
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/237bb5ee-b644-329f-a60d-ee1315d4b1c0.roa
File: 237bb5ee-b644-329f-a60d-ee1315d4b1c0.roa (raw, json)
Hash identifier: a1kx+47U8bm4VtATjZLcjmM0vEfR8Rd2nbpOXtJfVwc=
Subject key identifier: EE:44:38:F2:7F:5D:B4:6B:D9:7B:60:F3:E9:02:80:03:E3:46:7C:BD
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584DA6E5AECB67BD57AD08292D00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/237bb5ee-b644-329f-a60d-ee1315d4b1c0.roa
Signing time: Tue 28 Apr 2026 02:48:33 +0000
ROA not before: Tue 28 Apr 2026 02:48:33 +0000
ROA not after: Mon 27 Jul 2026 02:48:33 +0000
asID: 13335
IP address blocks: 104.22.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 11 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a6:e5:ae:cb:67:bd:57:ad:08:29:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 28 02:48:33 2026 GMT
Not After : Jul 27 02:48:33 2026 GMT
Subject: CN=e59ddf25-3bf2-471a-8ebb-d3e34f5eecf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:55:2c:2b:73:ca:06:f4:5d:b4:bf:13:25:2e:
d1:3a:79:b3:dc:b8:db:ba:10:10:a6:8a:c0:ac:b5:
12:e3:a6:31:35:d0:27:90:e8:a2:ad:9d:bd:2d:09:
f0:a8:b0:db:67:f2:cc:1d:1d:be:5c:0e:5e:5e:30:
5c:6c:47:93:54:e8:f7:8b:ac:42:39:ea:65:82:44:
e0:ff:aa:b3:18:6b:95:68:d7:7e:1a:25:55:97:02:
bd:bb:87:fd:0f:39:95:81:dd:e8:5f:d9:2a:44:66:
97:69:07:0d:db:50:8b:7e:db:d8:b0:f0:05:21:96:
16:cd:bb:a0:97:ed:6e:90:0f:8f:4d:a1:a7:d0:e7:
c8:89:3d:d4:2d:53:5b:40:cb:6f:dc:cb:b0:ad:1e:
df:f9:0a:a2:a9:3e:f1:c0:2b:6c:51:e4:79:10:e6:
90:4c:a1:c0:a7:da:e1:50:0a:91:df:8e:c0:30:7c:
7a:44:e5:eb:6f:1c:b1:ab:bf:17:e5:a7:f3:d5:7f:
14:6c:7a:ff:30:9c:c8:a7:28:ac:76:18:74:4a:17:
ab:78:92:84:7a:7c:0d:6f:9c:f2:65:c6:2c:08:c4:
9a:aa:4a:df:da:d7:9a:6e:70:a4:e5:99:a5:7d:b4:
98:af:ee:52:4c:d3:e6:9a:84:d2:7d:c3:95:31:22:
eb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:44:38:F2:7F:5D:B4:6B:D9:7B:60:F3:E9:02:80:03:E3:46:7C:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/237bb5ee-b644-329f-a60d-ee1315d4b1c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.22.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:06:09:06:ab:02:a7:3a:3b:2b:8c:18:6a:a3:c1:f8:c9:2c:
e3:fb:80:67:56:c5:fc:8a:8c:3f:f1:fc:72:09:ce:89:af:53:
67:d9:5c:8f:12:27:20:b4:e4:c2:1a:e2:22:14:74:0f:fc:94:
f8:7f:e7:aa:a8:65:ae:d8:c2:2c:bd:81:19:ad:6b:57:84:b8:
67:13:8b:5c:da:db:d0:b8:f4:07:d4:85:75:d5:5f:0e:c7:25:
23:cd:4b:01:eb:13:63:59:86:34:c2:27:8f:2d:18:a2:e9:a0:
81:42:0f:22:63:bd:57:60:38:8f:1f:49:ff:d1:a4:3d:f8:e8:
4f:b5:c7:ec:df:a7:75:56:2e:af:95:59:a1:d2:41:52:01:c3:
c8:b1:15:98:6c:f6:28:e4:e5:2b:a0:ea:34:3b:f2:cb:4c:35:
8f:a2:32:5d:6d:e5:10:48:92:2a:3e:8c:3b:72:c1:40:af:ed:
ba:38:09:f4:fc:c8:66:c0:46:44:06:34:c1:1a:d9:e4:fc:4d:
da:25:e7:9f:6c:e9:e6:89:aa:41:b4:75:7e:4b:4f:ca:54:b1:
e3:72:b9:b3:a2:a9:24:3a:11:f1:39:16:47:a2:4e:8b:76:25:
f7:29:79:b0:83:8d:aa:e6:6d:3e:6c:01:a4:be:dd:dd:32:cd:
da:06:93:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 08:09:44 2026 by rpki-client