
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1dbb4dc8-dde7-3d18-9811-7655261c969e.roa
File: 1dbb4dc8-dde7-3d18-9811-7655261c969e.roa (raw, json)
Hash identifier: GMtQqtO6Vwjo+03wVLfTDN8YcbPgtZ04GdgmGvMXXa4=
Subject key identifier: 80:0E:F8:D1:46:B6:33:56:B5:80:97:0C:04:31:F3:83:CF:24:78:04
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D95F01E8E5393AA19B9BEAF40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1dbb4dc8-dde7-3d18-9811-7655261c969e.roa
Signing time: Wed 22 Apr 2026 01:00:23 +0000
ROA not before: Wed 22 Apr 2026 01:00:23 +0000
ROA not after: Tue 21 Jul 2026 01:00:23 +0000
asID: 13335
IP address blocks: 104.22.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 11 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:95:f0:1e:8e:53:93:aa:19:b9:be:af:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 22 01:00:23 2026 GMT
Not After : Jul 21 01:00:23 2026 GMT
Subject: CN=30ee2cfa-096c-40b9-9ddb-f26b97439449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:77:29:d9:3e:b1:04:36:44:fa:db:67:9b:5c:
a8:e3:a5:ff:4a:e0:39:99:0a:56:f9:4a:29:d7:6c:
7d:78:25:03:90:25:ab:01:bf:bf:28:1b:11:2b:a3:
1a:ff:a8:0a:b0:ec:5d:b4:05:50:78:63:a0:00:7a:
2d:84:a4:e4:7a:dd:f2:e3:50:b9:13:65:5e:f9:f3:
e7:76:c3:dd:ba:af:b8:c3:dc:78:34:f1:74:f9:20:
8d:f4:99:59:7a:64:fb:cd:1e:09:f2:9f:bf:f1:b5:
c8:03:52:31:27:93:91:d0:7d:95:f1:fc:3a:83:f9:
27:ec:d7:12:09:3d:f8:8b:31:c9:e8:70:8d:dd:8c:
c8:f8:87:eb:0e:d4:7e:76:6f:3b:af:85:3d:00:00:
50:f1:7c:e8:2d:27:a3:8b:a0:6a:54:6a:bf:01:e6:
8b:8b:31:b2:43:bb:ef:1d:28:11:97:bc:7a:31:ec:
a5:b2:a5:47:08:9b:0a:d2:ee:d3:8e:80:b1:85:e7:
28:55:15:b8:47:1c:39:e9:90:dc:56:d6:ec:74:e0:
40:df:6b:0c:29:d1:7a:c9:f9:3a:ab:e8:67:e2:d9:
ca:51:a3:55:6f:e4:37:05:0e:56:65:c6:98:65:fb:
fa:7f:76:a8:89:29:53:8a:62:98:88:7c:8d:7e:1e:
83:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0E:F8:D1:46:B6:33:56:B5:80:97:0C:04:31:F3:83:CF:24:78:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1dbb4dc8-dde7-3d18-9811-7655261c969e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.22.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:2f:f5:14:b9:9b:12:42:f6:e1:0e:be:79:a5:9c:9c:1f:ac:
f5:f6:37:7e:bd:dd:f8:5b:b8:8b:d2:c6:1a:f7:81:50:44:c2:
26:b2:fe:78:1e:d7:65:ba:b9:87:07:4e:1e:3c:0d:1d:4b:44:
6b:94:58:04:4a:e2:1d:08:a2:5e:b8:c0:0c:4d:98:b9:89:8f:
5b:d4:12:95:33:26:a2:12:48:33:f4:b7:70:40:b5:58:fa:e2:
06:b0:9d:18:57:3b:91:49:23:67:df:af:d7:cc:68:b1:91:53:
80:e7:80:c6:4b:44:16:97:7b:f4:ec:9b:9c:e8:bd:c9:ac:8c:
8c:9e:d5:5a:75:07:42:4c:8b:58:1d:e2:d5:48:df:28:bc:32:
c0:ab:a9:6b:63:48:a3:c1:30:a4:f5:ac:8d:93:39:66:68:db:
1d:6f:65:a6:22:db:57:56:8e:42:a6:27:b2:85:08:fa:cf:18:
ad:35:88:a6:16:be:9c:00:72:b2:9b:8b:d9:64:12:2d:75:92:
18:d4:f3:f6:69:b6:d9:2b:3e:7d:fb:de:6d:fa:0b:ca:60:3f:
7e:52:73:93:dd:af:25:ee:83:8a:81:97:8a:63:ae:4f:d6:e6:
ab:f0:cf:07:9a:4a:2d:47:f6:d6:f8:dc:c7:bd:4b:e3:40:af:
44:e7:12:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 08:12:23 2026 by rpki-client