
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/401dd40a-d16b-3981-8e27-63ff5630b6fb.roa
File: 401dd40a-d16b-3981-8e27-63ff5630b6fb.roa (raw, json)
Hash identifier: 60xqPI8RubqvggFuYVxJ1fm9sQ7JPQPpNfwY0EuxNw4=
Subject key identifier: D9:5C:4B:C7:1D:28:D9:D9:E1:38:CB:E8:08:FF:D0:C4:0B:9D:08:1D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E8FE5D7C0C9B05EF363C816E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/401dd40a-d16b-3981-8e27-63ff5630b6fb.roa
Signing time: Mon 20 Jul 2026 13:52:13 +0000
ROA not before: Mon 20 Jul 2026 13:52:13 +0000
ROA not after: Sun 18 Oct 2026 13:52:13 +0000
asID: 13335
IP address blocks: 104.22.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8f:e5:d7:c0:c9:b0:5e:f3:63:c8:16:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jul 20 13:52:13 2026 GMT
Not After : Oct 18 13:52:13 2026 GMT
Subject: CN=d988a593-0dcd-44c4-89a4-2ada24de57c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:4d:84:d2:b7:61:40:11:f7:d3:03:0c:ed:
3b:79:02:3e:fb:42:04:06:b3:ff:d6:21:8e:46:85:
45:ca:8d:98:12:ce:c9:42:d0:82:0c:ab:d6:c3:66:
6e:90:03:9f:b2:3b:bd:5f:9f:01:28:69:2a:8b:16:
b4:35:9c:35:9c:8a:5b:8a:c0:d2:ae:20:1f:18:86:
54:c2:5d:c5:7c:03:95:e7:46:c7:f2:6c:d0:f2:99:
8e:5c:53:27:e6:43:a8:b6:c7:7f:3d:71:05:bd:d1:
79:ad:d4:0a:d7:69:80:fa:97:ab:d4:ed:68:bd:1a:
f5:e4:bd:f0:73:47:ba:ea:c8:85:4e:ed:21:e1:26:
fa:2d:5e:6e:89:29:62:dc:e2:b9:10:bc:af:5c:03:
1f:46:5b:2e:0f:9f:27:c9:b8:db:4e:c4:32:7b:02:
42:5a:53:7f:b9:12:b0:c5:6d:68:56:89:08:27:5d:
d1:f8:f0:1e:f4:02:ba:50:5b:56:f8:c5:00:c3:9f:
bd:ff:c4:bd:0b:98:8d:b0:b0:1e:c1:3b:5a:48:26:
f7:0b:92:fa:bb:02:6d:9f:bf:3b:9f:20:9f:57:06:
74:64:c1:62:ab:88:3f:05:01:c2:cb:39:4c:f7:04:
65:47:88:2e:01:9f:ff:28:eb:84:b7:23:79:e4:ae:
3e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5C:4B:C7:1D:28:D9:D9:E1:38:CB:E8:08:FF:D0:C4:0B:9D:08:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/401dd40a-d16b-3981-8e27-63ff5630b6fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.22.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:00:81:79:85:0d:7c:96:57:ce:24:c3:9f:a3:b7:95:75:da:
aa:2c:07:aa:fa:ee:20:a1:1b:bd:52:82:67:58:3b:a8:93:a8:
81:3b:d6:8f:2e:31:2d:b5:db:92:23:37:fd:0b:bd:67:53:b0:
4b:b5:f9:58:c4:ef:0a:88:0f:91:06:ca:b2:56:66:09:7f:3c:
e4:43:7e:90:d2:58:e5:9a:55:1b:fd:33:91:47:bf:f5:cc:cc:
11:5b:15:f1:8c:0c:dc:09:5e:24:f3:9d:60:21:38:a4:a5:d7:
b0:53:7c:b3:f6:45:ad:88:c6:12:db:26:51:1e:1d:3d:01:ce:
1d:a6:6b:e1:53:67:66:dc:7d:9e:5b:7c:86:6c:4a:c0:42:be:
2a:52:02:66:0a:49:48:6b:a8:d9:f4:04:99:26:6a:b1:d2:78:
67:89:f7:39:41:49:13:c6:c8:83:1c:9a:d5:8d:af:13:00:9e:
f7:dd:91:1d:02:84:34:01:46:27:25:66:ab:1b:12:53:6f:4a:
f0:3c:57:81:4e:12:17:c1:9b:9f:24:48:e8:b7:57:b0:ce:d7:
a5:b2:d3:cb:06:d0:be:d5:46:96:26:2a:ac:3f:28:d5:5b:bf:
df:85:0e:65:e1:21:d0:70:59:8d:ed:64:8d:39:08:cc:fc:a4:
6a:1f:f1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:47:48 2026 by rpki-client