
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/035b5f20-dc11-3ab2-aea9-25fce532f437.roa
File: 035b5f20-dc11-3ab2-aea9-25fce532f437.roa (raw, json)
Hash identifier: VMaxFKZD7C137zkYGg2TXTPVAQeNDQ12RSKXOk4R/X4=
Subject key identifier: 28:99:29:BC:43:89:E3:37:CB:CD:29:E3:76:C0:F3:6D:51:7A:03:64
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EA78FB31097FD3751C8217DD0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/035b5f20-dc11-3ab2-aea9-25fce532f437.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 13335
IP address blocks: 104.22.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8f:b3:10:97:fd:37:51:c8:21:7d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=67fab9da-669c-4e10-bbef-77339d5e13cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:85:c7:33:5f:e6:51:d0:62:95:44:1a:5d:
4b:0c:0c:c0:54:02:83:64:bc:2b:f6:40:05:33:67:
4f:1e:38:0d:f2:10:f4:84:1f:40:93:80:00:d9:95:
2a:16:45:01:71:2f:e9:3c:9b:93:e2:8f:61:ab:7f:
90:d7:60:dd:7e:c7:47:95:d0:0f:5f:ea:44:eb:19:
14:4b:e4:af:f9:6f:a9:49:01:48:2c:2c:a8:2c:50:
82:05:5a:ae:a4:9a:1a:b6:69:05:51:5d:f2:07:ba:
ee:5c:4a:9f:df:d3:f5:97:1a:0c:33:d8:d7:09:7d:
29:e6:96:56:98:e0:ee:fe:bd:15:70:be:66:aa:7b:
90:b4:74:d6:6a:2b:77:73:8b:21:59:34:2c:44:5b:
87:9f:ba:a5:13:65:7a:fc:88:69:6c:bc:6e:e3:a3:
75:1f:49:fb:a6:66:76:2a:54:fc:13:bc:dc:f1:42:
53:61:7b:30:4e:74:11:42:db:f7:06:8f:71:36:fc:
ee:7d:28:d3:dd:4f:82:ba:82:a9:78:8b:e6:4a:d5:
ce:32:20:90:4d:bd:6f:20:f7:4b:a7:ff:7f:8c:37:
b6:ce:ff:d8:7d:ff:34:74:15:5a:d9:da:57:fc:2f:
3b:6f:04:0c:72:a0:06:cd:b1:6e:f7:33:1e:60:6d:
67:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:99:29:BC:43:89:E3:37:CB:CD:29:E3:76:C0:F3:6D:51:7A:03:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/035b5f20-dc11-3ab2-aea9-25fce532f437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.22.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:f4:f4:58:e7:5e:1d:57:8d:60:1b:0b:e9:e7:f7:28:10:01:
d6:29:f6:d1:3c:be:83:47:5d:00:a1:5f:6f:69:9a:5c:3c:f2:
69:67:34:a2:15:31:fc:ab:15:a7:d2:d9:6a:2f:eb:fb:35:d8:
81:6f:7b:2e:74:80:90:bf:d8:72:b0:79:f7:2f:7b:9e:66:30:
c7:e2:b0:fe:5b:90:39:cf:10:cd:c1:fd:47:e5:49:1b:5f:af:
df:9d:23:07:69:50:7a:55:ea:79:c8:2c:59:08:e4:d8:79:2c:
10:f8:75:a5:71:a3:b6:e8:97:a0:46:17:3b:a1:85:4a:b9:70:
5c:80:bb:45:28:c5:bf:60:1c:c1:46:33:7f:90:8c:16:b9:eb:
22:d5:29:ca:3d:36:9e:50:b8:3c:00:4a:34:02:5b:16:36:52:
40:3e:0c:0d:19:b0:1a:85:c6:c1:00:d8:1e:2c:a9:0d:1c:28:
95:59:d0:91:0d:8b:4e:97:4c:92:c5:0e:98:46:ce:31:5d:54:
05:0b:66:a3:db:e8:df:72:0a:9e:c1:97:1b:4c:63:43:cd:78:
f3:73:d5:0d:57:d3:2a:2b:78:5d:3a:11:27:e5:4f:6d:e8:71:
58:f7:8c:68:6a:e5:66:e8:4a:ef:d0:4a:8a:6e:22:0e:65:b3:
6c:52:4d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 02:53:37 2026 by rpki-client