
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84b21014-599c-378f-93b0-1228f9e8bd77.roa
File: 84b21014-599c-378f-93b0-1228f9e8bd77.roa (raw, json)
Hash identifier: JenlwqgSE9jsyyRGHsjxs1ZoBCv6sPyGEWhmB8iS4VA=
Subject key identifier: 70:65:D4:0A:1F:93:CD:51:96:EA:F0:2E:6C:4A:1A:E0:E6:5E:AD:A2
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EED522D352A9FFE922E549230
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84b21014-599c-378f-93b0-1228f9e8bd77.roa
Signing time: Sun 23 Aug 2026 01:00:12 +0000
ROA not before: Sun 23 Aug 2026 01:00:12 +0000
ROA not after: Sat 21 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 172.68.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ed:52:2d:35:2a:9f:fe:92:2e:54:92:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 23 01:00:12 2026 GMT
Not After : Nov 21 02:00:12 2026 GMT
Subject: CN=162de55d-b043-4a87-ad25-b54f318935a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:f5:0b:20:ef:00:68:f5:9e:01:dd:59:9f:
fe:36:5b:06:ae:2f:27:c3:48:cb:82:db:fa:5b:39:
ce:77:4f:2b:88:60:48:e3:9d:ea:fe:da:87:76:36:
cd:fc:ec:fb:f6:2e:ef:e4:93:7f:5f:a9:8c:e3:ca:
c3:0b:be:3e:53:02:96:60:85:3f:ff:c4:0b:0f:28:
43:ce:ed:05:ba:35:0a:4b:b5:f3:de:ab:e4:92:35:
40:21:5f:f6:67:eb:e8:b5:40:ce:ad:17:48:14:d4:
88:f1:2f:7b:50:50:f5:31:5c:95:66:3f:dc:11:8c:
d7:f2:16:79:52:a5:e5:c9:77:aa:bf:39:50:7e:1f:
95:8b:d3:2f:54:8d:01:fa:bf:d7:54:a5:97:86:1a:
45:00:90:76:de:bb:6c:2e:24:3e:7c:a0:00:0e:98:
10:11:a7:49:59:05:d8:cc:28:69:d3:6d:fc:d0:cb:
83:9f:a4:71:61:8f:63:30:c9:68:82:de:f8:3c:2b:
d8:e0:a7:94:21:77:30:34:0f:e4:bf:83:c7:1f:96:
02:61:78:8c:19:45:a3:d7:fd:ea:0b:9c:2c:ed:d8:
b2:88:87:79:13:f4:08:03:9d:49:69:03:20:e5:cf:
d8:80:dd:18:7e:f5:a0:54:f1:13:84:f4:2e:d8:08:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:65:D4:0A:1F:93:CD:51:96:EA:F0:2E:6C:4A:1A:E0:E6:5E:AD:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84b21014-599c-378f-93b0-1228f9e8bd77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:bf:50:81:5d:68:cd:92:45:41:9b:e3:7e:32:d4:5c:82:e9:
4a:35:9d:8d:33:14:78:b2:d2:db:44:f4:c2:97:72:6f:87:13:
b1:02:6a:bb:bd:eb:60:8f:1a:3c:8c:c7:97:ac:9a:77:3b:da:
e3:7e:b6:eb:81:76:e5:22:b9:c2:77:c5:a0:98:04:ad:e9:27:
a2:5e:a0:16:5c:ff:0e:39:de:2c:c8:4b:34:c0:da:4f:24:3f:
f7:97:60:38:5c:b1:24:fc:ff:91:88:b3:80:1b:83:e8:43:de:
77:46:8e:b2:f4:23:10:3a:70:27:87:14:b2:4f:2f:b6:7c:96:
66:15:24:8e:9e:59:6f:6e:89:c0:39:21:5a:07:e1:04:1e:20:
03:5d:3b:d1:82:d7:31:4c:a9:74:c7:1c:56:7a:ce:23:e3:d0:
9b:b8:13:ee:2c:af:e0:fa:73:db:d4:39:39:b7:b9:84:0c:44:
cd:7b:c9:26:7c:b8:02:a6:62:89:2b:1f:24:56:d2:0d:c3:41:
72:e6:e6:ae:b3:01:b2:01:f2:f1:b0:3a:43:6b:77:0e:0f:29:
88:4d:98:15:eb:3e:31:27:fe:a8:2a:18:54:5f:9e:b8:46:59:
96:47:e4:2e:b4:82:23:82:1d:d3:e5:1a:87:a1:78:bf:45:aa:
25:fb:59:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:14:30 2026 by rpki-client