
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e630ab7-7924-33a2-9a13-0c566fc5de0b.roa
File: 7e630ab7-7924-33a2-9a13-0c566fc5de0b.roa (raw, json)
Hash identifier: 3VtIU6LDrtcFsFXZQc27cFFJv4eCc851gzdlqIeMtyE=
Subject key identifier: 9E:3A:3F:4D:29:7B:6B:8F:55:05:DA:BE:11:4E:A1:B7:96:21:AE:40
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EEA8768C4EDA5CE0D84573D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e630ab7-7924-33a2-9a13-0c566fc5de0b.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 104.19.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:68:c4:ed:a5:ce:0d:84:57:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=cb283471-3b65-4316-afe5-e321dea4ffd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:aa:49:ff:ce:c4:71:82:bf:d9:7e:3f:2e:
dc:79:88:d5:6e:a9:ee:ce:4a:99:7d:85:da:98:a2:
bc:68:27:54:98:c1:0a:cc:6d:06:e8:38:1c:37:33:
b3:0e:ed:ec:62:fc:ef:43:3f:e8:28:93:2b:0a:4a:
2c:44:e6:9e:bd:98:6f:bf:09:d4:fb:b3:bb:09:28:
5d:07:c8:55:39:e8:7e:32:d3:01:40:69:0c:82:67:
63:f6:42:b5:39:70:d1:00:39:30:4a:de:9f:ca:0e:
81:00:a0:37:88:94:67:96:f0:3f:50:a0:a0:75:ae:
e1:35:83:d5:7d:fd:12:a5:be:dd:c1:6e:7e:43:7c:
e8:be:7d:7b:63:67:32:67:d3:10:16:2d:ab:11:e1:
1b:a5:d8:53:8b:9c:7a:9a:12:a6:d8:9c:e8:92:49:
ea:e8:42:0c:56:cd:a3:cd:ba:46:25:eb:be:cf:8b:
50:46:cb:7c:40:52:d3:50:43:9e:88:aa:70:51:29:
57:d3:42:31:5f:a8:e8:95:74:e4:59:e4:c9:9d:f0:
c0:aa:3b:c4:47:21:e0:81:19:45:32:03:f0:91:9c:
7a:82:8b:df:f6:06:85:cf:68:f0:ed:db:a8:b3:cc:
5a:6a:bf:12:25:b8:89:a1:06:54:8a:07:11:5e:48:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3A:3F:4D:29:7B:6B:8F:55:05:DA:BE:11:4E:A1:B7:96:21:AE:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e630ab7-7924-33a2-9a13-0c566fc5de0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.19.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:69:1b:ee:c4:c4:be:a3:e5:60:04:ba:04:b9:a3:23:48:56:
e6:5e:3c:8a:ec:a0:7e:b6:06:72:78:e0:02:56:08:d7:77:03:
88:10:35:2e:73:3a:11:9b:aa:99:46:c9:79:e7:37:53:39:18:
65:c0:99:c7:27:c3:64:30:aa:3f:26:e8:32:b7:2d:ad:06:77:
2a:b4:0d:a2:ef:ba:97:ab:ed:66:e2:f9:3f:fa:d9:43:4e:ec:
26:87:8e:72:03:d1:39:02:56:7d:14:50:cd:52:13:c1:27:c0:
41:1c:17:c1:a3:bf:d4:1d:09:e9:66:fb:d0:9a:22:e1:e1:95:
92:cb:be:aa:72:95:af:03:e0:5b:e1:ef:3c:2d:85:b8:98:4b:
3d:23:4a:1d:13:b8:fc:af:b9:6f:7f:ae:ec:fa:b9:7f:ed:46:
42:5e:74:4c:0f:6b:bb:f2:c0:14:53:9e:f7:28:10:53:5f:c5:
3d:0c:39:c7:62:6b:1d:78:45:b9:cd:ce:8c:ac:a1:12:aa:eb:
fd:6e:78:7e:c0:fd:5a:9b:f1:c6:18:b7:a1:88:25:35:9d:3a:
92:b7:95:8c:e4:bb:8b:d4:49:33:9e:47:7f:5f:4f:53:35:db:
dd:a9:c1:35:66:7e:2b:3e:85:35:d5:e3:ef:e5:be:53:e4:2f:
ae:22:09:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:55:15 2026 by rpki-client