
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5ddb6587-470f-3121-9e08-5c3c68a7c335.roa
File: 5ddb6587-470f-3121-9e08-5c3c68a7c335.roa (raw, json)
Hash identifier: xAKPruey4a8C0t6s6f6auVK2BsUGLm7zFN6pRn3Zms0=
Subject key identifier: D9:A7:F3:6C:01:FE:05:CD:1D:94:12:9D:9D:45:FD:0F:70:7A:C9:35
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EB6E1B33F8675DD13F80A7200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5ddb6587-470f-3121-9e08-5c3c68a7c335.roa
Signing time: Mon 03 Aug 2026 13:00:12 +0000
ROA not before: Mon 03 Aug 2026 13:00:12 +0000
ROA not after: Sun 01 Nov 2026 14:00:12 +0000
asID: 14789
IP address blocks: 172.69.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b6:e1:b3:3f:86:75:dd:13:f8:0a:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 3 13:00:12 2026 GMT
Not After : Nov 1 14:00:12 2026 GMT
Subject: CN=992e9dcc-1c36-4349-960d-6be4567de509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:98:5e:aa:0d:3d:7a:ee:34:27:c2:01:ad:b7:
d5:71:2d:44:62:33:a8:51:52:a3:74:bb:af:14:15:
cc:a4:a6:5e:9a:31:0f:4f:ef:ea:bf:c2:89:24:d5:
c6:0d:9e:25:11:6f:7f:9a:3f:91:96:d2:5a:51:ed:
59:d0:42:e5:34:25:2b:d8:7c:e9:2a:7a:32:49:89:
fb:8d:30:ec:8b:5b:a0:4d:60:ba:be:43:a2:ff:9d:
6e:88:6c:44:0f:28:f0:36:9c:29:e2:8f:7d:8b:f2:
e3:9d:af:21:19:6e:67:54:a8:0b:ee:76:c6:88:84:
64:e9:cb:ad:e5:60:7b:45:38:52:82:2f:d2:36:d6:
c4:8f:2e:ca:e7:d3:08:6f:a2:ca:ea:60:3b:60:27:
14:81:1a:ab:6c:09:cd:a0:aa:2c:50:5f:b3:a2:0b:
1f:c9:9e:9d:f7:11:f4:53:82:7f:ba:16:d8:77:f7:
f2:1d:15:26:34:d0:51:ff:67:f7:e3:e8:4e:50:5b:
fb:2d:8f:c4:d1:2b:fc:45:ad:c3:f3:97:05:85:e4:
5e:94:ab:be:cf:0e:dd:9d:7d:e9:a1:62:13:ac:5d:
98:a1:c7:d9:84:1a:22:5c:6a:ed:d3:95:07:16:aa:
38:ae:a0:da:36:52:84:e5:1e:a4:7a:df:07:e4:df:
52:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A7:F3:6C:01:FE:05:CD:1D:94:12:9D:9D:45:FD:0F:70:7A:C9:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5ddb6587-470f-3121-9e08-5c3c68a7c335.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:0e:18:17:fc:48:02:e9:fd:38:a2:28:35:23:54:ba:30:1b:
1d:cb:42:09:1b:8b:c8:53:fc:b4:c0:1e:bc:f6:2e:26:97:07:
57:7e:f5:2e:f2:7b:65:5b:44:ef:af:1b:1a:21:5b:94:aa:e3:
25:d8:8f:1a:9c:26:9f:45:da:f9:37:44:b7:8a:f6:7e:22:4d:
47:10:19:66:bd:4a:41:19:d2:29:31:b6:47:8a:75:bd:aa:2a:
88:d6:90:de:aa:98:3a:4b:cc:fb:7d:f0:b9:6c:88:b5:3f:b0:
fb:9c:19:af:e9:b1:68:f1:ba:0f:fa:0b:b5:84:08:2d:d0:16:
96:58:d3:68:b9:17:69:de:69:ff:da:07:14:0c:24:1f:5f:0c:
e5:30:2f:c2:24:b2:87:bb:2b:42:b1:a6:91:e0:dc:42:e1:c7:
5d:df:87:42:b0:fb:7a:d8:d0:e4:be:48:f4:ac:68:ca:8f:7c:
06:0f:4f:95:20:c8:a2:31:07:a0:51:de:40:ad:19:f0:75:b5:
1d:f0:af:9f:46:1e:3f:eb:76:12:b1:b4:55:b3:2d:99:e7:31:
25:7e:b6:e5:b5:fe:4c:60:e6:46:1b:aa:0c:14:13:21:07:25:
00:46:5b:4d:67:81:9a:86:99:ce:79:03:a9:a7:b1:bd:c2:1a:
96:ac:f8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 02:55:14 2026 by rpki-client