
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/89e354ac-6b81-38a4-af68-dd79a9319721.roa
File: 89e354ac-6b81-38a4-af68-dd79a9319721.roa (raw, json)
Hash identifier: biT93wxux73Pz49v7Mt7UdN0Tr6GW2upDuTXIcng7Fs=
Subject key identifier: 34:D9:09:64:B7:C9:89:4F:40:E6:C5:2C:86:2D:DA:EF:8B:FD:18:41
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EEA8768F528E37DE0D66DFDC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/89e354ac-6b81-38a4-af68-dd79a9319721.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 104.19.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:68:f5:28:e3:7d:e0:d6:6d:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=cd65c964-1d0a-47b5-a189-8dff71364eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:1c:e6:9e:5f:61:14:30:40:51:1c:a0:ca:
ec:a5:38:df:0b:b9:2f:a6:72:89:e0:51:5b:63:38:
bf:fd:2e:a6:ef:07:37:8d:5f:02:4a:d8:7e:79:2e:
dc:d7:7c:3e:94:c1:05:13:7f:ac:2d:db:d6:8a:21:
3a:e0:3d:6a:dd:12:e7:0b:e8:9e:d9:97:41:17:74:
76:3d:5a:cc:84:ea:dc:d6:c0:f2:e2:93:2d:71:c2:
8e:a9:43:c0:53:43:90:fc:90:09:e5:06:f1:d7:36:
ba:95:3a:3b:0a:7c:df:68:2d:6b:8d:6f:e7:4d:42:
77:a1:ef:2c:f0:71:c1:81:ea:14:9d:17:04:a2:64:
88:40:42:24:32:b4:04:19:10:91:d9:f5:6b:49:2b:
37:ec:38:90:85:06:e4:dc:42:bc:23:43:7b:5a:11:
f8:a5:d9:d5:a2:f8:55:57:2f:5a:ed:50:64:27:0c:
76:b9:4e:4e:b8:27:79:9e:4c:60:00:51:71:d8:d0:
1e:c8:c5:29:ae:11:fe:b4:ef:af:24:25:8b:29:af:
de:71:79:4a:0c:2b:b9:2d:54:a2:20:61:3b:bb:b9:
c4:b2:b4:97:50:98:80:53:26:d2:1b:ce:df:40:81:
cc:d1:5a:17:b4:85:ec:ee:9b:3b:f9:8f:0f:90:48:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D9:09:64:B7:C9:89:4F:40:E6:C5:2C:86:2D:DA:EF:8B:FD:18:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/89e354ac-6b81-38a4-af68-dd79a9319721.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.19.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:ed:20:71:a7:fd:0b:fc:a4:2e:10:21:54:65:09:dd:8b:ad:
34:bb:61:f2:23:22:3f:78:50:88:e1:ff:c4:6c:5c:18:4b:52:
28:4e:c4:98:78:45:cc:7b:ae:23:7f:5a:d3:73:4c:9a:37:ca:
3f:e6:95:24:35:9a:16:5f:d4:82:cd:e1:aa:4b:f9:5c:f4:68:
c5:c2:b4:9c:7f:1f:3b:d2:8f:9d:f3:2a:03:86:a3:87:5f:56:
a2:07:e1:e5:c2:f0:08:68:7c:d3:07:a3:6d:bc:02:26:47:1a:
60:55:9f:86:e8:36:bc:5f:70:9d:70:7b:c8:f7:41:ee:39:82:
7f:62:49:f2:f7:12:3f:f3:06:9b:7e:3c:89:e3:77:70:0b:85:
84:38:c6:c4:4a:92:90:aa:12:eb:65:55:b9:df:6a:36:c7:88:
a2:71:05:27:14:76:00:74:d6:a8:a1:51:ff:ff:0b:b8:d6:39:
87:c2:b7:8c:e4:3d:cc:b0:1c:47:82:d2:9e:f5:cb:26:d1:96:
ad:66:16:6c:40:a9:4d:78:db:96:2b:01:c1:7c:de:18:65:0f:
9d:12:94:e7:01:78:96:8a:d4:4f:de:05:d2:08:c4:2e:05:53:
24:3f:43:92:54:c5:88:6e:d3:cf:52:c4:20:73:ff:76:5d:79:
81:ca:33:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:33:50 2026 by rpki-client