
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee29fa17-d24a-39ed-a0f8-365701ccaa48.roa
File: ee29fa17-d24a-39ed-a0f8-365701ccaa48.roa (raw, json)
Hash identifier: MoGycPQ7YXkhQeAbXM+xegFrD5tQZW+gm5ClCmRNPek=
Subject key identifier: 7C:51:66:B5:49:06:71:59:48:91:81:5E:92:19:9D:29:C9:5B:65:EC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EF44CB96F78DD7824E284B800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee29fa17-d24a-39ed-a0f8-365701ccaa48.roa
Signing time: Tue 25 Aug 2026 13:00:12 +0000
ROA not before: Tue 25 Aug 2026 13:00:12 +0000
ROA not after: Mon 23 Nov 2026 14:00:12 +0000
asID: 13335
IP address blocks: 172.70.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f4:4c:b9:6f:78:dd:78:24:e2:84:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 25 13:00:12 2026 GMT
Not After : Nov 23 14:00:12 2026 GMT
Subject: CN=df5b31de-ffb7-4334-be81-e0bd0d9877a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:c8:f4:c3:56:5b:dd:bc:c0:f7:3d:3b:44:
30:f9:63:d7:c9:c1:20:7f:4f:52:ca:f6:84:0a:a2:
0e:ff:5b:4e:53:60:74:09:0f:2d:06:b9:59:85:81:
16:5a:af:d7:0a:c9:63:9b:4c:6a:22:b4:00:c7:10:
7e:22:88:d2:69:a1:9b:33:39:93:98:08:a0:70:33:
a2:78:17:ca:80:fd:6b:03:c8:24:3f:f8:fe:9e:f6:
cc:83:52:36:90:e0:fb:25:b8:34:75:bb:3f:33:39:
71:04:b6:4b:ff:9b:2c:30:ec:4a:fc:1c:e4:8e:a6:
ea:f7:42:43:67:70:81:9f:b1:bf:75:79:08:fa:fd:
87:e0:95:ce:4f:77:2d:4e:da:68:83:76:35:b6:77:
2d:b5:91:84:d6:4d:0d:be:c6:c1:11:b2:4f:54:4e:
d4:86:cd:a3:65:d6:e3:12:20:4f:80:ef:a9:e3:8b:
ca:dd:c8:1a:42:da:59:9c:e6:12:90:d9:fc:26:9f:
e9:23:b4:61:7c:21:b4:8b:8f:bf:c6:21:c7:e8:80:
03:e3:6e:e2:39:91:eb:7a:55:60:51:38:10:ee:8a:
f0:58:d5:9f:3c:11:b5:ee:d1:d9:dd:c0:a7:f7:08:
f3:9b:4a:7c:76:0f:72:6c:86:de:f0:82:a5:08:29:
d6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:51:66:B5:49:06:71:59:48:91:81:5E:92:19:9D:29:C9:5B:65:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee29fa17-d24a-39ed-a0f8-365701ccaa48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:74:ab:60:e3:e7:af:cb:c7:99:68:ea:e6:04:1f:b5:c7:43:
91:a2:49:1c:a5:44:c3:14:6b:49:f7:94:fd:75:ab:c3:2a:a2:
f6:83:d0:2a:cd:3a:6a:08:71:96:d3:3f:6d:17:9f:86:1d:56:
a1:86:6b:3c:ca:85:35:ba:0d:ea:96:39:98:61:57:23:0d:f4:
7e:47:d4:ee:5a:43:76:bd:45:97:3d:25:5e:05:54:2c:0d:5f:
a3:0a:25:f6:82:88:e3:6b:13:37:01:15:9d:bd:ac:fd:e6:f1:
41:f3:80:dd:1f:e2:cd:cc:3a:a8:60:69:20:91:95:27:aa:ca:
cf:ec:df:67:1b:8e:00:26:56:66:e3:09:f9:3e:cb:08:03:33:
cc:20:fe:7a:33:7d:f2:ba:86:ed:76:db:1a:11:83:26:67:b4:
b1:1d:e8:77:88:85:6f:1e:be:46:f6:2d:34:66:83:56:cc:f8:
b3:64:89:98:db:90:55:71:40:98:88:d4:e7:af:56:60:5e:29:
00:3b:96:13:01:5a:7f:6f:b8:5e:7c:c1:6e:90:22:57:5c:e9:
fc:fc:c9:da:dd:23:1e:b8:2f:f4:85:1c:c3:17:f5:1c:0e:6d:
5b:fb:91:aa:fa:63:7f:3a:9e:46:e3:cf:13:e4:c2:fd:7f:b6:
df:c4:03:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLlveN14JOKEuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk
ZGY1YjMxZGUtZmZiNy00MzM0LWJlODEtZTBiZDBkOTg3N2ExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovPI9MNWW928wPc9O0Qw+WPXycEgf09SyvaE
CqIO/1tOU2B0CQ8tBrlZhYEWWq/XCsljm0xqIrQAxxB+IojSaaGbMzmTmAigcDOi
eBfKgP1rA8gkP/j+nvbMg1I2kOD7Jbg0dbs/MzlxBLZL/5ssMOxK/Bzkjqbq90JD
Z3CBn7G/dXkI+v2H4JXOT3ctTtpog3Y1tncttZGE1k0NvsbBEbJPVE7Uhs2jZdbj
EiBPgO+p44vK3cgaQtpZnOYSkNn8Jp/pI7RhfCG0i4+/xiHH6IAD427iOZHrelVg
UTgQ7orwWNWfPBG17tHZ3cCn9wjzm0p8dg9ybIbe8IKlCCnWHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHxRZrVJBnFZSJGBXpIZnSnJW2XsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWUyOWZhMTctZDI0YS0z
OWVkLWEwZjgtMzY1NzAxY2NhYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEb0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABJ0q2Dj56/Lx5lo6uYEH7XHQ5GiSRylRMMUa0n3lP11q8MqovaD0CrN
OmoIcZbTP20Xn4YdVqGGazzKhTW6DeqWOZhhVyMN9H5H1O5aQ3a9RZc9JV4FVCwN
X6MKJfaCiONrEzcBFZ29rP3m8UHzgN0f4s3MOqhgaSCRlSeqys/s32cbjgAmVmbj
Cfk+ywgDM8wg/nozffK6hu122xoRgyZntLEd6HeIhW8evkb2LTRmg1bM+LNkiZjb
kFVxQJiI1OevVmBeKQA7lhMBWn9vuF58wW6QIldc6fz8ydrdIx64L/SFHMMX9RwO
bVv7kar6Y386nkbjzxPkwv1/tt/EAyQ=
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:57:11 2026 by rpki-client