
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d52f74de-8293-3bb8-be18-b46e51b4b2e7.roa
File: d52f74de-8293-3bb8-be18-b46e51b4b2e7.roa (raw, json)
Hash identifier: eSDzrivnrVNw3IInHAD0Y3KnNySjU5rmCd/flo5a35s=
Subject key identifier: 29:B3:65:74:41:45:0F:96:8F:E2:AD:43:D4:67:15:42:72:BD:33:26
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EF44CBD35780AF61835A1A300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d52f74de-8293-3bb8-be18-b46e51b4b2e7.roa
Signing time: Tue 25 Aug 2026 13:00:12 +0000
ROA not before: Tue 25 Aug 2026 13:00:12 +0000
ROA not after: Mon 23 Nov 2026 14:00:12 +0000
asID: 13335
IP address blocks: 172.71.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f4:4c:bd:35:78:0a:f6:18:35:a1:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 25 13:00:12 2026 GMT
Not After : Nov 23 14:00:12 2026 GMT
Subject: CN=ce5acd49-3afe-47d2-933c-8ef73e2486fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:96:b7:8a:cf:d8:51:17:ba:4d:19:93:fa:
00:57:00:2c:f2:3c:8b:4d:06:0c:1d:c0:e2:09:9f:
e0:e6:3a:e1:2f:84:f1:a2:75:8c:1c:43:55:30:60:
c0:f2:45:7f:ef:a1:c0:4c:a9:30:8f:9a:c6:61:07:
02:75:87:6c:34:71:1e:4d:ba:a7:00:03:00:a5:a5:
82:57:ad:81:83:58:2d:8c:31:c1:db:0d:a2:ed:0c:
61:60:a5:d6:62:5f:bf:e3:7b:b9:d0:bf:28:77:61:
3b:a8:31:1f:8c:3f:31:15:fc:9a:98:55:57:0e:cf:
b1:91:f3:02:8f:22:a1:ef:db:8e:2f:93:1e:26:45:
f4:4c:f8:e6:c6:ee:18:ce:88:33:50:fe:b1:df:cd:
e4:cd:de:ac:55:c8:9e:db:6f:2c:2e:0b:b5:a4:4c:
98:bd:d5:c8:cd:45:31:f4:f3:aa:30:d7:d2:04:ac:
44:c8:03:be:39:ff:da:ac:09:36:b6:96:8b:4f:5b:
21:1c:5b:17:f8:9a:23:19:a6:67:4a:f6:cf:54:5d:
e6:66:9b:55:7e:bb:25:f4:bd:22:c5:0e:ab:c6:26:
47:30:0e:17:5c:91:5c:71:f0:e2:2d:4c:f7:19:26:
7e:78:26:3c:91:3f:f0:1f:55:4a:19:c7:33:3c:95:
bc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B3:65:74:41:45:0F:96:8F:E2:AD:43:D4:67:15:42:72:BD:33:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d52f74de-8293-3bb8-be18-b46e51b4b2e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:d6:50:a6:86:75:3c:f0:aa:e5:1f:9f:db:8f:87:42:ce:55:
5c:34:62:6c:c9:4a:a3:f9:00:52:ad:12:f7:ad:d5:96:23:11:
6a:6e:77:3a:24:36:18:c4:e1:a9:01:7c:02:44:da:49:46:9c:
c5:6e:97:2b:4f:5c:47:18:fb:83:03:b1:d6:30:0d:37:5e:05:
ad:e9:1e:fe:44:a7:11:51:4b:2f:4f:e7:a3:63:9b:f8:1d:6d:
fe:cb:e0:1d:9b:2e:aa:da:8a:c2:2c:34:b8:3f:22:4b:dc:c3:
f4:82:46:a5:01:5c:0d:63:25:88:2e:f6:11:12:d8:e8:9f:8e:
e7:ee:6f:9c:31:42:fb:bb:55:35:97:e4:7c:79:7d:f8:61:83:
e4:08:8f:16:e6:dd:12:c0:07:2a:76:2d:83:d1:df:4a:f1:51:
f6:9a:2b:f9:9d:1d:51:5b:3c:96:22:ab:8c:ad:ad:cf:88:8d:
1d:b8:0d:0e:3a:57:2b:c5:d5:1d:0e:ad:37:28:06:a8:7c:7b:
a5:43:7c:98:7c:33:c9:2c:df:34:86:fa:22:e1:71:63:47:74:
ef:9f:bd:43:dc:74:73:be:db:de:42:5d:60:25:6e:18:aa:a2:
a8:60:80:05:38:35:98:49:ed:e7:e1:4f:43:82:f5:8b:b4:d9:
85:dd:12:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TL01eAr2GDWhowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk
Y2U1YWNkNDktM2FmZS00N2QyLTkzM2MtOGVmNzNlMjQ4NmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusWWt4rP2FEXuk0Zk/oAVwAs8jyLTQYMHcDi
CZ/g5jrhL4TxonWMHENVMGDA8kV/76HATKkwj5rGYQcCdYdsNHEeTbqnAAMApaWC
V62Bg1gtjDHB2w2i7QxhYKXWYl+/43u50L8od2E7qDEfjD8xFfyamFVXDs+xkfMC
jyKh79uOL5MeJkX0TPjmxu4YzogzUP6x383kzd6sVcie228sLgu1pEyYvdXIzUUx
9POqMNfSBKxEyAO+Of/arAk2tpaLT1shHFsX+JojGaZnSvbPVF3mZptVfrsl9L0i
xQ6rxiZHMA4XXJFccfDiLUz3GSZ+eCY8kT/wH1VKGcczPJW8CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCmzZXRBRQ+Wj+KtQ9RnFUJyvTMmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDUyZjc0ZGUtODI5My0z
YmI4LWJlMTgtYjQ2ZTUxYjRiMmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEf8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI7WUKaGdTzwquUfn9uPh0LOVVw0YmzJSqP5AFKtEvet1ZYjEWpudzok
NhjE4akBfAJE2klGnMVulytPXEcY+4MDsdYwDTdeBa3pHv5EpxFRSy9P56Njm/gd
bf7L4B2bLqraisIsNLg/Ikvcw/SCRqUBXA1jJYgu9hES2Oifjufub5wxQvu7VTWX
5Hx5ffhhg+QIjxbm3RLAByp2LYPR30rxUfaaK/mdHVFbPJYiq4ytrc+IjR24DQ46
VyvF1R0OrTcoBqh8e6VDfJh8M8ks3zSG+iLhcWNHdO+fvUPcdHO+295CXWAlbhiq
oqhggAU4NZhJ7efhT0OC9Yu02YXdEoc=
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:11:47 2026 by rpki-client