
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/67f06ca9-66fa-3bbd-bdc1-c736ec312285.roa
File: 67f06ca9-66fa-3bbd-bdc1-c736ec312285.roa (raw, json)
Hash identifier: /9IweW3gDUG67wapH8z2IkqHZJErEeN90y86A4W2kPY=
Subject key identifier: 3E:F9:F5:61:0C:E7:B5:C5:02:3F:D2:A1:B1:9C:E6:35:B2:58:D8:48
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E51E9EA33E065EA1808EACE00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/67f06ca9-66fa-3bbd-bdc1-c736ec312285.roa
Signing time: Sun 28 Jun 2026 09:00:11 +0000
ROA not before: Sun 28 Jun 2026 09:00:11 +0000
ROA not after: Sat 26 Sep 2026 09:00:11 +0000
asID: 13335
IP address blocks: 172.70.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:51:e9:ea:33:e0:65:ea:18:08:ea:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 28 09:00:11 2026 GMT
Not After : Sep 26 09:00:11 2026 GMT
Subject: CN=65e20517-5d7c-4d91-b5ce-d23d929717b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:a1:0f:07:8d:65:c7:61:b9:6e:60:7a:64:
f5:6c:d3:7a:86:c7:b0:89:eb:36:e2:8e:77:23:99:
83:f6:fc:36:14:43:4a:50:19:ff:88:a0:47:fa:14:
41:55:e0:08:3f:fb:ee:91:6d:da:b3:35:55:a6:c5:
c2:eb:53:58:66:2a:a2:cc:ff:75:6b:82:2e:ae:df:
dd:e4:f8:b4:a5:0e:50:a6:0f:88:5f:a4:2c:02:45:
48:84:4c:f2:b7:05:6f:51:8e:46:b0:1c:f6:20:ba:
77:8b:5c:e1:1f:7b:51:d8:5c:a5:63:44:cf:6a:e4:
13:b2:f0:3b:71:e0:0c:d7:3c:49:90:d3:ce:aa:c5:
66:a0:c3:fd:36:a0:d9:cd:0e:8e:f4:22:7c:a6:e0:
f1:dc:72:6d:92:97:14:a6:35:1a:61:32:03:30:0c:
10:f4:41:6d:0d:51:6c:a4:93:62:3e:66:fa:41:36:
72:37:3b:35:23:ff:32:ef:7f:30:84:a5:01:d6:60:
39:05:70:7a:79:1b:0b:21:8e:cf:53:c7:2b:f1:af:
34:da:36:c8:5a:e6:4d:5d:25:5b:25:7a:d9:b9:80:
a5:97:67:39:4a:0e:4b:a7:c7:d3:dc:9c:66:67:28:
17:96:b2:fc:35:02:63:57:84:86:9e:fa:3b:27:2d:
9d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F9:F5:61:0C:E7:B5:C5:02:3F:D2:A1:B1:9C:E6:35:B2:58:D8:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/67f06ca9-66fa-3bbd-bdc1-c736ec312285.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:75:c2:69:41:94:97:10:36:97:3f:9d:90:07:35:c8:7b:dd:
cf:bd:33:f8:e9:14:3c:1b:73:a7:a9:63:4f:a3:1a:d7:58:4f:
73:66:20:87:1f:56:99:08:12:52:ad:d7:c6:3c:bf:fa:ae:9b:
f3:70:1a:63:49:8c:11:d6:f0:3f:79:34:47:93:9e:24:56:65:
8b:73:9a:f0:b9:b5:27:73:d8:8e:f6:e1:9c:b8:fa:eb:fc:1e:
9e:70:e3:06:4d:68:7d:c4:f3:11:24:a6:9e:d1:2a:ee:30:d1:
16:2e:3f:47:24:51:cb:df:7a:6d:6f:2f:4c:76:be:83:7a:5c:
23:b8:41:38:e5:a6:49:cf:84:59:5a:e6:e1:6d:f1:b8:57:cd:
4f:48:be:50:38:a0:d4:a0:50:dc:90:0d:bf:59:64:6f:b4:17:
5d:38:88:58:52:19:0e:52:79:bb:92:c5:01:a8:d0:d8:a0:0c:
f4:c3:12:bc:89:bd:c2:8d:ef:a0:94:c6:47:57:4c:8b:9f:c7:
c2:fc:53:cd:ba:9a:a1:2d:de:78:a4:30:3b:e2:c0:9c:21:54:
c0:56:f9:a2:93:94:d6:35:39:25:8b:71:a2:2c:b9:0b:9b:86:
30:1a:3d:42:d6:19:a2:34:1f:2f:e2:d8:b5:89:d4:b9:e6:59:
a3:89:ab:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:49:57 2026 by rpki-client