
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/806a3b9f-246e-3eb2-a5c7-b7159f46dcd1.roa
File: 806a3b9f-246e-3eb2-a5c7-b7159f46dcd1.roa (raw, json)
Hash identifier: 0tvImDQUugQXQ170ya9vsi6Edi5+oY6gI5NabJLEH8Q=
Subject key identifier: 6A:05:6D:E2:E7:CD:BB:25:9C:D3:7F:C4:58:29:C0:02:55:33:4A:AE
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584F067233A4053B646AF2160F80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/806a3b9f-246e-3eb2-a5c7-b7159f46dcd1.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 104.23.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 02 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:33:a4:05:3b:64:6a:f2:16:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=c232531c-7ea0-401e-8784-1dbf90ca136a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:63:70:a9:78:29:f7:dc:6c:99:fc:f9:a7:
87:fd:38:8f:ca:b8:17:b5:47:4b:ac:fb:5d:2f:85:
25:a8:98:54:32:26:67:b4:d7:c6:64:ba:5a:c2:ec:
3e:90:77:aa:e8:13:4d:16:25:72:72:79:19:64:b7:
81:60:1e:e4:e8:2a:8c:15:40:ac:01:11:d3:ed:f2:
6a:5c:aa:32:26:da:e3:e9:82:92:8d:97:60:0f:42:
ff:c9:e3:91:20:fe:bb:ce:fe:b6:3c:e0:dd:74:79:
b8:a1:2b:c0:97:25:2f:06:0d:ce:5f:f8:63:09:d6:
73:a7:2e:9b:b4:a1:bb:2f:52:b5:99:a2:cf:a6:4d:
a2:20:51:cb:42:6c:1d:08:91:cc:bd:4d:af:d9:58:
e5:de:a2:6e:ac:47:f7:f3:0a:89:78:ee:d6:a4:c8:
6f:7d:4a:0c:04:e0:2a:27:11:ad:ae:b9:84:33:fe:
26:3c:4c:f3:44:7d:1f:eb:c4:3b:9d:a5:79:ac:77:
5a:9f:7d:00:69:b5:6a:ee:bc:12:2f:33:6e:30:e5:
bc:65:9e:28:31:9b:ae:53:6f:33:72:23:16:c5:87:
dd:4b:e6:8a:71:5e:4d:f3:67:4c:67:5b:2f:98:c6:
64:1b:57:72:e1:ea:c3:0b:7c:70:51:e7:a4:e4:f1:
8b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:05:6D:E2:E7:CD:BB:25:9C:D3:7F:C4:58:29:C0:02:55:33:4A:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/806a3b9f-246e-3eb2-a5c7-b7159f46dcd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.23.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:2a:0c:ed:7e:c1:08:25:af:c2:35:dc:66:10:fd:2d:05:ef:
d2:af:42:32:f2:63:3d:d8:4e:0b:67:79:7f:96:82:e8:f7:70:
04:95:55:f7:f9:2a:e7:73:bc:aa:7b:a6:69:d0:b5:2c:fc:8b:
c2:df:58:11:66:4a:e2:68:fd:fe:9b:14:db:4e:41:95:bd:ff:
24:32:ee:f7:69:1a:f1:b5:7f:75:b4:57:dc:b8:54:45:69:9a:
45:1a:e9:84:15:8b:1c:51:dc:cc:87:99:ee:f9:5f:f4:28:60:
09:32:8b:55:ad:b6:9a:16:a3:94:e9:09:8f:83:7a:6b:45:70:
b8:5c:77:0a:4c:0c:63:98:07:30:73:61:30:0c:de:df:be:c8:
69:0a:97:75:8a:9c:af:fb:51:dd:89:87:29:3e:8e:6e:e4:d9:
09:08:2b:c7:b2:a8:89:eb:9c:63:38:b8:c5:01:01:3d:b3:fe:
52:42:e6:8d:57:2c:61:83:99:14:36:50:a3:0e:4f:3e:32:10:
c5:2c:3c:3c:8f:f9:8c:65:19:19:cf:45:e5:95:bd:55:b6:ce:
de:e8:5e:e3:c6:3f:2f:7c:4c:15:33:e9:e1:10:60:56:d2:f8:
af:e6:d4:a7:f9:ca:a4:12:d8:e1:8c:07:6c:ab:9f:15:c2:a0:
91:1f:a9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:01:19 2026 by rpki-client