
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28f2ab63-e2b9-3f65-b96c-b7600407d0b2.roa
File: 28f2ab63-e2b9-3f65-b96c-b7600407d0b2.roa (raw, json)
Hash identifier: gWboZjLXAt/idvGn6Kb0pBVk0QWspAVj1JDlJMcPjB0=
Subject key identifier: 7F:78:02:A7:46:11:DD:92:D8:53:8B:0A:7F:43:6B:E7:95:83:CB:32
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E4AEF55EC90826255D2A7F900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28f2ab63-e2b9-3f65-b96c-b7600407d0b2.roa
Signing time: Thu 25 Jun 2026 21:00:12 +0000
ROA not before: Thu 25 Jun 2026 21:00:12 +0000
ROA not after: Wed 23 Sep 2026 21:00:12 +0000
asID: 13335
IP address blocks: 172.70.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4a:ef:55:ec:90:82:62:55:d2:a7:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 25 21:00:12 2026 GMT
Not After : Sep 23 21:00:12 2026 GMT
Subject: CN=edb481c7-4a10-4a44-82a5-683c8dd80b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:04:45:78:49:a2:17:5e:74:65:15:24:b2:
cd:f8:28:e2:3b:ba:d7:42:59:44:e1:35:6b:fc:0c:
e1:db:5b:bc:42:82:32:4c:85:f0:a9:6e:61:c6:8d:
f5:5e:55:4d:c0:ed:81:31:54:7b:c1:00:e8:ae:37:
48:7b:72:e8:9a:91:9b:95:a7:55:93:01:43:cd:52:
a6:75:f2:c9:61:e9:00:9b:5d:2c:f2:19:df:eb:80:
75:d9:ac:b7:9a:32:c4:e2:7d:f2:66:2f:50:86:bf:
fa:a2:ef:35:d9:d6:eb:94:ce:ca:9f:91:db:15:65:
73:08:5f:bb:b4:27:de:ea:10:33:bd:66:3d:1a:bd:
41:c7:10:9b:65:39:24:75:e4:8e:26:c8:bc:c6:83:
de:3a:12:13:cf:d0:cc:ce:66:cf:3e:ea:de:91:18:
1a:34:0a:99:d1:58:0e:b2:b5:b5:08:70:92:af:b4:
ef:8e:db:aa:63:c2:dc:3e:e7:88:c6:22:cf:ec:8f:
5f:0e:76:7e:17:a5:5c:65:41:f3:ba:a2:b7:ab:9c:
8b:08:c6:a6:65:dc:ed:29:70:b5:93:48:ab:9a:5f:
c8:92:94:17:68:4e:b8:91:12:14:fd:2d:81:27:83:
db:f9:86:aa:24:44:7f:b7:64:7e:d2:29:a6:42:ed:
b1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:78:02:A7:46:11:DD:92:D8:53:8B:0A:7F:43:6B:E7:95:83:CB:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28f2ab63-e2b9-3f65-b96c-b7600407d0b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:78:64:1a:f7:dc:d9:fe:58:31:55:dc:c4:7e:eb:92:d0:ec:
41:2b:3d:ff:93:c6:a7:73:e2:06:8a:9f:fd:17:18:0c:88:ed:
35:e8:c2:d9:34:4e:d5:a6:d6:cb:fe:03:71:5b:40:1a:2b:bd:
ea:17:f6:4b:6e:b2:82:28:46:99:6d:d1:18:2c:65:67:f2:2a:
e7:e1:57:1c:09:77:f6:5f:6d:9a:6a:f9:f5:a1:ac:24:ca:e0:
1b:3d:69:c9:54:10:a6:6e:90:9f:28:30:b7:b9:86:04:c2:6f:
42:94:5c:24:04:ec:c7:2e:bd:d6:28:c1:5d:3a:e0:e5:e2:f7:
02:bc:35:71:e9:5f:c2:e8:ab:63:63:e6:69:b0:99:87:3a:2b:
80:ef:73:f3:fb:fc:d7:5a:88:f7:5d:f5:d2:1f:77:cf:76:cc:
05:b3:04:c7:2a:81:a4:2a:68:0b:1c:ff:a3:55:95:fa:06:76:
41:ab:ed:46:5a:4a:86:5e:0a:e2:e2:f4:5c:75:ee:48:61:82:
e5:99:c3:73:e0:0d:98:26:af:99:20:82:ec:d3:46:d4:6b:81:
f7:4f:3a:d7:7f:6c:37:3c:4e:aa:15:2d:85:a0:e0:28:64:47:
58:47:d7:32:8a:22:7a:51:08:56:b5:4d:25:b1:b6:8b:3a:e0:
0b:0e:99:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:45:55 2026 by rpki-client