
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/614204ac-6d1c-3957-aacf-46eaa6662605.roa
File: 614204ac-6d1c-3957-aacf-46eaa6662605.roa (raw, json)
Hash identifier: enkyawxWprUry27hrH90TGgoo/2RUMuqmQ5a9m6q5fw=
Subject key identifier: CB:46:E9:15:92:FA:8C:88:C8:30:20:14:AB:29:4E:61:BB:AD:86:60
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E4AEF5AF0C49E97DEE30F54C8
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/614204ac-6d1c-3957-aacf-46eaa6662605.roa
Signing time: Thu 25 Jun 2026 21:00:12 +0000
ROA not before: Thu 25 Jun 2026 21:00:12 +0000
ROA not after: Wed 23 Sep 2026 21:00:12 +0000
asID: 13335
IP address blocks: 172.67.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4a:ef:5a:f0:c4:9e:97:de:e3:0f:54:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 25 21:00:12 2026 GMT
Not After : Sep 23 21:00:12 2026 GMT
Subject: CN=a69997ee-b752-47e3-b7f5-7ad8facb7d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:49:40:cc:db:bb:a4:b2:aa:2a:d9:9a:1b:
1f:11:e1:47:40:38:d5:94:f3:5e:aa:26:f3:19:96:
48:e5:87:55:a0:8f:21:1d:73:f0:ef:2b:ef:1b:a8:
37:b0:3e:8e:c9:ad:5b:6a:7b:3e:f2:f6:77:c6:f4:
ac:2c:06:45:b7:d7:bc:43:d4:38:db:ea:f0:a7:de:
2e:dd:01:ec:51:c0:f3:88:e9:17:64:7c:1a:94:6c:
70:aa:f2:87:db:f9:73:cd:9e:54:06:29:b0:57:fc:
d6:dc:19:f9:66:8a:c0:f2:00:96:51:60:4d:4a:fc:
75:86:de:3c:a3:4c:b2:33:9d:54:50:86:8c:ee:8c:
76:c2:31:d6:ef:5c:9e:f4:8d:32:62:db:59:df:ad:
66:da:19:5b:df:22:95:8f:25:83:0d:70:10:d2:2c:
7d:3a:85:70:c4:c9:0a:38:67:29:ba:ca:97:88:05:
4e:3e:19:b7:f1:8d:b3:b6:15:ee:f4:97:c5:e3:b1:
05:75:32:e0:e9:7d:d6:7e:e4:7d:bd:c8:c3:b3:5c:
7b:1b:98:bc:b4:c3:c9:6c:7b:f2:2a:fc:1f:8a:11:
9a:15:cb:82:a8:b4:68:22:d8:3d:d6:19:92:44:57:
20:5f:9d:04:f8:fb:25:7e:64:1f:ac:e4:ee:4e:3a:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:46:E9:15:92:FA:8C:88:C8:30:20:14:AB:29:4E:61:BB:AD:86:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/614204ac-6d1c-3957-aacf-46eaa6662605.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.67.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:b5:a8:78:7f:4b:17:41:0e:56:8f:40:14:32:f0:9b:7b:4f:
89:ae:f8:ee:b6:04:e7:15:57:8b:dd:d5:85:f1:47:80:11:be:
4d:61:ff:16:14:67:7f:44:b5:50:d1:c5:42:e1:6b:46:b8:4d:
0a:12:4b:c2:1a:68:f2:0d:0a:91:44:28:33:4b:12:45:b4:6c:
a6:6d:74:9a:fc:7e:46:f7:c7:2b:47:b2:80:73:4a:e9:f7:4e:
00:f0:b1:64:ac:33:2f:a4:40:1f:93:4a:cb:8f:84:99:57:88:
8b:aa:aa:68:66:50:e4:c1:11:cb:f1:c1:89:bb:1a:66:3a:03:
1d:be:04:b4:b3:16:f1:8a:a5:9a:24:ff:df:9b:44:44:37:84:
c7:de:e4:93:fd:c1:ad:f7:78:98:4b:63:c5:1b:f0:db:40:b1:
da:dc:37:6e:ec:89:2f:82:d3:85:c7:07:66:c5:30:88:47:d2:
2e:b6:5d:75:6e:36:87:6c:0e:e0:55:d2:d8:76:12:67:0b:ee:
85:95:38:47:1b:83:cd:e0:32:71:ae:7b:dd:91:7a:2c:91:66:
4f:d6:32:d6:71:19:ae:52:8c:2f:c9:f3:9a:da:03:dd:81:03:
19:5a:a8:65:d8:dc:ab:18:a3:16:36:e5:7b:a6:ce:d3:48:48:
27:bf:1c:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K71rwxJ6X3uMPVMgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
YTY5OTk3ZWUtYjc1Mi00N2UzLWI3ZjUtN2FkOGZhY2I3ZDk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCNJQMzbu6SyqirZmhsfEeFHQDjVlPNeqibz
GZZI5YdVoI8hHXPw7yvvG6g3sD6Oya1bans+8vZ3xvSsLAZFt9e8Q9Q42+rwp94u
3QHsUcDziOkXZHwalGxwqvKH2/lzzZ5UBimwV/zW3Bn5ZorA8gCWUWBNSvx1ht48
o0yyM51UUIaM7ox2wjHW71ye9I0yYttZ361m2hlb3yKVjyWDDXAQ0ix9OoVwxMkK
OGcpusqXiAVOPhm38Y2zthXu9JfF47EFdTLg6X3WfuR9vcjDs1x7G5i8tMPJbHvy
KvwfihGaFcuCqLRoItg91hmSRFcgX50E+PslfmQfrOTuTjow5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMtG6RWS+oyIyDAgFKspTmG7rYZgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjE0MjA0YWMtNmQxYy0z
OTU3LWFhY2YtNDZlYWE2NjYyNjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEPQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALO1qHh/SxdBDlaPQBQy8Jt7T4mu+O62BOcVV4vd1YXxR4ARvk1h/xYU
Z39EtVDRxULha0a4TQoSS8IaaPINCpFEKDNLEkW0bKZtdJr8fkb3xytHsoBzSun3
TgDwsWSsMy+kQB+TSsuPhJlXiIuqqmhmUOTBEcvxwYm7GmY6Ax2+BLSzFvGKpZok
/9+bREQ3hMfe5JP9wa33eJhLY8Ub8NtAsdrcN27siS+C04XHB2bFMIhH0i62XXVu
NodsDuBV0th2EmcL7oWVOEcbg83gMnGue92ReiyRZk/WMtZxGa5SjC/J85raA92B
AxlaqGXY3KsYoxY25XumztNISCe/HCw=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:33:34 2026 by rpki-client