
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6e36c325-7741-3e9e-aea6-f64e9bd2fe55.roa
File: 6e36c325-7741-3e9e-aea6-f64e9bd2fe55.roa (raw, json)
Hash identifier: LEG5iaWbroEzALWnT+OoB0TTTSHy7MXojXqT82w038U=
Subject key identifier: A3:EA:BA:70:D5:E2:C9:47:59:44:14:5D:D4:7A:E6:51:A8:62:05:98
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BA7CCFB4B047E5FD1968D27C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6e36c325-7741-3e9e-aea6-f64e9bd2fe55.roa
Signing time: Mon 27 Oct 2025 01:00:31 +0000
ROA not before: Mon 27 Oct 2025 01:00:31 +0000
ROA not after: Sun 25 Jan 2026 02:00:31 +0000
asID: 13335
IP address blocks: 172.68.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a7:cc:fb:4b:04:7e:5f:d1:96:8d:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 27 01:00:31 2025 GMT
Not After : Jan 25 02:00:31 2026 GMT
Subject: CN=fbfd379a-96cf-4058-b7cb-31ff29fdb9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0d:04:dd:7f:64:73:a3:01:1b:05:e6:30:1b:
24:73:00:b2:19:35:31:e0:24:e7:ba:7c:5f:eb:b7:
ec:99:90:6b:3c:a9:1d:32:c7:18:ff:bf:0e:1d:01:
be:1c:de:10:3f:dc:ad:7b:8f:b9:04:b0:81:82:4b:
71:2f:1b:40:4a:7c:df:24:05:19:02:ff:a4:4d:1f:
d7:63:7e:67:0f:01:b2:21:30:2d:59:db:88:91:0a:
8a:73:7b:c6:8f:f4:25:55:df:bf:92:05:0b:3a:27:
e1:a3:9f:63:5a:58:aa:74:23:26:1d:69:69:26:39:
48:00:ce:c2:e1:cd:a1:e6:58:d0:93:0d:18:e9:ea:
33:68:80:be:a6:1d:1a:e1:72:a2:0d:ea:3f:fe:2a:
7c:73:7a:b9:50:83:ed:11:53:41:30:76:17:a1:1e:
9e:d8:d8:87:e4:c7:af:fc:b0:87:3f:c6:67:1d:89:
e9:2f:38:96:83:30:1d:ce:ae:fd:99:be:d7:42:eb:
49:d7:c2:9f:39:65:6e:60:bf:cb:d4:ac:95:2a:57:
0c:2b:d8:a7:cf:69:8b:77:a3:95:b9:88:c4:1a:26:
0e:ca:ca:69:40:5d:39:3d:54:b6:80:5e:a6:9c:e2:
78:dd:d0:3a:e6:ea:2a:fa:da:5a:47:04:a0:f6:21:
c7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EA:BA:70:D5:E2:C9:47:59:44:14:5D:D4:7A:E6:51:A8:62:05:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6e36c325-7741-3e9e-aea6-f64e9bd2fe55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:c3:d1:c6:80:c5:b6:2d:93:11:e6:f3:f7:81:26:b1:f6:b2:
33:a4:cc:20:8f:01:48:e3:8e:a1:53:e9:d4:83:f5:8e:a0:53:
bc:d7:1e:58:41:ea:a3:83:76:a3:58:05:0d:a0:d5:c7:03:ab:
94:8e:ef:b5:ad:73:3b:d8:b2:27:51:6a:10:15:ac:da:53:bb:
88:be:6f:01:ed:3e:95:36:19:07:f9:d4:6d:da:73:ac:f9:47:
07:e3:80:d1:e4:ba:9f:9c:50:5e:66:bf:30:b0:2e:9a:49:4b:
ee:41:fb:a2:0e:a2:a8:77:27:ed:d1:5b:9d:5b:e0:05:f2:bd:
59:61:9e:59:dc:5c:fc:38:1c:b7:b2:d5:bf:c5:bf:09:a1:e7:
ac:ce:8a:bd:3d:42:7e:0e:64:2b:e3:2a:20:75:29:8a:5d:18:
ba:52:e5:56:f3:37:b5:fc:d4:8d:2b:40:4e:9b:b5:15:a2:b2:
d0:42:61:67:d7:2b:4e:c1:12:7f:85:42:e8:3e:11:b6:b5:cc:
5a:48:f0:65:50:9c:eb:38:81:0f:da:b8:4a:dc:14:87:d9:7e:
3c:da:68:fb:c8:a7:e3:f2:da:7a:1c:6d:ce:40:6b:87:96:67:
fb:56:73:a5:9d:0e:6d:48:bc:13:cd:f9:05:27:a2:5c:69:83:
16:fb:00:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 04:24:25 2025 by rpki-client