
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a46eb94-76a8-3ad9-ae41-31513bbbdfb2.roa
File: 0a46eb94-76a8-3ad9-ae41-31513bbbdfb2.roa (raw, json)
Hash identifier: 3hX2wSk4zATFoY3rwYGMUagTTCOSJw8LKwnQOKvsYgE=
Subject key identifier: 91:A9:50:2B:74:49:AB:F2:6A:A9:D7:62:C3:C1:1A:EE:47:FA:7E:0D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E4AEF66306B4E20F4A45D1960
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a46eb94-76a8-3ad9-ae41-31513bbbdfb2.roa
Signing time: Thu 25 Jun 2026 21:00:12 +0000
ROA not before: Thu 25 Jun 2026 21:00:12 +0000
ROA not after: Wed 23 Sep 2026 21:00:12 +0000
asID: 13335
IP address blocks: 172.67.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4a:ef:66:30:6b:4e:20:f4:a4:5d:19:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 25 21:00:12 2026 GMT
Not After : Sep 23 21:00:12 2026 GMT
Subject: CN=378a267c-a861-4aa8-b111-5856e0fbb112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:d2:48:e8:49:f3:c9:7e:1d:d4:1e:28:f1:
01:b3:5e:64:e1:2a:55:63:ac:7e:1e:5f:1c:44:c8:
b9:29:ca:f7:1b:0c:19:ee:16:40:52:7e:89:87:fd:
c1:18:52:16:50:32:f4:36:76:00:b1:c4:db:1f:d8:
64:96:6f:be:6a:40:f9:68:13:3e:f5:b3:6e:b5:bd:
ac:06:2e:43:08:0c:f6:cb:99:ae:b7:b9:16:b5:79:
53:7d:58:aa:d9:93:19:e4:36:04:b9:87:a1:14:33:
6d:7e:28:04:bd:38:fd:65:5e:a3:06:48:9e:2f:61:
70:fd:97:b5:82:30:5b:e6:65:ae:e7:fd:41:8a:b0:
b2:a7:b3:35:a4:9d:dc:2e:a8:0b:e4:1b:8f:0d:ab:
ba:fb:5e:49:9d:48:e4:84:de:f2:d7:ec:a2:7d:76:
ce:30:a8:be:84:33:9d:61:a2:51:54:3c:79:d1:5a:
2d:e2:98:c3:99:22:02:6d:3f:14:6f:b5:77:a4:f2:
92:12:4b:43:72:20:dc:0b:ec:10:09:a1:da:12:e0:
04:21:23:93:70:90:88:a1:34:d1:38:02:0e:f5:c5:
22:a7:76:d2:e1:8f:72:26:df:fd:38:ae:35:01:cd:
e2:8f:01:49:ef:15:49:82:4c:e4:c4:fc:a9:36:f7:
69:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A9:50:2B:74:49:AB:F2:6A:A9:D7:62:C3:C1:1A:EE:47:FA:7E:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a46eb94-76a8-3ad9-ae41-31513bbbdfb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.67.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:96:aa:c0:1c:3a:51:1e:8c:44:42:57:06:c8:80:04:3e:9c:
d4:85:95:58:61:35:a6:21:c6:11:44:74:65:34:40:c1:2b:58:
ee:fc:e5:7b:40:6f:07:f4:52:5f:d9:c4:ed:18:7a:73:68:a7:
e4:5c:ea:fa:3c:27:8a:c7:e8:74:21:3a:3d:2d:5a:c7:56:00:
ed:36:a1:4f:ee:b8:04:be:24:85:14:e5:06:21:c9:e8:b4:bc:
96:1d:f3:43:0f:54:c6:c8:3b:55:da:cb:90:53:fa:4a:ca:73:
7c:db:75:f9:5a:17:2f:0a:90:8c:b9:a2:3a:25:92:37:92:2b:
69:1e:26:2d:a1:01:e8:a5:ca:71:e0:1f:61:0c:c1:77:74:d8:
18:f2:96:7a:5b:71:35:db:22:af:32:e7:16:51:57:0a:f5:fb:
c4:e9:29:bd:d8:05:9f:cb:16:85:cb:b9:41:77:50:2b:cc:44:
78:11:f9:44:fc:15:21:45:e9:e2:a6:e4:ba:a2:d4:44:82:26:
e7:a0:f2:75:fb:51:e1:41:ea:96:73:97:3d:5b:94:49:c7:8f:
77:06:71:59:65:af:19:00:ab:19:ba:e3:3d:7a:d0:25:3b:0e:
30:3b:f8:d7:39:16:f8:7c:08:52:f2:1f:a2:8a:48:33:2f:c1:
46:b2:5a:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K72Ywa04g9KRdGWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
Mzc4YTI2N2MtYTg2MS00YWE4LWIxMTEtNTg1NmUwZmJiMTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVzSSOhJ88l+HdQeKPEBs15k4SpVY6x+Hl8c
RMi5Kcr3GwwZ7hZAUn6Jh/3BGFIWUDL0NnYAscTbH9hklm++akD5aBM+9bNutb2s
Bi5DCAz2y5mut7kWtXlTfViq2ZMZ5DYEuYehFDNtfigEvTj9ZV6jBkieL2Fw/Ze1
gjBb5mWu5/1BirCyp7M1pJ3cLqgL5BuPDau6+15JnUjkhN7y1+yifXbOMKi+hDOd
YaJRVDx50Vot4pjDmSICbT8Ub7V3pPKSEktDciDcC+wQCaHaEuAEISOTcJCIoTTR
OAIO9cUip3bS4Y9yJt/9OK41Ac3ijwFJ7xVJgkzkxPypNvdpmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJGpUCt0SavyaqnXYsPBGu5H+n4NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGE0NmViOTQtNzZhOC0z
YWQ5LWFlNDEtMzE1MTNiYmJkZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErENAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH6WqsAcOlEejERCVwbIgAQ+nNSFlVhhNaYhxhFEdGU0QMErWO785XtA
bwf0Ul/ZxO0YenNop+Rc6vo8J4rH6HQhOj0tWsdWAO02oU/uuAS+JIUU5QYhyei0
vJYd80MPVMbIO1Xay5BT+krKc3zbdflaFy8KkIy5ojolkjeSK2keJi2hAeilynHg
H2EMwXd02BjylnpbcTXbIq8y5xZRVwr1+8TpKb3YBZ/LFoXLuUF3UCvMRHgR+UT8
FSFF6eKm5Lqi1ESCJueg8nX7UeFB6pZzlz1blEnHj3cGcVllrxkAqxm64z160CU7
DjA7+Nc5Fvh8CFLyH6KKSDMvwUayWsY=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:24:23 2026 by rpki-client