
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/128ee08d-1ae2-3b0a-81e9-d13deb2c9125.roa
File: 128ee08d-1ae2-3b0a-81e9-d13deb2c9125.roa (raw, json)
Hash identifier: wAL+cfNOvCW9p9AKiSn/8J6UuhoY3UoxvXKUvgFCPpc=
Subject key identifier: 7D:9F:D6:74:5A:5D:DE:0E:69:AC:37:6B:7B:57:16:4C:9E:7F:A8:75
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E4824B239B16609563EAA5B60
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/128ee08d-1ae2-3b0a-81e9-d13deb2c9125.roa
Signing time: Wed 24 Jun 2026 21:00:12 +0000
ROA not before: Wed 24 Jun 2026 21:00:12 +0000
ROA not after: Tue 22 Sep 2026 21:00:12 +0000
asID: 13335
IP address blocks: 172.68.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:48:24:b2:39:b1:66:09:56:3e:aa:5b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 24 21:00:12 2026 GMT
Not After : Sep 22 21:00:12 2026 GMT
Subject: CN=509a97fe-705e-409c-8424-9699c0c9047d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:7a:cb:1c:c1:be:12:1e:c3:f7:c3:24:17:
9c:21:67:b4:d7:29:0b:4e:f3:33:36:04:70:59:44:
6e:a8:6e:dc:ab:4f:69:5c:00:91:d0:a4:02:66:58:
90:93:dc:5e:dc:b7:b2:1b:8c:00:f3:2c:eb:24:63:
43:03:f6:f6:30:1a:ff:d9:1e:d6:b1:28:88:bd:9f:
04:c2:88:8b:23:2f:45:5a:6a:12:bc:64:b0:8d:4d:
3d:0a:71:5c:f3:b4:31:02:07:43:64:52:1b:04:2c:
47:f1:31:a8:56:3b:12:f2:36:5d:64:b2:43:0e:4f:
6a:21:b6:dd:1e:9a:ac:82:69:58:d4:b7:5d:19:c5:
9c:e4:6f:59:cf:23:3c:c8:4e:96:93:5d:87:51:ab:
43:74:59:be:f8:bf:dd:a3:81:1e:0b:02:7e:8a:b8:
b8:44:de:fb:89:27:e1:31:e5:76:fe:c2:82:2b:69:
9a:3f:f7:39:53:8a:5f:00:eb:08:23:d0:bd:0e:0d:
28:e0:da:2b:08:f5:4e:3d:f4:6b:79:13:d4:9b:02:
1c:9c:0c:72:08:01:ab:1d:be:d2:de:af:ab:b7:94:
14:b6:52:ac:0d:5c:ac:29:85:3f:06:db:ed:d6:17:
40:e8:82:af:06:51:dd:f3:06:bd:8b:ca:bd:6a:4f:
d0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9F:D6:74:5A:5D:DE:0E:69:AC:37:6B:7B:57:16:4C:9E:7F:A8:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/128ee08d-1ae2-3b0a-81e9-d13deb2c9125.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:e8:92:55:9d:66:d2:da:1e:a0:17:a6:fe:7b:35:70:2b:d5:
72:27:d5:63:da:85:e2:20:ed:fd:ab:f7:68:b4:da:6e:0f:cf:
1e:82:00:55:19:d7:ae:59:ff:64:e7:cc:4a:f3:d6:3a:e0:d1:
af:1b:35:21:91:5d:d3:ba:41:c1:e9:86:a2:f6:c4:e9:df:bb:
89:67:ba:c1:5a:3d:13:a8:ed:ba:ee:f9:38:c4:80:53:8e:8c:
75:be:4a:5f:2b:85:6f:7b:98:86:a8:26:d1:99:85:36:b4:1c:
5b:bd:89:c9:a3:22:da:86:c6:f0:e6:b5:ee:b2:4f:1e:d7:51:
00:74:d7:18:3d:43:d9:e9:b9:52:85:61:45:86:15:db:d9:90:
1d:47:b7:47:e8:8b:19:99:24:a8:45:3e:8c:9f:b1:d9:3e:97:
a9:ed:78:62:cc:8d:18:76:d7:c7:51:4f:01:e3:b7:36:02:1c:
db:9a:92:24:ca:24:de:d2:94:f1:59:b6:f5:b3:f1:eb:1a:0c:
bd:cf:07:59:e5:11:8d:7f:83:f8:c4:fe:35:9b:3c:bb:e2:23:
5d:e5:f1:5e:2a:25:ac:2e:78:08:61:dc:e0:19:61:f2:b5:ab:
34:8b:3d:79:8d:37:c7:99:7e:c1:26:26:4e:21:21:fd:54:ad:
18:d2:06:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:49:07 2026 by rpki-client