
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7471f609-4e4f-3a7a-984d-a655e565f544.roa
File: 7471f609-4e4f-3a7a-984d-a655e565f544.roa (raw, json)
Hash identifier: 7W7++Tk0tg2AhJzVAe+QV8LWJbXuNbYH+d/yQMAaHWk=
Subject key identifier: 07:9A:A8:68:36:0A:08:75:33:AB:84:DF:07:53:5C:28:D4:88:7E:8A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584F497F8ABB56BC90541F1C7F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7471f609-4e4f-3a7a-984d-a655e565f544.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 13335
IP address blocks: 172.71.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7f:8a:bb:56:bc:90:54:1f:1c:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=9c12b60f-ffa0-4833-855f-5143ef91dfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d0:7f:e2:65:4a:32:d0:45:de:78:bb:72:22:
17:a8:a6:da:4c:13:28:1c:38:28:e4:26:a7:78:42:
04:97:51:d8:f7:34:6d:29:a7:29:26:05:96:63:41:
aa:a0:a2:49:84:b6:f3:a5:f6:37:f6:9c:62:5a:a6:
c0:41:17:0d:03:bf:37:91:30:19:0b:27:2a:8a:2a:
30:0c:fd:ac:64:f9:b6:ff:32:c9:02:32:17:1c:de:
eb:ab:f8:ce:b8:3c:f5:7c:ce:fa:4e:29:04:2a:56:
07:2c:07:02:1f:30:c4:9b:d8:45:58:7f:f9:8c:4c:
2a:2b:d1:df:cd:1b:9a:6f:78:e4:54:70:5a:70:8a:
f7:76:d8:d7:58:65:fa:7e:07:ae:57:a4:bc:f5:fa:
97:35:92:23:d8:40:84:f7:9e:f2:87:74:4e:85:ee:
a0:0d:65:37:62:42:35:39:7a:5b:4f:71:84:88:23:
75:c6:12:17:91:b6:4d:d9:38:5d:72:d9:c4:7f:99:
3c:6d:06:5e:74:44:ce:aa:a7:8d:31:62:e8:ea:f3:
24:5d:a4:91:86:e7:fa:15:25:d6:75:40:ff:22:e2:
3f:7e:1b:7c:de:15:72:63:23:79:50:8e:dc:fe:39:
58:da:0c:a3:80:a1:c7:c5:cc:eb:f2:83:05:da:90:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9A:A8:68:36:0A:08:75:33:AB:84:DF:07:53:5C:28:D4:88:7E:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7471f609-4e4f-3a7a-984d-a655e565f544.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:9c:a1:bd:5f:8b:86:3e:1e:2b:56:ed:25:75:75:67:36:ad:
f4:7e:3e:a8:c0:11:61:4c:e8:4f:3b:46:8a:0a:99:73:60:51:
72:c4:54:4b:50:77:4e:00:f3:72:aa:88:ae:50:85:44:96:46:
4e:2c:67:56:f7:4e:b2:f2:29:bb:3f:b9:9b:fe:dc:fd:c7:63:
2a:8b:3c:b2:db:38:51:9e:30:75:42:2c:f8:35:ec:e7:f3:85:
34:4f:5f:92:0c:3e:4e:bc:35:25:20:2a:60:1f:d6:85:af:fc:
1e:f2:de:af:7d:49:58:de:d4:75:18:d8:99:2e:3f:e1:81:28:
27:84:98:de:72:00:e2:44:0d:83:c9:0b:d7:42:26:aa:d6:cb:
dc:d4:b3:3d:8e:2a:38:5c:3d:ab:74:3a:0e:42:84:f2:dd:3c:
fc:1f:d5:09:60:c4:e1:34:33:8f:cb:4e:8a:eb:90:13:5f:c3:
dd:49:82:9e:8f:6f:f5:42:c6:d9:54:ee:f9:53:2e:42:fa:a6:
f9:2d:7f:02:49:67:a6:e1:b2:d5:52:85:84:72:c5:94:a2:10:
b6:99:83:84:6d:36:c4:66:21:10:f9:a0:ea:f1:ab:68:d7:1f:
c1:3b:4b:13:cc:cc:0b:4e:fd:e8:25:9a:f5:e8:b2:a4:6d:c4:
3a:7f:5c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:52:31 2026 by rpki-client