
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9853000f-d426-3c79-899d-48096c97a485.roa
File: 9853000f-d426-3c79-899d-48096c97a485.roa (raw, json)
Hash identifier: iFNnb19l5x64SXq1q+0q8HtsMQYtYtgaUbxWKDJm/k0=
Subject key identifier: 8C:04:EE:86:CB:A7:53:AD:F9:CC:C6:EB:73:4A:ED:CD:30:F5:AA:A9
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584F49749116EFA2E65459FAB9C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9853000f-d426-3c79-899d-48096c97a485.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 13335
IP address blocks: 172.68.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:91:16:ef:a2:e6:54:59:fa:b9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=c93594b4-026b-4b89-b938-447af75a3430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:29:dc:bd:60:dd:18:bc:b2:af:a7:a9:2c:
57:7a:8f:0b:d3:67:c7:b3:c2:eb:d7:c2:a4:b7:3c:
c9:c2:a3:d2:ec:24:b2:cf:a4:6a:1b:ba:c7:26:9b:
4c:c9:8b:a1:6d:27:24:19:11:e9:fb:f5:a1:03:d6:
b0:ad:f9:e5:89:c6:84:ba:bc:1c:39:28:ea:ec:96:
64:0d:b6:57:bf:30:e2:36:9f:3c:dd:c1:93:31:29:
6b:9e:4a:1a:12:4e:e1:0a:a3:36:d8:de:0b:a5:ca:
fc:8c:7d:af:65:37:13:6a:e4:f7:e2:5d:99:a1:a4:
72:a3:b4:b0:a2:c5:fb:7f:4e:34:57:8e:47:82:7a:
72:f2:80:e1:7d:52:56:8b:b5:4f:7e:b7:d9:97:c6:
87:47:f6:a5:a7:b5:79:ae:f0:a0:cc:7b:dd:bc:79:
8c:2d:a6:ae:ee:21:2d:0a:e8:58:ce:c4:af:06:1a:
5c:98:da:98:8e:5a:5f:06:aa:2b:42:8a:29:67:c8:
b9:ea:a2:cc:5e:d0:a0:e6:ad:68:75:14:34:ab:a1:
a9:95:21:d8:e5:65:2e:4f:aa:0c:12:85:ce:58:ac:
f4:14:5c:c4:4b:09:c0:4a:f4:86:70:8f:34:66:54:
36:dc:39:23:bb:81:56:e8:37:94:d8:82:84:ca:a8:
3f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:04:EE:86:CB:A7:53:AD:F9:CC:C6:EB:73:4A:ED:CD:30:F5:AA:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9853000f-d426-3c79-899d-48096c97a485.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:69:f8:1f:b6:54:6b:d5:69:b2:af:ad:a6:8f:50:59:28:e1:
59:e0:c9:4e:59:c5:18:ab:71:aa:7e:bf:36:50:95:b2:5b:ab:
e2:40:44:37:64:c0:b0:e7:c7:53:be:51:24:5a:b3:df:fb:70:
f7:99:6c:98:58:93:bc:a6:b8:60:5c:61:2a:df:16:03:f2:9e:
db:14:03:f9:3d:f8:07:00:bc:bd:ea:53:1e:b9:dc:f5:32:6a:
4d:d1:3b:c1:cd:dd:27:dc:98:2b:4a:c2:66:db:ed:2e:b0:ee:
b5:b0:6b:08:28:71:14:f7:fa:7c:d7:01:a4:a9:93:52:65:0f:
08:ec:c9:99:3e:7b:bb:8a:e2:71:c2:3b:05:3e:89:4b:c5:37:
82:09:00:64:09:2f:a7:be:fa:cf:b9:3f:92:6e:bc:60:91:c0:
46:fe:c6:e3:51:7c:6d:c3:3e:e0:39:65:63:ee:ba:c7:b2:a8:
25:fe:32:10:a8:73:6a:e6:fe:99:a0:18:62:06:b0:a5:9b:bd:
3c:58:9c:61:36:58:98:79:a3:da:3b:12:3a:25:9b:cf:10:82:
78:ea:60:0d:31:99:0c:4f:2d:52:6f:14:81:88:36:c8:ee:ed:
8c:c5:b7:44:84:b4:30:c0:6a:de:36:c2:c7:aa:23:32:ef:43:
69:d9:73:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:21:31 2026 by rpki-client