
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f65ff72b-110e-37c0-b4a1-1e3ebfdf4c24.roa
File: f65ff72b-110e-37c0-b4a1-1e3ebfdf4c24.roa (raw, json)
Hash identifier: 9JNxbaoktyPcDZc3qGqfU4yU/bfGTzq5eDp9UNH7hOI=
Subject key identifier: CB:EA:0D:D2:BE:F3:28:79:EA:EC:4E:17:AF:D7:4C:A5:9E:9A:27:D5
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EED522C0DBFBB180A46226580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f65ff72b-110e-37c0-b4a1-1e3ebfdf4c24.roa
Signing time: Sun 23 Aug 2026 01:00:12 +0000
ROA not before: Sun 23 Aug 2026 01:00:12 +0000
ROA not after: Sat 21 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 172.68.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ed:52:2c:0d:bf:bb:18:0a:46:22:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 23 01:00:12 2026 GMT
Not After : Nov 21 02:00:12 2026 GMT
Subject: CN=54c7b442-a7fb-4c85-80f3-dc77726516fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:39:df:23:38:a9:46:07:27:9f:81:32:9b:59:
40:96:1a:a7:67:b3:9b:2f:39:c4:19:84:d7:1d:25:
f5:24:38:a0:c5:31:5f:e3:98:34:18:ee:41:86:a0:
3e:89:2b:e2:34:d3:fe:eb:ea:e8:bc:eb:e9:88:10:
1d:a5:17:ce:4b:c8:6a:19:4d:de:d1:39:23:6f:b1:
c8:96:01:ea:98:05:f3:02:6f:5b:91:33:c3:2e:ca:
da:db:2f:d6:b7:50:0b:49:18:9f:d7:4d:41:bc:56:
23:56:fe:70:ac:1e:5b:8c:1b:3d:59:2a:38:a0:83:
b2:d1:74:86:66:32:e8:79:ca:6e:62:0a:2f:ef:73:
31:27:2e:3d:de:87:49:c1:85:93:89:02:f1:43:45:
49:e7:d4:01:25:ce:a7:90:cc:8d:46:c7:42:ba:14:
2d:89:08:01:00:c3:cb:55:3a:62:76:1a:67:4b:cc:
82:df:da:97:04:f8:00:6e:56:d3:87:77:34:26:e2:
d4:14:e0:ec:08:8c:e4:9d:75:c5:d9:0b:34:33:57:
d3:e9:c1:63:d1:ae:ae:39:59:bb:39:37:72:8c:5c:
99:b1:9b:3a:60:db:98:85:bb:fd:8b:7c:c7:0f:43:
9a:c1:c1:ca:a4:94:43:96:ce:8f:72:81:98:d0:1c:
60:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EA:0D:D2:BE:F3:28:79:EA:EC:4E:17:AF:D7:4C:A5:9E:9A:27:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f65ff72b-110e-37c0-b4a1-1e3ebfdf4c24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:e1:7e:ac:99:f0:36:6f:91:e2:6a:8d:da:73:15:a5:47:be:
6e:fb:f7:eb:49:d7:4e:70:f1:f6:2e:ac:d1:bc:a8:02:6a:1a:
d2:12:38:7f:3f:39:9d:ef:7f:be:a3:36:5b:4c:95:ec:2a:16:
af:43:76:24:3f:28:33:c1:3c:9f:43:8e:bc:e5:c2:96:a8:b8:
20:61:f9:9f:14:3b:a7:13:64:47:32:f4:df:60:03:29:d6:5d:
d9:35:80:24:a0:45:04:ed:4b:2a:67:d0:4c:02:9f:59:65:ff:
6d:5f:13:2d:4d:e6:5b:a8:05:d8:33:29:31:ee:a3:41:7f:40:
86:c1:43:8b:ae:f9:0c:d5:25:eb:fd:71:3d:1c:ef:e9:61:09:
aa:75:2b:1e:f9:49:f5:62:43:20:e2:95:32:e5:5c:3f:eb:f3:
97:28:10:56:52:30:88:28:ad:ea:d6:a2:dc:fb:74:22:c6:bd:
8e:36:cf:7b:7b:44:08:15:73:9d:c3:83:7c:39:fd:28:bc:93:
81:07:b3:b3:b0:96:05:24:75:c5:46:06:c4:ab:a0:78:10:b7:
a0:5d:1a:e3:35:ac:9e:7e:c5:c2:23:1c:84:40:f8:9c:be:03:
42:6e:84:ba:46:fd:d2:ae:5d:9a:2f:7f:7b:5f:8f:30:69:3b:
13:d3:bb:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUiwNv7sYCkYiZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
NTRjN2I0NDItYTdmYi00Yzg1LTgwZjMtZGM3NzcyNjUxNmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTnfIzipRgcnn4Eym1lAlhqnZ7ObLznEGYTX
HSX1JDigxTFf45g0GO5BhqA+iSviNNP+6+rovOvpiBAdpRfOS8hqGU3e0Tkjb7HI
lgHqmAXzAm9bkTPDLsra2y/Wt1ALSRif101BvFYjVv5wrB5bjBs9WSo4oIOy0XSG
ZjLoecpuYgov73MxJy493odJwYWTiQLxQ0VJ59QBJc6nkMyNRsdCuhQtiQgBAMPL
VTpidhpnS8yC39qXBPgAblbTh3c0JuLUFODsCIzknXXF2Qs0M1fT6cFj0a6uOVm7
OTdyjFyZsZs6YNuYhbv9i3zHD0OawcHKpJRDls6PcoGY0BxgLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMvqDdK+8yh56uxOF6/XTKWemifVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjY1ZmY3MmItMTEwZS0z
N2MwLWI0YTEtMWUzZWJmZGY0YzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArER5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHhfqyZ8DZvkeJqjdpzFaVHvm779+tJ105w8fYurNG8qAJqGtISOH8/
OZ3vf76jNltMlewqFq9DdiQ/KDPBPJ9DjrzlwpaouCBh+Z8UO6cTZEcy9N9gAynW
Xdk1gCSgRQTtSypn0EwCn1ll/21fEy1N5luoBdgzKTHuo0F/QIbBQ4uu+QzVJev9
cT0c7+lhCap1Kx75SfViQyDilTLlXD/r85coEFZSMIgorerWotz7dCLGvY42z3t7
RAgVc53Dg3w5/Si8k4EHs7OwlgUkdcVGBsSroHgQt6BdGuM1rJ5+xcIjHIRA+Jy+
A0JuhLpG/dKuXZovf3tfjzBpOxPTuzM=
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:55:17 2026 by rpki-client