
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/63b7099a-396b-3dca-b382-759ba79c71ac.roa
File: 63b7099a-396b-3dca-b382-759ba79c71ac.roa (raw, json)
Hash identifier: 9ZcDXDxDjDffIyVkEltoHR8SfRmWe440byio4vegcZc=
Subject key identifier: 01:CC:C9:FF:62:41:DA:41:54:58:6E:F4:E0:B8:10:3A:98:89:DC:97
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584F4974C2CD499723AA961AF680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/63b7099a-396b-3dca-b382-759ba79c71ac.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 14789
IP address blocks: 172.68.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:c2:cd:49:97:23:aa:96:1a:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b3c4978b-5184-4d68-86ee-ce0335e6017e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a8:a4:2d:e1:d4:f2:03:ff:73:c0:cf:ae:0c:
b6:43:af:d0:57:b2:0f:43:16:d3:7e:49:70:eb:bf:
80:4d:b5:27:9e:c0:36:75:ec:cc:83:46:90:5e:39:
3a:87:bb:be:af:aa:57:1e:ce:34:d6:c1:1b:6b:9d:
28:e8:49:db:c4:cb:cc:77:8b:7a:33:35:b9:8b:1a:
0f:b1:9b:13:e9:7d:fb:a5:fa:eb:f6:b1:cb:f0:e6:
97:bb:68:58:d2:8a:bf:f1:63:c1:bb:a0:57:db:d8:
9e:78:f3:22:0f:56:e3:58:eb:73:8b:14:b7:80:62:
64:92:e3:99:58:2e:f7:c4:d0:2a:e2:f7:eb:57:47:
7a:3a:b3:7d:4a:ce:54:d5:20:f1:47:a7:57:3c:2e:
6c:02:79:ba:e3:f1:b5:09:7d:ea:8b:8c:13:1a:c4:
d9:4f:96:7b:2a:f6:cb:ba:55:01:18:43:2c:d3:6e:
c4:f9:a0:1d:98:21:e4:12:16:99:db:e6:c0:39:bd:
2b:24:b4:7b:9d:33:6a:79:74:71:1f:29:1b:be:da:
4a:a0:f2:2f:03:0a:14:84:99:cd:09:74:db:44:36:
2e:e0:8c:7d:4f:1f:9f:fe:bc:c0:ad:48:12:f4:f8:
d1:f1:c4:10:4c:52:14:22:05:49:d6:e7:40:85:d5:
a7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CC:C9:FF:62:41:DA:41:54:58:6E:F4:E0:B8:10:3A:98:89:DC:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/63b7099a-396b-3dca-b382-759ba79c71ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:15:43:b8:5a:6f:52:52:37:e1:cc:f9:4b:2e:3b:bc:dc:08:
d0:46:62:6c:15:23:58:8b:bc:5b:9f:e2:fb:80:fe:e8:36:19:
6b:b4:b8:db:e2:6b:33:28:28:2e:ce:7e:2e:e0:f7:df:93:73:
17:d1:31:ce:0d:db:76:b1:c8:3b:86:c5:20:9a:55:8c:f5:ec:
6b:bf:7d:6d:30:60:9e:cb:74:cf:3b:3a:04:01:34:7d:b4:8f:
ac:0c:cd:8f:df:bd:68:d2:47:2d:a2:9f:f7:91:f5:2b:1d:73:
3f:80:67:e6:61:62:67:ff:c2:6d:42:0a:0a:44:22:4a:97:e0:
57:4c:3f:1e:02:53:ca:fb:fd:15:70:ae:3b:aa:41:54:f0:f4:
e7:a1:c3:33:97:94:8d:92:31:b3:b5:c4:76:99:7e:88:a7:13:
7e:5f:52:b2:51:34:1a:a6:ed:46:19:be:01:2a:d9:a8:18:4b:
40:1b:76:4f:f4:e0:d2:c0:16:b8:70:f5:f1:ca:5c:e3:b1:c5:
9d:35:b6:67:12:e3:40:b3:72:36:4b:a2:3e:6b:f4:2a:96:56:
78:04:dd:66:ae:cc:35:46:0c:20:0f:b4:07:56:34:dc:3b:7b:
29:c0:be:50:09:75:58:3c:ea:da:27:40:31:79:5c:a0:03:75:
8e:ef:80:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:45:52 2026 by rpki-client