
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33d14e30-0688-3ba8-a5e0-4d260a3376d4.roa
File: 33d14e30-0688-3ba8-a5e0-4d260a3376d4.roa (raw, json)
Hash identifier: 1TKYcRsnmM/IbsidQo3Nup8NQ+K9HHQ3Ruja+izlWUU=
Subject key identifier: A0:E7:DE:8F:92:9F:D1:AF:52:34:DC:B5:56:0D:0A:6F:4D:38:8D:00
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EE795F0E9026DE535B93E0710
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33d14e30-0688-3ba8-a5e0-4d260a3376d4.roa
Signing time: Thu 20 Aug 2026 23:42:21 +0000
ROA not before: Thu 20 Aug 2026 23:42:21 +0000
ROA not after: Thu 19 Nov 2026 00:42:21 +0000
asID: 14789
IP address blocks: 104.22.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e7:95:f0:e9:02:6d:e5:35:b9:3e:07:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 20 23:42:21 2026 GMT
Not After : Nov 19 00:42:21 2026 GMT
Subject: CN=e591d4d9-bb18-42e0-93fd-097e4a5a802b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:b9:3b:bb:9f:b7:9b:7a:1d:49:31:cf:35:
86:59:ae:df:a3:ae:9e:23:bc:e3:10:fc:f4:9d:3d:
b4:2c:61:5f:b9:65:63:58:92:7b:fb:bd:46:1a:a8:
e7:0e:42:49:24:61:21:2b:8e:35:fb:ad:90:ae:36:
c9:ee:0a:a4:91:53:74:a6:f7:02:82:b8:16:2a:9f:
23:fe:eb:68:0c:9f:54:e8:5b:30:15:59:83:b0:17:
cc:06:69:ce:24:e7:ef:7c:00:fe:6e:74:a2:02:63:
da:b6:25:7f:db:9a:70:e2:d2:4e:c1:cd:c6:e9:a1:
e3:e9:80:11:27:a7:19:e8:c4:55:32:a7:75:47:31:
c7:06:10:14:6c:26:9e:cd:0a:cb:6f:b6:d4:61:fe:
db:39:31:27:9e:eb:7b:bf:fb:5b:70:7e:ab:df:89:
3f:1f:e9:3f:31:58:59:2b:48:2a:2b:65:87:b7:cb:
65:0e:be:cb:96:9d:fe:52:e3:28:06:38:88:ab:0d:
17:6e:f6:e5:8e:27:c6:e3:78:84:10:d2:c4:2b:14:
82:de:bb:e2:a6:31:a5:75:28:8c:03:ab:e1:f2:c7:
d7:ad:94:a1:e5:6c:d5:dc:d6:74:a1:75:c0:2e:4f:
3e:38:dd:5a:d4:f1:c5:5b:81:3c:21:26:35:37:3e:
0c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E7:DE:8F:92:9F:D1:AF:52:34:DC:B5:56:0D:0A:6F:4D:38:8D:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33d14e30-0688-3ba8-a5e0-4d260a3376d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.22.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:56:72:b3:0e:81:2b:fb:bb:6d:37:fb:9d:df:44:8f:97:94:
73:32:b1:94:01:90:aa:37:0a:c9:8b:b1:5d:86:52:22:34:14:
20:fa:ea:ed:ab:1e:f3:48:b0:e0:d1:88:b0:02:63:cc:70:1e:
07:68:3e:f9:e6:e3:48:dc:64:a7:4d:d4:bc:25:4c:ed:92:c9:
81:14:70:23:61:01:ed:b1:4c:db:e0:e5:2e:46:a2:31:17:21:
e8:26:0b:b4:bf:d7:7c:3a:c1:58:5d:d1:7b:98:23:98:2e:dd:
4a:52:78:ac:b9:ed:5e:a2:31:97:28:b9:62:c3:65:28:3b:9b:
e8:d3:2d:9c:74:30:69:94:43:1e:21:89:d3:6a:f9:e8:e6:b5:
4b:69:97:43:18:f0:b0:de:9d:aa:49:ec:c6:40:59:d9:1a:56:
76:19:24:84:78:f5:90:51:a5:c3:d7:b5:16:ab:ca:91:9c:23:
f3:98:45:d1:41:b3:a7:1e:4d:2e:12:58:75:17:92:33:1a:f4:
0d:1a:11:1c:28:dc:bc:9d:16:4c:1c:8e:3d:e5:4c:cb:7b:a9:
3e:90:6e:7f:7d:c6:f6:28:73:63:65:aa:d5:c6:57:de:68:a8:
b3:17:21:bb:73:b7:0f:d9:3f:38:a5:9f:c4:45:05:74:0f:f3:
f9:5b:23:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:06:21 2026 by rpki-client