
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd6aa06b-58c1-3898-a006-bb70908ee2b6.roa
File: bd6aa06b-58c1-3898-a006-bb70908ee2b6.roa (raw, json)
Hash identifier: +Aq7kLvkJ4kvFgDiqrAKUOofp1paRMDA0nzs2RBnQn0=
Subject key identifier: F1:DD:B8:A1:4B:D0:D8:AE:E7:A2:3B:DC:3B:05:14:79:95:CF:49:BC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BA9328FFBDCA165BBB74BDB40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd6aa06b-58c1-3898-a006-bb70908ee2b6.roa
Signing time: Mon 27 Oct 2025 13:00:38 +0000
ROA not before: Mon 27 Oct 2025 13:00:38 +0000
ROA not after: Sun 25 Jan 2026 14:00:38 +0000
asID: 13335
IP address blocks: 172.68.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:32:8f:fb:dc:a1:65:bb:b7:4b:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 27 13:00:38 2025 GMT
Not After : Jan 25 14:00:38 2026 GMT
Subject: CN=5d0b55f8-16a7-4a5a-b3bd-9c3daa5cefa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:1f:4e:5c:ca:79:90:4c:c5:64:25:67:b2:
70:04:d9:15:2c:dc:5b:94:c4:2e:21:6b:cb:1b:5a:
08:48:df:8b:4b:ee:ab:5c:34:89:6f:6f:8c:4e:ff:
2d:89:11:a1:39:81:31:4a:5d:94:f8:fc:89:4c:43:
81:40:84:b2:28:42:4b:e8:8f:e4:46:de:35:d3:17:
c5:e5:80:91:28:37:ed:1c:31:c8:eb:06:ec:05:ea:
35:e6:e9:25:98:5a:20:e1:cb:13:b5:d3:78:86:a9:
e1:a5:24:86:f3:5d:c4:c5:2b:43:bd:6c:33:28:a8:
39:50:e5:99:8a:41:c5:32:e9:2a:5c:2e:a8:1f:43:
90:b5:ab:c2:95:a9:09:c8:bc:f9:70:c8:80:28:0c:
f8:e8:8f:7e:21:8a:74:c7:f5:3b:8b:21:27:03:55:
66:97:f3:81:81:e5:10:d5:6e:48:a3:5b:a8:3d:a2:
e6:16:9b:7c:fc:40:13:ce:02:62:c6:98:dc:cf:86:
bb:7f:f8:0c:80:22:43:d0:b0:cb:79:9b:fa:7b:ed:
50:27:10:6d:7e:45:ac:86:37:d0:3a:58:68:a6:c2:
ef:dd:d6:17:c0:46:75:33:8d:82:91:c1:6a:3d:1a:
24:77:c7:92:bd:a9:04:d0:8f:27:da:59:06:62:4a:
77:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DD:B8:A1:4B:D0:D8:AE:E7:A2:3B:DC:3B:05:14:79:95:CF:49:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd6aa06b-58c1-3898-a006-bb70908ee2b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:76:f3:a4:1a:da:f6:df:52:d0:07:5d:6c:10:f2:45:20:b2:
7e:96:16:55:54:99:25:f3:9a:c4:11:f2:e6:2a:a3:7b:72:4f:
28:b9:57:f9:e6:e5:95:26:ae:e2:87:f1:9f:bb:74:af:ea:9c:
be:3d:2b:e1:dd:e1:3c:1f:87:70:e7:7f:b2:6d:2b:98:ea:6a:
b5:c2:ee:b6:34:63:48:68:ed:5c:cd:19:a3:6e:76:3c:f1:bb:
ae:89:c0:6a:e0:a4:1b:07:6f:92:b0:a8:18:61:ea:b0:71:04:
e5:00:ad:11:62:0f:0a:df:76:fd:ef:97:93:83:7c:70:c3:ff:
21:8c:74:ac:20:4e:84:91:fd:c9:a4:93:32:7a:02:c1:2d:c2:
d6:bf:d9:ba:97:23:54:58:72:05:42:c9:35:f2:66:a9:a9:8f:
d5:fc:16:1d:62:ee:63:92:75:fd:b0:4b:03:81:dd:6d:96:fb:
9f:91:07:e4:4c:d4:24:45:b9:8a:12:86:18:cd:3a:4e:94:3a:
b6:0b:8b:93:47:01:81:73:6a:90:6a:56:d3:75:14:4e:37:f2:
92:62:28:f8:8b:80:00:27:0f:1a:44:b0:94:23:79:59:33:58:
5f:f0:fa:b3:14:70:2e:cd:72:eb:a9:ec:b5:7a:9b:27:11:c8:
db:df:77:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 10:01:44 2025 by rpki-client