
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ff06541-3068-32ab-8810-f331d453858b.roa
File: 9ff06541-3068-32ab-8810-f331d453858b.roa (raw, json)
Hash identifier: VS3pve+jjHYkzydbpMymcCoKN8InLUlaDJ1aANQGODs=
Subject key identifier: 8C:B5:79:A3:3F:23:48:A2:BF:37:9B:AE:4E:85:F7:C0:3F:DD:D1:01
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EF44CB8E422791B007C396D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ff06541-3068-32ab-8810-f331d453858b.roa
Signing time: Tue 25 Aug 2026 13:00:12 +0000
ROA not before: Tue 25 Aug 2026 13:00:12 +0000
ROA not after: Mon 23 Nov 2026 14:00:12 +0000
asID: 13335
IP address blocks: 172.70.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f4:4c:b8:e4:22:79:1b:00:7c:39:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 25 13:00:12 2026 GMT
Not After : Nov 23 14:00:12 2026 GMT
Subject: CN=89813a53-1cf4-41a9-ad3d-47c4e05dd129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4b:4a:44:7b:60:a6:68:06:7a:d3:4f:8b:fb:
cc:d2:2c:2c:eb:72:39:a9:99:cc:5b:62:7c:dc:51:
d1:cd:c9:67:c8:c1:4a:8e:c7:35:f3:bc:94:4a:db:
2a:3e:87:46:ca:85:d9:43:55:03:02:50:a1:72:5c:
54:b5:d8:53:59:01:2d:5a:2b:e5:03:26:22:42:c8:
e3:a4:8f:ab:4b:d9:e3:51:ee:11:9f:a4:fe:b2:ee:
08:8a:ab:63:a6:92:da:28:04:08:2c:cb:bc:86:c8:
17:43:ed:2f:8a:d3:f7:c8:9c:7c:0f:70:ba:74:b9:
f2:f3:65:eb:c8:7a:c7:b1:7d:a6:6c:d4:04:b9:bc:
7b:76:7f:18:ee:06:ad:2a:09:c4:d9:d2:e8:45:2d:
38:73:e5:44:e3:a7:8d:5a:66:0b:37:90:b3:c0:77:
1a:2e:51:c1:86:f2:d3:50:a0:30:7a:89:25:7b:47:
23:8c:47:4d:82:e2:52:4f:13:17:17:4b:6e:21:86:
55:c3:db:32:b2:6f:d4:58:b2:26:8c:72:ee:ff:6d:
2f:13:bd:79:f1:11:0a:c0:d8:01:53:cf:7e:a0:d0:
a3:aa:cc:15:8d:32:be:3a:c8:3e:2f:a6:dd:aa:d0:
45:72:5f:d9:14:b3:15:10:96:cb:46:00:74:d0:a9:
ab:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B5:79:A3:3F:23:48:A2:BF:37:9B:AE:4E:85:F7:C0:3F:DD:D1:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ff06541-3068-32ab-8810-f331d453858b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:c2:c3:c6:20:74:0d:5a:8f:98:8c:5e:97:64:b8:3e:62:66:
51:d4:c3:2a:9f:26:bb:29:e9:ac:c8:63:db:30:43:3c:58:22:
c0:2b:53:80:1d:6a:de:aa:61:9c:96:29:38:8d:d9:bd:e5:3b:
ac:15:ee:ab:68:52:4d:1f:60:86:1d:80:3c:a4:89:53:c6:f2:
ae:2d:a7:43:cf:1f:88:30:42:f5:38:af:86:0b:cf:17:78:1d:
22:32:16:8e:17:42:ff:42:f1:bb:d6:70:98:2e:b4:4c:98:e8:
12:5c:72:75:8f:a3:13:a6:f3:9b:25:c8:7d:3f:01:cd:d6:56:
ae:78:24:49:47:84:5d:96:d1:15:d5:b4:5f:08:d8:cf:e9:ab:
25:21:91:5a:5b:07:d1:46:6a:48:f1:94:3b:53:16:22:74:b4:
24:ec:12:9d:ba:82:27:1f:8f:15:26:12:52:02:5d:a4:c1:94:
fb:14:df:fb:dd:55:1e:b5:46:90:ed:22:29:56:c6:01:00:f4:
1a:24:07:c9:22:c4:c9:86:f7:4b:96:a0:f5:6a:16:e9:b6:86:
85:32:33:c2:95:1b:fe:ac:f1:df:1b:ec:c4:58:fb:e4:15:9f:
89:23:ee:54:a6:50:79:47:58:0c:81:fb:68:a7:ff:6f:24:ba:
57:a0:66:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:34:27 2026 by rpki-client