
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3dc64f5-b585-3bc9-b7f7-3ee08b5137e8.roa
File: f3dc64f5-b585-3bc9-b7f7-3ee08b5137e8.roa (raw, json)
Hash identifier: NidT8EBLu1DIRBn3uYN7GhoQ0XAgfuEflcPllpFIzVM=
Subject key identifier: F7:C0:FA:45:09:90:03:25:11:AE:92:86:63:F6:A1:29:D3:80:7C:3C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E6DD4BA8200CA683E9BF85580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3dc64f5-b585-3bc9-b7f7-3ee08b5137e8.roa
Signing time: Wed 08 Jul 2026 09:00:12 +0000
ROA not before: Wed 08 Jul 2026 09:00:12 +0000
ROA not after: Tue 06 Oct 2026 09:00:12 +0000
asID: 14789
IP address blocks: 172.68.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6d:d4:ba:82:00:ca:68:3e:9b:f8:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jul 8 09:00:12 2026 GMT
Not After : Oct 6 09:00:12 2026 GMT
Subject: CN=9c4d22a3-e89e-412d-8574-5b059f6dd05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:0b:54:cc:1f:56:be:58:05:60:6d:10:e3:
a9:c5:52:38:30:a1:8e:8f:e3:14:be:85:b6:13:e8:
18:7d:3d:bc:0b:95:74:0d:62:12:5a:fb:30:22:d7:
21:c3:37:1e:59:b0:a7:31:be:da:18:63:73:1c:3a:
fd:f6:af:20:b3:be:0f:26:79:c7:a6:a0:8b:6f:b9:
fd:fa:68:69:43:77:15:1e:d0:88:e8:11:59:d0:27:
f6:10:01:2d:04:04:09:2a:d5:94:4d:63:a2:8d:9e:
fb:b3:32:f4:6f:ba:8c:7e:e6:3e:8e:8e:fb:36:53:
63:02:28:f1:af:62:e4:33:0a:a3:07:29:d6:7e:38:
be:73:4e:af:2a:86:32:8d:b7:8c:a6:69:ea:51:e3:
27:9d:1a:21:b6:11:da:93:19:9f:cc:ee:2b:f6:67:
66:7e:42:fc:24:c4:6a:f2:f5:40:14:bc:09:e9:3e:
3e:1a:08:c2:c3:18:19:59:c9:7c:7f:0e:54:68:58:
2f:45:ee:8e:1b:ba:a2:9d:ac:02:42:34:3e:0c:5e:
ca:54:b1:43:e6:00:e6:51:70:20:7f:72:57:86:54:
00:31:2e:2f:a7:7b:87:a8:c9:a7:59:74:04:91:21:
34:1a:fa:c5:7e:dc:ba:63:e3:42:9b:90:3f:3c:8f:
fe:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C0:FA:45:09:90:03:25:11:AE:92:86:63:F6:A1:29:D3:80:7C:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3dc64f5-b585-3bc9-b7f7-3ee08b5137e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:63:bd:7a:c2:c0:95:95:7b:0c:4b:cb:f6:9f:8b:bf:0f:61:
85:dd:01:f1:7c:52:ac:ab:fb:f5:75:b4:49:83:0b:8e:fe:80:
b6:2e:bb:6f:a0:c6:bd:3d:b4:f3:64:73:5a:43:e9:f7:3c:9c:
88:61:75:42:da:0f:93:d5:39:fd:53:03:57:3b:61:75:17:1e:
0b:b9:6c:9b:48:f0:87:28:b7:44:64:4e:52:80:16:3f:6c:1e:
d7:cc:fd:28:71:7a:79:58:ff:65:cb:51:e2:c8:c3:08:54:80:
b9:e6:5e:e1:b2:c3:b2:79:07:61:16:68:11:cb:d0:4c:6e:2a:
f1:9d:92:0a:03:84:c0:e6:27:78:cf:91:c6:ab:c7:9d:1b:e9:
a5:e3:2f:1f:bf:aa:11:80:04:34:c9:63:65:c2:d7:8f:53:cf:
fb:08:86:27:d8:b4:99:69:e0:d0:09:b0:39:68:56:3c:9e:43:
d5:ab:31:a1:e1:77:ea:14:60:4c:ae:3e:c6:8e:45:4a:18:ae:
21:39:76:c2:4d:16:7c:0a:ae:ea:30:af:88:60:69:20:77:8f:
84:1a:9b:55:07:4c:80:af:52:02:a2:63:98:27:b1:8f:00:60:
97:9b:63:89:67:77:ae:02:2f:e2:82:fd:27:8d:b0:ce:81:14:
4c:07:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:20:34 2026 by rpki-client