
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/654ebbd6-d45d-394f-9ca4-182851f75abc.roa
File: 654ebbd6-d45d-394f-9ca4-182851f75abc.roa (raw, json)
Hash identifier: n/sczhIRaHuFtVcCirhjStO+sEsVFSDUjpDAMakgdr8=
Subject key identifier: CC:12:37:EE:E1:75:11:3B:E6:82:2F:B2:D0:02:4F:E1:27:73:38:73
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E4824A78C73013FE2A506AA80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/654ebbd6-d45d-394f-9ca4-182851f75abc.roa
Signing time: Wed 24 Jun 2026 21:00:12 +0000
ROA not before: Wed 24 Jun 2026 21:00:12 +0000
ROA not after: Tue 22 Sep 2026 21:00:12 +0000
asID: 13335
IP address blocks: 104.17.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:48:24:a7:8c:73:01:3f:e2:a5:06:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 24 21:00:12 2026 GMT
Not After : Sep 22 21:00:12 2026 GMT
Subject: CN=f81d71a3-b178-439e-8ab3-cfe2bc016b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:65:06:24:66:91:1e:b5:ee:0f:81:15:db:
c4:e5:ee:ab:13:52:30:24:0d:e0:ab:14:ba:21:c8:
d3:e6:f3:b0:2f:c2:8b:c3:23:5e:05:9f:46:a3:23:
a2:d7:6f:1c:de:21:51:4f:d8:83:a1:4e:37:90:a7:
b2:aa:03:59:6c:07:96:2d:28:bc:43:7e:7f:55:0f:
bf:16:89:0a:91:5d:4a:22:59:90:a9:ee:dc:a3:f6:
ff:e9:66:29:2b:be:28:33:5d:57:fb:fc:b5:73:84:
cf:7e:f9:12:88:fd:ae:42:d0:74:ad:36:35:2d:a5:
04:b9:21:3c:91:b4:1f:11:63:e6:c8:a2:78:4e:bf:
dd:c6:f8:91:9b:c1:e3:c4:51:b8:93:d8:d1:49:19:
79:de:90:e6:92:95:f0:7b:43:93:11:fb:28:20:6d:
5b:a0:e0:01:69:0b:94:1f:80:54:5c:13:1f:2d:71:
43:1c:c8:c7:ed:02:ea:d7:fa:a9:ce:12:8f:d8:49:
32:00:53:00:a9:8e:da:2e:a1:f5:a8:5e:e6:f6:e9:
fb:dd:6f:99:e0:64:b6:1c:99:10:db:ad:5b:cf:fe:
20:6c:0e:11:01:c9:12:8a:56:61:1a:71:05:5d:0e:
19:62:3d:ac:b4:c5:00:c7:66:98:d4:3b:06:9e:a4:
f6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:12:37:EE:E1:75:11:3B:E6:82:2F:B2:D0:02:4F:E1:27:73:38:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/654ebbd6-d45d-394f-9ca4-182851f75abc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.17.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:97:11:1b:e0:e1:8e:bb:23:ab:67:de:a9:f6:cb:cd:79:eb:
3c:bb:0f:07:14:4f:af:a8:58:dd:bb:84:95:65:cb:12:8f:f0:
c0:30:80:b0:1f:6d:9a:c7:f5:ae:d2:bd:29:b9:1a:78:0a:9e:
d0:e5:48:05:62:12:70:49:30:92:6e:1f:49:75:6c:1e:60:17:
62:44:c2:f4:51:1f:38:04:12:08:a1:29:83:fb:3e:72:cb:be:
fd:95:28:ca:17:25:20:01:56:1a:c6:cf:39:06:eb:96:8b:75:
1d:9a:80:31:ac:d4:7b:76:f4:1d:84:17:fd:cf:24:b3:17:3b:
d4:c7:48:ff:62:4c:7a:0e:8e:e5:c8:e9:76:ff:33:1b:46:70:
b6:78:51:12:36:ca:11:66:5c:e8:46:6b:9f:c7:7e:c2:ac:48:
da:fe:a1:fb:1d:b2:b8:5f:4a:9d:9e:64:fd:35:4b:03:6a:b8:
bb:f0:33:9a:86:35:65:a1:67:e3:61:13:35:e8:22:56:32:76:
6b:2c:60:37:12:1c:69:78:d2:0a:25:a0:8a:17:6f:44:29:77:
a0:81:03:e6:a0:03:4a:8f:ef:a9:c9:50:dc:35:ed:67:64:41:
d0:c1:2b:49:5d:92:33:70:8e:f0:d2:b0:4d:23:ed:39:18:be:
b4:c5:73:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:53:17 2026 by rpki-client