
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de441c87-afcb-3e53-98c5-4a828c903001.roa
File: de441c87-afcb-3e53-98c5-4a828c903001.roa (raw, json)
Hash identifier: /QQ1C+ij8fTa1gUj0MKN4Tc/zvzmOlUHxKupkjEg1ks=
Subject key identifier: 46:63:84:4B:E8:60:DD:D5:7D:A3:15:3F:80:D0:FA:80:57:A7:4C:63
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E51E9ED8CF7A9F108D1E68880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de441c87-afcb-3e53-98c5-4a828c903001.roa
Signing time: Sun 28 Jun 2026 09:00:11 +0000
ROA not before: Sun 28 Jun 2026 09:00:11 +0000
ROA not after: Sat 26 Sep 2026 09:00:11 +0000
asID: 13335
IP address blocks: 172.71.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:51:e9:ed:8c:f7:a9:f1:08:d1:e6:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 28 09:00:11 2026 GMT
Not After : Sep 26 09:00:11 2026 GMT
Subject: CN=58f59696-0835-4156-a2af-b8210959c41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:72:36:9b:d6:07:f6:ee:ef:50:60:f9:65:01:
92:ac:2a:c0:b2:82:06:98:ee:9e:ef:15:03:91:ca:
c4:95:11:ea:79:f5:a6:ee:4d:7b:b9:5b:e1:f3:ed:
23:04:d9:0d:6b:48:e2:1c:c2:03:9a:45:9f:83:46:
f4:87:46:6c:69:c4:2f:6e:16:7f:6d:4b:97:d8:d9:
f1:51:51:ac:f6:26:da:22:59:c3:b3:68:5d:b9:71:
ec:9b:bd:36:83:30:22:76:cd:c0:e3:ea:e5:6f:9a:
fc:39:5f:85:2b:46:32:b4:34:5d:1b:29:2b:55:74:
4c:1f:13:42:f9:6a:e5:3c:bc:fc:9e:ca:45:96:af:
57:f5:af:b6:de:00:e7:52:57:f8:3c:0d:92:1b:d0:
aa:1e:2e:0d:9e:86:0e:16:9f:33:4e:61:48:71:1a:
84:ff:f5:3c:d9:00:c3:85:87:ef:aa:49:91:b7:0c:
cf:9f:eb:8e:36:7a:6e:b3:a3:e6:16:ad:b1:2f:c4:
1b:58:a9:7f:01:bd:80:b8:94:48:18:ff:7d:aa:b9:
68:5b:37:c7:da:7a:16:3b:ec:86:8c:44:cd:c2:a0:
5d:af:e4:c9:39:8f:56:40:7c:99:eb:b8:c0:d2:ca:
30:02:53:76:12:98:c7:16:6d:c2:ba:68:3f:b6:cf:
a0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:63:84:4B:E8:60:DD:D5:7D:A3:15:3F:80:D0:FA:80:57:A7:4C:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de441c87-afcb-3e53-98c5-4a828c903001.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:bb:9a:79:88:14:6a:9d:ec:96:05:61:60:0c:c5:16:49:81:
63:6b:9c:7e:1b:79:00:62:fd:c6:9c:66:ef:78:be:95:12:33:
8e:9f:c5:63:7d:7b:d4:62:fd:d4:49:d1:55:5b:87:fe:20:0b:
1d:3d:68:af:23:75:24:63:e9:23:55:33:78:e9:db:5c:4d:b6:
40:f9:07:34:46:14:01:46:f0:f9:4e:27:cd:83:e4:88:b6:cd:
f9:c7:6e:59:2a:fa:7d:85:ec:a9:b2:e5:8f:8c:42:6e:3a:5b:
8e:c9:a1:e1:b7:d2:82:52:96:cf:3c:9d:ed:9b:69:be:fd:0d:
69:69:cf:91:79:64:fe:ce:4e:96:29:4c:99:a7:a2:13:87:b0:
79:53:11:f5:da:07:7a:36:79:15:9f:32:6f:02:88:9e:0d:04:
12:dc:57:1b:0e:51:81:f5:e4:02:2d:69:bf:6b:21:c8:5e:ee:
81:9a:d4:68:2b:4b:28:a7:ec:5d:30:80:27:28:bd:29:a0:53:
be:6b:52:dd:62:6b:3d:10:d2:c8:a3:e2:61:e5:f7:53:1f:20:
37:a6:c9:74:b6:5b:65:16:eb:b1:e3:61:dc:b3:ea:4a:1c:b4:
ba:fd:7a:58:68:73:62:69:03:4f:6b:44:86:83:3d:d5:35:1a:
ab:4f:b3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:29:19 2026 by rpki-client