
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d512a5b9-fcfc-3701-9851-813b18aa100a.roa
File: d512a5b9-fcfc-3701-9851-813b18aa100a.roa (raw, json)
Hash identifier: rmXbzX0Iq1Urnew4eqjnGNscf3ErP2IFUAhsK03Xl8Y=
Subject key identifier: 9F:02:6B:B9:37:35:44:33:F7:77:42:42:37:5B:78:FD:2A:AD:7A:17
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E842A32A35D59830A17E24800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d512a5b9-fcfc-3701-9851-813b18aa100a.roa
Signing time: Thu 16 Jul 2026 09:00:12 +0000
ROA not before: Thu 16 Jul 2026 09:00:12 +0000
ROA not after: Wed 14 Oct 2026 09:00:12 +0000
asID: 13335
IP address blocks: 104.23.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:84:2a:32:a3:5d:59:83:0a:17:e2:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jul 16 09:00:12 2026 GMT
Not After : Oct 14 09:00:12 2026 GMT
Subject: CN=66173f1b-19ef-4658-9d7a-09f69dd93570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e3:92:a3:e9:aa:03:36:d3:99:b7:40:00:80:
bb:de:02:40:80:74:70:da:ee:6e:8b:db:e1:9b:dc:
e8:66:11:9c:96:50:64:3c:8c:41:c7:6e:eb:69:33:
b5:c1:e4:ea:71:30:57:d9:39:4a:91:5d:6c:c0:46:
d0:a6:af:60:cd:04:4c:06:5e:98:90:b0:ec:68:54:
08:a2:e6:a7:cb:82:dc:6b:10:e6:98:12:2c:05:82:
3e:54:af:92:06:bb:61:df:95:85:74:19:08:c8:3b:
22:8d:5d:3c:17:76:42:b0:58:42:c7:f6:40:c6:b7:
3c:b6:c9:e2:a6:38:57:e3:fa:e2:2e:aa:b4:0e:5d:
e3:4b:bb:39:64:af:da:b9:de:f4:68:64:03:46:8b:
67:75:18:d3:67:b5:3c:b7:7b:25:37:e7:3f:af:24:
ea:9b:2e:7e:69:80:d3:29:3b:9b:73:75:90:cd:ad:
ef:ce:45:1d:a2:7a:2e:9e:de:5d:5d:95:75:86:9c:
38:dc:d7:b1:e8:8c:ba:0d:86:d4:0f:70:e6:58:09:
55:f0:25:2e:62:d5:ad:21:59:ad:18:a9:aa:22:3b:
ea:1c:6d:6b:4a:b2:53:e8:a2:b2:3b:80:6c:85:e8:
12:2d:75:c2:35:94:dc:f8:ce:ca:84:f4:54:4b:da:
89:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:02:6B:B9:37:35:44:33:F7:77:42:42:37:5B:78:FD:2A:AD:7A:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d512a5b9-fcfc-3701-9851-813b18aa100a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.23.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:9d:cc:6b:2a:09:13:da:0d:b2:01:b2:fd:3c:d1:07:cd:86:
71:de:2f:7c:65:da:3e:41:26:c3:97:98:5b:3e:4f:da:24:54:
ce:94:65:35:56:ac:e8:3a:68:99:2e:66:5c:e1:af:05:cd:67:
d1:70:b1:7e:89:be:38:d4:7c:2a:ce:dd:d7:2b:00:e2:60:1c:
30:72:be:cc:a7:3f:6d:23:54:66:0a:f3:31:e6:ef:bb:62:12:
db:1b:56:75:05:b2:ad:f1:5a:7f:78:3c:22:e5:df:a2:b8:2b:
01:bb:c3:4e:41:57:b4:a8:c9:07:96:ea:61:81:e0:25:7a:4d:
12:87:80:a1:b1:a5:8b:72:29:55:3c:06:04:cf:9c:8d:b7:56:
aa:01:52:f6:ad:42:0c:fd:09:47:80:7f:11:5f:09:cc:df:ed:
88:9d:2e:c9:10:a7:21:1d:3d:48:5f:28:7d:0b:96:a6:2c:59:
5a:fd:cf:f0:ff:01:46:2b:a2:a0:0b:78:e7:ac:14:36:cb:a8:
66:39:95:e8:76:a9:52:ab:5e:fe:52:74:0c:9c:6c:e2:8f:f4:
ca:7e:9f:9b:a8:96:2b:c6:dd:41:40:90:38:9d:71:7a:89:be:
39:fd:42:2f:91:b0:59:9d:5a:71:ed:57:83:e4:ff:a7:92:15:
d4:f2:3e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:30:45 2026 by rpki-client