:fe:01:4e:02:2e:89:fa:
27:04:c6:20:bb:ec:35:c6:a0:1d:87:72:ba:b2:de:
92:0d:6d:ac:88:00:e2:78:98:7c:a4:8f:de:4a:ae:
87:54:d2:31:8b:d1:38:4f:10:e7:be:1c:79:c2:c8:
1f:8c:f6:02:4d:1a:5a:c4:f8:19:88:8b:9b:4c:e7:
1b:89:92:cd:8a:9d:5e:20:c0:cb:52:72:5d:e9:0e:
f6:24:3f:57:0b:97:b0:51:fb:ba:a6:c6:8e:e5:57:
43:4b:f5:cc:ca:da:ae:c2:cb:a3:5b:9c:0b:00:8e:
d3:0a:0a:45:ca:62:fe:37:38:99:e7:4b:d8:34:97:
4b:b0:ba:50:c2:d2:d3:ae:5a:ce:ad:b9:ad:0b:76:
02:80:22:d5:8a:8a:73:5a:07:42:29:08:47:96:2b:
32:c1:c0:fd:35:83:57:06:b5:0e:b5:c4:c9:6c:d3:
79:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3F:55:9C:6C:B4:A6:27:E2:D3:57:F6:C1:B7:63:37:93:EB:29:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4703113f-73cd-30db-9904-be9d92a3bb85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:98:b7:e8:a5:97:5f:a2:00:b6:2d:8f:a8:47:72:e6:63:16:
4a:d6:a4:1a:fd:cf:7b:57:1c:4b:e3:8f:87:4f:0a:74:e7:0a:
57:2a:4c:f5:54:60:59:4e:82:6d:bb:61:84:6e:5a:0d:56:8d:
55:1d:73:80:a0:1a:2f:dd:2f:b6:69:8c:02:82:07:b8:aa:e7:
9b:83:2f:5d:12:fd:07:c5:1f:07:c4:b4:6e:3b:72:08:4d:68:
b0:c6:28:54:e7:8f:78:29:e9:1b:2a:9c:ab:bf:32:1c:50:9e:
8e:42:f2:0b:9d:e6:33:13:a7:ab:f2:49:8e:91:fe:1c:73:71:
c9:c1:50:4a:7e:8f:e7:b7:2b:7e:2a:84:9a:a6:77:05:67:9a:
7a:08:b3:00:ec:0d:81:31:aa:bb:25:d9:6d:12:17:61:20:18:
49:aa:ae:8c:24:10:0a:a1:59:39:b6:22:31:4e:69:3f:25:9f:
fa:dc:2a:70:c3:70:15:9d:36:b2:b9:5a:ba:a3:34:01:98:3f:
6a:da:72:75:04:50:18:0d:ef:2c:c9:bb:78:c2:67:e5:10:57:
20:7f:70:12:45:f0:a0:64:4d:13:39:be:8b:15:15:c5:13:35:
28:dc:65:dc:57:6e:7e:ca:7c:6f:86:cf:6e:1c:01:b0:e4:55:
c1:d7:37:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5R6ffzOEg267DZegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDYyODA5MDAxMVoXDTI2MDkyNjA5MDAxMVowLzEtMCsGA1UEAxMk
N2Q2ZGJkYmMtZGI2Zi00Mzk4LWIyYTMtNDM1MjZhZTc2YTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpGTY75jztLBVpRog322VOr6X30BuzG4bpqT
DJNzk8yoOhHcpo+K5uBmZAEv89/yNulKUn3WRakM+515JMnfIQ78rn9pzoF5d9Tr
Gex+nE5p2/4BTgIuifonBMYgu+w1xqAdh3K6st6SDW2siADieJh8pI/eSq6HVNIx
i9E4TxDnvhx5wsgfjPYCTRpaxPgZiIubTOcbiZLNip1eIMDLUnJd6Q72JD9XC5ew
Ufu6psaO5VdDS/XMytquwsujW5wLAI7TCgpFymL+NziZ50vYNJdLsLpQwtLTrlrO
rbmtC3YCgCLViopzWgdCKQhHlisywcD9NYNXBrUOtcTJbNN5MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDI/VZxstKYn4tNX9sG3YzeT6yl0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDcwMzExM2YtNzNjZC0z
MGRiLTk5MDQtYmU5ZDkyYTNiYjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA2Yt+ill1+iALYtj6hHcuZjFkrWpBr9z3tXHEvjj4dPCnTnClcqTPVU
YFlOgm27YYRuWg1WjVUdc4CgGi/dL7ZpjAKCB7iq55uDL10S/QfFHwfEtG47cghN
aLDGKFTnj3gp6RsqnKu/MhxQno5C8gud5jMTp6vySY6R/hxzccnBUEp+j+e3K34q
hJqmdwVnmnoIswDsDYExqrsl2W0SF2EgGEmqrowkEAqhWTm2IjFOaT8ln/rcKnDD
cBWdNrK5WrqjNAGYP2racnUEUBgN7yzJu3jCZ+UQVyB/cBJF8KBkTRM5vosVFcUT
NSjcZdxXbn7KfG+Gz24cAbDkVcHXN/s=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:47:44 2026 by rpki-client