
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/640eab37-d266-3075-b792-e19cef7189dd.roa
File: 640eab37-d266-3075-b792-e19cef7189dd.roa (raw, json)
Hash identifier: iOGv19HbHIdfeerDM5WiN+yBnz5wTYhZ/Q141jMaCsc=
Subject key identifier: 31:CD:41:BE:B7:F4:27:7A:81:F9:F8:4E:C1:97:EA:79:DA:8F:60:3A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D95F01E8268B6F41455D1F1C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/640eab37-d266-3075-b792-e19cef7189dd.roa
Signing time: Wed 22 Apr 2026 01:00:23 +0000
ROA not before: Wed 22 Apr 2026 01:00:23 +0000
ROA not after: Tue 21 Jul 2026 01:00:23 +0000
asID: 13335
IP address blocks: 104.23.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 11 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:95:f0:1e:82:68:b6:f4:14:55:d1:f1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 22 01:00:23 2026 GMT
Not After : Jul 21 01:00:23 2026 GMT
Subject: CN=b704aa02-8955-4169-bd78-dae68a599f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:fe:18:b6:27:79:a1:b3:10:23:62:3e:ba:
a5:c9:5a:7b:12:28:0f:34:85:3c:5c:2b:e0:35:8b:
4a:94:32:3a:a7:34:1e:21:90:ae:a3:ca:c7:f7:d8:
fe:e9:bb:ad:b8:2d:14:bd:34:63:21:27:d2:4c:84:
63:6f:61:7b:e6:d8:8d:ae:82:f3:5c:58:83:87:7c:
78:7e:6b:c5:89:f8:56:68:13:c6:7b:04:79:1f:e9:
f8:88:30:0d:2c:76:b5:0c:c6:63:f6:28:8c:a5:6d:
c3:9c:74:7e:97:a6:e4:52:61:d9:14:1a:1e:15:5e:
f8:25:3a:22:29:66:4a:25:a8:f3:2d:b9:42:44:08:
bf:85:c6:ab:a8:1f:60:2f:2e:28:8f:93:89:72:81:
61:db:43:7a:51:23:4b:d6:27:b8:69:0c:1e:b0:90:
37:21:c4:be:c8:c2:5c:7a:a4:64:2c:ff:66:2d:9e:
fa:11:ee:ad:4f:3f:52:26:e5:31:d2:33:79:57:33:
bd:3c:78:aa:b9:48:e3:f5:7e:76:b2:df:f0:de:88:
4b:c9:72:4e:17:9e:2d:a5:83:e4:41:82:47:31:b4:
6d:3b:f0:05:92:62:d8:78:b9:dd:c7:c4:94:e0:d1:
66:6e:8b:36:d2:e9:c1:0b:09:af:cf:79:7c:41:b3:
6a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CD:41:BE:B7:F4:27:7A:81:F9:F8:4E:C1:97:EA:79:DA:8F:60:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/640eab37-d266-3075-b792-e19cef7189dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.23.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:0a:7a:ed:21:18:fe:37:69:f8:1d:86:81:17:af:76:9f:30:
5a:f2:f9:19:06:b2:96:a0:33:be:b6:4a:95:35:c7:d9:a0:a2:
91:cb:70:6a:cb:13:26:3c:cf:c7:98:64:5e:f3:da:b3:1e:b8:
34:57:9f:36:cd:8a:25:2b:9d:99:96:22:31:99:a0:69:1f:fd:
3b:0b:6c:a5:db:73:20:54:ef:4e:bc:62:60:1a:fe:35:7c:86:
05:9b:b9:7a:52:80:a8:98:c8:cd:99:5f:74:1b:6e:c4:a8:4c:
a2:43:ca:0f:a5:d6:ad:1a:4f:5a:60:fd:57:a6:3a:7e:18:6f:
cb:f3:3c:aa:ea:8f:38:30:8f:54:48:2e:b9:85:61:81:d8:8f:
7d:c9:00:a0:cd:d1:51:07:93:f3:99:94:57:1d:4a:23:e9:ee:
27:1d:41:bb:cd:dc:bc:08:09:22:21:12:f9:4f:0e:1b:7f:6d:
4a:8b:8f:13:25:aa:f4:ad:6f:07:cb:53:20:b6:bd:41:1f:f3:
27:d7:17:66:71:e3:4c:c0:a1:e4:7b:82:d9:92:64:64:15:45:
cb:98:41:4f:d0:aa:ff:dc:a6:10:e4:f7:ff:dc:76:af:ba:3c:
8d:1b:e5:fb:3b:7d:38:e8:2b:aa:76:b4:df:00:cc:ed:39:cd:
e5:ae:c1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 08:12:05 2026 by rpki-client