
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ff06541-3068-32ab-8810-f331d453858b.roa
File: 9ff06541-3068-32ab-8810-f331d453858b.roa (raw, json)
Hash identifier: ElGWKaaJB1BldWq4Fkp/pp4Rnfu8wo/lnXGNB2URyUg=
Subject key identifier: 9C:97:EE:99:3D:22:42:44:96:0C:65:29:F6:A7:73:0B:C5:7C:1A:BB
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E51E9EBB805E2B809A966BDC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ff06541-3068-32ab-8810-f331d453858b.roa
Signing time: Sun 28 Jun 2026 09:00:11 +0000
ROA not before: Sun 28 Jun 2026 09:00:11 +0000
ROA not after: Sat 26 Sep 2026 09:00:11 +0000
asID: 13335
IP address blocks: 172.70.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:51:e9:eb:b8:05:e2:b8:09:a9:66:bd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 28 09:00:11 2026 GMT
Not After : Sep 26 09:00:11 2026 GMT
Subject: CN=0d7fe8fc-1562-470c-a871-1343e345c1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:da:db:2f:60:73:6c:ff:fc:4b:8a:07:10:31:
9b:3f:68:ab:d8:3a:38:b8:45:1f:43:15:4a:39:fb:
2e:c7:6f:6b:79:f5:0d:d2:3d:c6:ad:c6:93:7a:84:
7e:9c:83:5f:87:7b:55:68:ae:02:e2:68:54:a4:ac:
35:f1:7c:26:11:1d:1e:b0:8f:ed:70:f5:c9:88:41:
a4:c9:a2:77:31:de:86:df:fd:b5:36:66:a4:06:dd:
10:3e:d7:87:77:82:f6:46:46:ba:45:7e:e0:39:b9:
19:5f:67:01:ff:5b:30:c5:83:69:58:7f:b0:fc:71:
45:fd:c9:69:d4:3d:14:ae:49:d3:e7:bd:cf:1f:97:
52:72:71:2f:c8:ec:50:59:ff:aa:1f:4d:07:84:09:
2b:d1:1d:70:3a:0f:08:02:29:7e:3a:2d:23:21:b4:
7b:97:4e:f4:04:bd:cd:f7:ea:84:a2:24:df:45:ec:
01:13:87:83:29:7a:20:1b:aa:1e:a6:5d:eb:17:39:
dd:48:ef:10:a1:4d:0b:a7:a6:59:8b:17:d1:8d:af:
4e:ee:bd:fa:ca:81:4b:2b:0f:4c:be:45:61:32:0f:
00:e2:e6:2b:89:b1:4f:a8:c4:fb:57:e2:44:0b:e5:
8a:ca:46:19:df:34:c5:1b:77:87:66:58:85:f8:27:
d1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:97:EE:99:3D:22:42:44:96:0C:65:29:F6:A7:73:0B:C5:7C:1A:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ff06541-3068-32ab-8810-f331d453858b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:8c:f6:a4:75:c7:88:e9:43:b6:e3:7a:e8:51:46:a5:74:ae:
43:0a:e9:36:74:d3:22:00:4c:2d:8a:52:29:e6:e6:39:31:6e:
6a:b8:95:9f:68:e8:8f:b4:b6:c9:5f:cd:b2:d4:c2:93:8b:fd:
e6:b9:db:3c:5e:9d:0c:ff:46:40:13:5e:d1:c2:44:25:db:0f:
6a:93:9d:af:6a:72:5e:c7:fc:1d:b8:3c:a8:3b:54:03:f5:48:
31:87:9a:22:3f:bc:37:c0:bc:e9:45:c1:0e:8e:e1:1a:36:ec:
8f:98:60:a9:9b:71:68:38:70:10:45:e8:72:c7:86:8a:4d:36:
65:21:af:44:8a:69:8c:d8:1b:63:ff:9c:14:c1:6f:92:dd:9c:
59:94:dc:90:78:e8:a3:99:5a:28:d2:2c:b1:66:01:12:b0:ab:
06:fe:cc:b5:a7:4a:00:07:03:16:73:d1:86:98:4c:6e:30:a7:
5c:62:d5:5f:db:62:a6:8d:31:10:08:65:d6:04:48:be:72:c9:
7f:31:2b:9d:11:24:d6:ca:0c:f4:ff:f4:77:bb:5c:7b:05:3b:
af:35:7a:f9:17:cf:db:5f:bb:5c:55:07:7b:18:11:ed:4b:a6:
82:d0:27:81:b2:0e:3c:d5:18:2f:96:7d:f1:c1:c0:45:ed:28:
0b:aa:79:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:58:57 2026 by rpki-client