
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9658de1-abe2-3472-8d8e-a80e77b50ad4.roa
File: c9658de1-abe2-3472-8d8e-a80e77b50ad4.roa (raw, json)
Hash identifier: OeWLLPsnsOV6vtQwkZ6TBNnd6UHlj+mzmIsKpnIodOo=
Subject key identifier: 66:AB:C7:3C:09:5C:C6:8C:E1:6A:39:B3:04:C2:39:0A:05:79:8C:00
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E48249805C39C2572C43F2A80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9658de1-abe2-3472-8d8e-a80e77b50ad4.roa
Signing time: Wed 24 Jun 2026 21:00:12 +0000
ROA not before: Wed 24 Jun 2026 21:00:12 +0000
ROA not after: Tue 22 Sep 2026 21:00:12 +0000
asID: 13335
IP address blocks: 104.18.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:48:24:98:05:c3:9c:25:72:c4:3f:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 24 21:00:12 2026 GMT
Not After : Sep 22 21:00:12 2026 GMT
Subject: CN=d6c5ea6b-8ec9-4b3f-aa71-7d6ddd6b3325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:6a:1f:8c:21:56:f3:ee:7c:81:4a:f4:5b:
fa:e2:95:1c:e9:a4:c1:2e:3c:1f:93:99:5a:96:05:
3e:5e:a8:0c:84:6b:9b:d5:87:91:0a:7d:67:1a:fd:
db:7f:6a:a5:5c:9e:5e:79:a3:07:88:7e:e2:d5:58:
2a:38:38:02:7b:d4:cc:9e:df:5d:bb:d8:ac:a1:48:
a4:07:dd:08:f1:1b:c4:10:bb:ad:f9:d1:14:dd:a5:
4b:1d:d8:f5:0a:e1:b4:5e:e0:4d:17:c8:05:fa:f7:
05:89:94:da:95:7d:70:95:76:86:33:71:a7:64:d6:
fe:ce:5a:f9:12:a5:2c:49:d4:5d:34:65:4b:f5:b9:
4f:d1:71:4e:a6:04:55:b4:e8:05:fd:1c:c6:b8:32:
1d:28:24:fd:17:1d:06:e8:02:7b:e5:81:9f:c2:f9:
c7:7f:21:6d:9a:56:54:cb:96:86:aa:fc:b4:34:2f:
74:0f:86:a5:be:f4:a7:76:0f:b9:d8:3b:fe:bc:79:
42:2e:bd:a7:cb:fa:4b:52:a9:ac:66:83:d4:7f:1d:
00:a8:fc:d7:76:34:6b:3f:9f:76:25:c7:7b:af:56:
04:1d:c6:8c:48:9b:af:d6:be:f8:c9:11:78:5f:d3:
f5:b4:17:31:b1:29:c9:1f:64:3b:88:d5:a7:e8:5f:
54:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AB:C7:3C:09:5C:C6:8C:E1:6A:39:B3:04:C2:39:0A:05:79:8C:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9658de1-abe2-3472-8d8e-a80e77b50ad4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.18.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:e7:72:af:b8:66:0b:49:50:b3:73:46:45:09:b8:ba:0c:02:
35:5e:66:ea:45:c9:92:16:54:65:4e:11:f5:1a:98:13:fc:33:
66:41:3d:5f:4e:63:87:9f:4c:2c:13:5e:bc:43:84:5c:3d:d9:
29:4a:53:83:69:29:f0:fc:45:a2:86:44:bf:ba:fe:ee:25:b9:
42:d3:86:00:a8:ba:b6:9e:52:b9:5f:42:0b:22:e0:21:ab:53:
e3:ec:63:10:ef:df:25:75:82:c3:a4:59:30:2a:a2:5b:f4:9e:
b2:2b:0f:5d:4f:d3:70:dc:58:ee:2b:b4:72:0b:a7:80:36:8a:
9c:38:95:d6:66:49:a7:66:43:53:63:de:56:2d:19:10:06:0b:
af:3c:1f:04:e3:ad:bf:81:fe:b7:90:9a:72:79:3c:ba:30:18:
22:af:4d:64:92:b2:f5:3a:57:b5:8a:1d:5d:92:3d:e3:a5:78:
bd:25:a6:3c:c1:76:c6:28:27:3d:ff:a1:cd:0f:11:e9:f1:9f:
1d:4e:6b:36:b1:49:7e:39:6e:df:5c:bc:1a:28:3d:c3:7b:50:
cf:43:d2:41:50:d1:4c:5d:d9:ca:82:39:ea:37:2b:d3:15:84:
81:6c:ee:21:9e:d0:dd:20:8e:44:2e:2d:00:56:58:9c:e0:4b:
05:20:a5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:24:35 2026 by rpki-client