
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/689ea0e3-dc9d-3a2d-9bc0-2bff35dfdc4d.roa
File: 689ea0e3-dc9d-3a2d-9bc0-2bff35dfdc4d.roa (raw, json)
Hash identifier: HJk9ZbIKB8/ralThw/hgoOjP7XdRYWMFn+/GrnxKtGM=
Subject key identifier: 47:1D:C1:E2:C6:FF:A1:0E:D5:8F:87:8A:F2:35:FA:08:D1:FA:13:42
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E48249648B525337E19B3A680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/689ea0e3-dc9d-3a2d-9bc0-2bff35dfdc4d.roa
Signing time: Wed 24 Jun 2026 21:00:12 +0000
ROA not before: Wed 24 Jun 2026 21:00:12 +0000
ROA not after: Tue 22 Sep 2026 21:00:12 +0000
asID: 13335
IP address blocks: 104.17.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:48:24:96:48:b5:25:33:7e:19:b3:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 24 21:00:12 2026 GMT
Not After : Sep 22 21:00:12 2026 GMT
Subject: CN=01288ea4-b0b7-4f24-9916-19133225f57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:f8:e1:b7:f0:e7:8c:cb:91:b8:e7:c4:5b:
c2:f8:97:a4:44:d7:9f:e8:25:b6:be:da:7a:34:17:
2b:83:50:67:be:73:36:06:98:0f:c3:bd:be:46:14:
53:46:0d:4b:10:3f:f5:5a:5e:df:13:de:86:9b:1a:
c3:25:c3:65:43:e7:9b:2f:1c:8c:66:f9:c5:3a:d5:
2e:14:41:47:fd:6c:64:13:99:e3:e4:67:8b:89:a4:
cd:1f:7a:94:59:2e:e3:8e:f5:ad:97:4e:2d:86:5f:
07:ef:c5:d7:2b:76:4f:af:b6:95:6f:cd:27:b6:4c:
20:06:15:c6:d8:8d:6a:43:80:b7:b8:76:bd:44:82:
e7:1a:55:84:a2:15:32:c4:03:90:2b:21:cd:cc:ea:
d3:54:fd:61:55:83:c4:d3:d3:0a:01:76:83:db:f2:
54:9f:13:da:30:0c:23:52:69:bc:d9:1c:40:bf:60:
c1:21:aa:78:e5:ef:1d:06:b6:79:48:52:96:dd:dc:
7b:fa:31:41:d8:18:dc:1e:3d:68:57:86:21:37:34:
b6:57:22:0e:e1:46:9e:28:e1:9b:14:15:64:bb:a8:
c8:10:9b:e1:e9:94:14:42:2a:73:8a:ee:84:bf:a0:
ff:ee:88:cf:ef:5a:02:ce:df:82:a3:dd:97:54:10:
79:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1D:C1:E2:C6:FF:A1:0E:D5:8F:87:8A:F2:35:FA:08:D1:FA:13:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/689ea0e3-dc9d-3a2d-9bc0-2bff35dfdc4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.17.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:e4:78:16:f6:20:9b:33:21:a0:01:60:df:25:f1:32:e3:ad:
b5:d4:ec:80:c5:74:d2:73:a3:28:cb:d7:61:af:2a:74:ac:07:
34:95:70:c4:4d:55:70:af:a1:f2:a4:07:33:2b:ad:66:b3:d2:
93:01:66:6a:b7:8a:e9:91:ca:c5:e5:5d:1e:7b:45:59:b4:f6:
44:3a:cb:8e:97:37:c6:7e:42:5a:0c:d5:53:91:9c:c7:0f:7c:
02:e0:66:ee:1a:6d:56:96:79:fa:f7:08:d1:4b:21:b9:5e:8a:
15:68:ae:53:9e:16:b9:57:6b:55:98:c5:94:00:31:ba:5a:c1:
fb:dc:fa:ad:13:a2:40:18:87:4a:55:69:b7:17:e5:25:77:d4:
ee:4f:75:4e:ee:93:2d:da:ab:36:00:f0:6d:00:cc:52:2d:e0:
7e:21:a2:f0:f8:cd:d6:a5:65:14:10:3b:3e:73:b4:e1:ed:8a:
b8:af:a2:8d:e5:a2:2f:48:38:70:af:da:ee:a8:64:a4:3f:3b:
d4:aa:2a:ff:95:8a:9a:10:5d:b6:d2:15:07:88:9d:22:1b:d3:
b0:a3:b0:60:73:a2:c2:03:a1:fd:78:5e:dc:90:9a:f8:3c:ae:
90:8d:26:bb:6d:64:b3:a5:4f:2b:4c:6b:94:4c:13:b3:4f:ef:
0f:13:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:46:21 2026 by rpki-client