
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c12abd29-c7c0-3ea7-b667-e02219ead58b.roa
File: c12abd29-c7c0-3ea7-b667-e02219ead58b.roa (raw, json)
Hash identifier: 4AWEk/dL2wuXQHdBh0RREDwB6kosMYwnKoWpwUxawSs=
Subject key identifier: F9:DC:76:B7:D2:AB:97:A5:50:C0:C9:64:29:D2:F7:33:B8:2B:F5:B6
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EED522C484F3129D1826E7100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c12abd29-c7c0-3ea7-b667-e02219ead58b.roa
Signing time: Sun 23 Aug 2026 01:00:12 +0000
ROA not before: Sun 23 Aug 2026 01:00:12 +0000
ROA not after: Sat 21 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 172.68.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ed:52:2c:48:4f:31:29:d1:82:6e:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 23 01:00:12 2026 GMT
Not After : Nov 21 02:00:12 2026 GMT
Subject: CN=91f7af11-4a91-4408-b6fe-d5f1ab94fd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:6c:e0:5d:6b:80:ce:f5:d5:c4:9b:13:9e:
71:0a:eb:ef:14:b9:df:d4:ce:dd:df:5e:0a:c0:1d:
a3:10:09:b6:2f:48:84:9e:8a:cf:19:f7:71:1f:6f:
f7:45:70:3c:dc:ea:41:c0:dd:58:e8:50:c9:14:c6:
61:48:f8:b4:2f:21:c8:56:f8:16:3b:b4:7f:7b:b4:
13:16:b3:02:75:e4:16:9f:16:fb:4c:4a:f5:e8:10:
04:30:c6:47:3d:4c:9c:18:67:0a:9d:d6:d9:d7:f9:
ac:21:c3:06:80:47:4f:a6:59:5e:82:66:fe:32:55:
63:71:c1:42:53:52:33:e8:26:ec:1e:eb:cd:2a:45:
ce:ed:80:e1:1f:42:a0:52:21:f9:00:f2:84:8f:2d:
24:10:bc:ce:18:82:26:f2:a6:95:81:b7:81:55:db:
aa:31:3c:49:35:3d:7a:19:f4:c3:a9:25:0b:26:78:
51:19:07:49:45:65:de:7a:2e:61:7c:ef:52:8b:21:
6d:eb:7c:bd:15:9a:07:7f:9c:12:6a:46:41:61:41:
99:35:08:d0:56:cc:cb:ec:cf:c1:31:ae:5e:fe:be:
77:b1:1f:4d:9f:9c:79:73:d8:44:79:37:b5:8d:07:
72:38:2b:ea:1f:4f:dc:89:4d:ba:88:f6:f3:49:0a:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DC:76:B7:D2:AB:97:A5:50:C0:C9:64:29:D2:F7:33:B8:2B:F5:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c12abd29-c7c0-3ea7-b667-e02219ead58b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:3a:1d:aa:17:eb:f2:e7:2d:ab:e8:f0:1c:e8:88:d0:f7:8b:
74:a1:af:59:2b:3d:a4:a0:cb:a9:3e:52:a8:f0:93:0a:58:94:
b9:9b:ba:d4:f4:5e:62:4b:f7:17:d6:42:ae:75:d7:b1:d7:c7:
f1:88:c4:af:d7:7c:a3:f6:b3:0d:79:db:5f:ac:ce:a8:d9:44:
01:ca:a8:08:c0:7e:dc:2d:e3:40:43:66:e3:89:ee:1b:2c:6c:
35:0c:cd:f4:2a:50:ac:74:e7:e4:c5:8c:77:bc:80:10:42:91:
b0:33:1c:be:e1:df:be:40:08:07:dd:11:dd:cd:bd:32:58:14:
8c:df:eb:c2:90:f8:d9:06:76:05:eb:20:b5:0e:4b:d3:7b:44:
c0:5a:5c:4c:ee:14:21:9d:8a:a2:2a:48:64:bc:9b:5c:31:75:
a2:12:6b:78:f2:3a:c9:bd:79:a0:8b:ab:4d:f3:e8:69:08:6c:
29:a9:ca:03:7d:6a:00:bb:3f:56:dc:02:fe:df:0d:8c:dc:a5:
57:9a:f8:9a:42:63:2f:26:77:2e:6f:b9:73:bd:61:9c:9d:90:
52:ca:6c:75:ec:33:37:7d:6c:c3:59:93:3e:d9:a2:b5:c7:22:
ec:79:aa:c3:27:ac:85:5f:5f:18:35:14:95:d3:95:80:f2:d4:
60:2f:f8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:43:44 2026 by rpki-client