
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d52f74de-8293-3bb8-be18-b46e51b4b2e7.roa
File: d52f74de-8293-3bb8-be18-b46e51b4b2e7.roa (raw, json)
Hash identifier: Ysbk7kI7zb+tW+EpOeqdsfXknIvYaZAeMfMoTFm+Rlc=
Subject key identifier: E4:BB:05:B5:CA:B7:51:61:38:83:68:45:5E:FE:16:66:F7:8F:72:4D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E51E9EFFA32B815AED08A0C00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d52f74de-8293-3bb8-be18-b46e51b4b2e7.roa
Signing time: Sun 28 Jun 2026 09:00:11 +0000
ROA not before: Sun 28 Jun 2026 09:00:11 +0000
ROA not after: Sat 26 Sep 2026 09:00:11 +0000
asID: 13335
IP address blocks: 172.71.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:51:e9:ef:fa:32:b8:15:ae:d0:8a:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 28 09:00:11 2026 GMT
Not After : Sep 26 09:00:11 2026 GMT
Subject: CN=3301ec8e-a96d-46ec-839a-3810275fbedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ad:af:25:6e:c2:0b:95:d9:9a:37:1f:be:8e:
4a:9f:36:67:67:c5:ef:f6:8a:0b:56:7b:b4:51:1b:
5f:d5:b5:19:4d:ee:b9:6b:4a:92:8a:ca:55:39:cf:
c1:3b:3a:e5:89:11:60:b2:1c:76:04:c1:3f:a7:64:
4d:aa:6c:d6:bd:3d:24:5e:9c:b1:62:8d:97:b3:a2:
2b:73:ad:6b:78:4c:e6:9b:8f:2d:68:72:91:51:a6:
72:78:c8:64:10:3c:5c:ec:af:14:03:de:da:f3:6d:
a0:3e:a5:22:73:63:46:ae:0c:8a:af:c2:b6:1c:2b:
5d:d8:42:7e:8e:68:39:aa:de:f3:95:47:e1:c4:93:
9f:bd:43:11:5e:ea:82:bd:8a:f0:9f:95:66:26:fc:
6f:66:73:4a:3a:5a:55:19:fe:83:36:42:b4:47:8f:
ef:79:d0:2e:b9:f0:a5:6e:43:f1:07:9b:1b:5b:49:
69:7d:8f:65:fb:08:75:48:e4:58:b5:b1:6d:d0:3b:
fc:79:43:70:fd:cb:a8:0b:07:d3:b6:91:dc:87:4f:
99:4a:ea:2d:e9:61:81:44:6d:43:af:c0:aa:9b:92:
a7:30:6f:fa:44:47:5b:9a:5f:36:89:b8:cf:73:50:
68:0a:a1:eb:26:43:4d:60:69:33:30:62:e0:b3:ba:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BB:05:B5:CA:B7:51:61:38:83:68:45:5E:FE:16:66:F7:8F:72:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d52f74de-8293-3bb8-be18-b46e51b4b2e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:8d:a3:e9:d5:98:b6:a4:cb:f5:b4:08:7e:51:70:16:3f:a7:
ba:7f:67:e9:a4:29:a0:9a:7e:15:57:6c:53:39:98:0f:76:1d:
e1:5d:ec:74:1a:4d:ff:fa:52:af:d7:0d:57:af:83:70:c7:22:
3e:d2:33:28:18:25:6e:70:ca:43:16:ac:e3:d3:0f:56:7f:ae:
52:da:05:bf:9b:2d:70:d8:88:96:0f:31:35:4f:89:6c:5b:52:
f5:7c:65:c4:e6:41:e0:70:aa:98:7a:00:d4:d2:e4:fd:ed:18:
cc:bb:ae:d9:d6:91:7b:51:4b:ec:7a:aa:17:c3:c5:7e:e5:0b:
1b:2e:c0:cc:92:89:4b:43:29:a2:3d:6f:c8:a7:d6:4f:64:55:
44:5b:e2:d9:96:d5:3b:92:72:3a:0a:a2:ec:60:cc:33:dd:5b:
eb:a9:5f:ff:f8:95:54:47:4b:d3:cd:58:8e:56:8a:9a:e8:96:
af:5f:37:a4:52:b0:7d:90:14:70:b2:a5:aa:ed:e2:5b:8c:32:
37:0b:b9:fb:70:c4:d0:00:98:ef:a2:ed:1a:1b:d7:ea:b2:00:
74:ba:a2:b8:c2:17:da:9a:6f:07:f8:a4:27:9d:33:66:da:b3:
7c:24:e0:14:2d:27:2e:23:84:5f:8e:04:3d:5f:71:f8:10:fe:
65:4a:f9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:52:40 2026 by rpki-client