
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/87ba178f-091e-37a1-a31f-70168bb2a2b6.roa
File: 87ba178f-091e-37a1-a31f-70168bb2a2b6.roa (raw, json)
Hash identifier: 5n9cl770E5znYNvHhDgfHJ5Sn2o/UgpV5v+8gRLSbEo=
Subject key identifier: D4:19:77:CE:0F:95:D5:5E:EE:2B:25:46:41:04:52:DF:10:52:AB:33
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EED522D797B6921034E9D7F80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/87ba178f-091e-37a1-a31f-70168bb2a2b6.roa
Signing time: Sun 23 Aug 2026 01:00:12 +0000
ROA not before: Sun 23 Aug 2026 01:00:12 +0000
ROA not after: Sat 21 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 172.68.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ed:52:2d:79:7b:69:21:03:4e:9d:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 23 01:00:12 2026 GMT
Not After : Nov 21 02:00:12 2026 GMT
Subject: CN=119bb978-6cd2-4460-b04f-8d6973800070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:7c:13:b4:c1:19:4d:e3:af:fa:19:d7:98:
21:f8:e3:f1:fa:b4:8d:5e:f7:fe:fe:d3:40:cc:43:
b7:10:8a:f1:90:dd:35:dc:fe:2f:07:ae:84:eb:01:
c1:a5:a4:b3:d4:3a:b7:17:c2:60:bf:35:3d:72:b3:
c8:1e:3b:9a:f1:56:fb:a6:38:8b:92:e5:3d:1b:b9:
6b:70:d2:f0:8f:29:65:b9:50:0b:1a:a8:43:52:fc:
aa:cb:a8:ff:e1:b2:02:56:e6:f4:5f:ee:6c:0f:70:
85:2b:2c:9e:6d:14:32:a0:3c:5c:51:0b:af:5b:c2:
ef:9e:de:b4:aa:c9:f2:53:62:c0:78:a3:19:30:6d:
70:75:c3:2c:b6:86:f6:ed:9c:61:45:e5:bc:80:bc:
18:e0:4d:08:b6:8e:3d:21:01:56:24:51:0f:97:e4:
9e:31:27:e1:a1:51:13:cf:13:cd:b1:aa:54:52:c8:
3c:86:6c:ee:e6:df:62:4a:fc:f8:f9:36:58:67:9b:
34:de:fa:73:94:d7:44:ea:9b:cc:9e:c9:98:70:30:
9d:97:a5:0b:d1:82:0d:fa:6d:3d:2d:e4:5b:9b:83:
68:5e:6e:1a:d7:1f:69:5a:f8:b6:7a:c3:4b:24:a6:
be:01:57:5f:9e:40:20:a9:2a:ea:10:08:b3:8d:ed:
c6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:19:77:CE:0F:95:D5:5E:EE:2B:25:46:41:04:52:DF:10:52:AB:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/87ba178f-091e-37a1-a31f-70168bb2a2b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:a0:7a:f8:b0:78:31:1c:f7:3d:b9:3b:1a:ea:6a:e2:ce:d3:
62:d5:67:4f:0c:60:4a:da:74:95:0f:c4:18:17:aa:df:8f:ab:
4f:00:bd:00:b8:00:b5:cf:70:14:4a:f4:8d:61:41:25:5a:70:
bf:cf:12:b0:52:9c:51:69:17:7a:29:64:92:10:ad:1e:7e:3c:
2b:07:85:fc:d2:e4:64:6c:66:1b:5a:d4:3e:66:24:5c:81:41:
fc:8f:d9:45:2b:cd:4a:4d:09:be:90:ff:27:aa:9d:d0:eb:ca:
9e:3d:1a:22:ae:f1:9d:44:42:45:eb:95:02:72:76:b9:58:a9:
d4:88:65:65:ac:0d:d6:48:1c:e7:8a:45:59:5c:78:5a:49:12:
c7:98:37:01:9e:6b:3c:5e:1a:b2:01:39:a0:ed:53:ee:3d:cf:
9e:6c:26:50:2a:87:49:a1:f2:91:0c:2c:2e:11:c4:58:60:e6:
a5:11:79:bb:57:4f:3a:39:21:9d:16:4f:e9:ea:5c:7f:f7:7a:
02:44:0f:71:97:1a:8f:98:2d:85:48:4d:d1:6e:53:74:a4:c9:
f2:75:44:01:b2:ac:70:04:f6:c1:ad:1c:cd:52:a8:9f:72:a8:
39:31:43:3b:8b:6c:e7:4f:ab:0c:3d:c7:64:1d:d4:b2:fd:da:
99:e0:9f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:15:53 2026 by rpki-client