
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a7366dd-e22b-3889-8006-d4eb02fd6707.roa
File: 8a7366dd-e22b-3889-8006-d4eb02fd6707.roa (raw, json)
Hash identifier: VBypH4AaQMfVL/7P4Ncg2QYRFN/tYz0i8E6LwkCWC28=
Subject key identifier: 62:80:E7:D5:05:45:65:33:D4:28:C6:4C:59:D1:5C:36:B0:1A:A8:E4
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EEA87721FE842A8B618FA4980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a7366dd-e22b-3889-8006-d4eb02fd6707.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 104.31.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:72:1f:e8:42:a8:b6:18:fa:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=f4d30dd7-b8c7-4a68-940b-7f084987ee32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1c:d9:ed:30:ec:ee:e0:7a:77:52:26:c2:14:
76:a0:27:ab:38:25:7d:3e:b1:41:a6:d2:83:96:f8:
7c:cc:c4:fa:02:30:52:20:b0:fa:bf:1e:b2:64:ae:
c3:df:c8:b7:4c:d6:cb:be:92:75:7b:e7:d3:fb:ad:
b8:10:ef:f7:c0:fd:ed:aa:71:11:8c:92:50:4c:08:
db:a1:7f:ee:27:3b:e3:e7:bf:b2:2c:f8:e5:19:46:
6a:84:ce:a8:99:ef:96:28:d5:5c:a1:eb:f7:31:65:
4b:bf:f6:51:59:32:7a:7c:34:7d:51:a4:7a:d8:1e:
3b:a7:65:c0:29:d6:45:cd:b9:9d:3c:ac:9c:f2:8e:
10:51:52:e3:16:8e:57:5f:69:6b:ce:3b:73:5c:39:
72:4d:07:c3:57:4b:0a:bc:02:07:4a:69:71:f1:fc:
34:6f:cf:09:8b:ec:b2:75:54:d0:f5:2d:34:06:6d:
00:1d:4c:a2:0b:9c:2f:49:4a:88:5b:25:55:21:cc:
43:42:a1:dc:19:4b:09:df:44:91:c2:67:3e:af:70:
d3:1a:6e:7c:89:29:8c:a0:3b:18:69:22:70:63:91:
d5:fc:12:89:4d:e0:e9:61:0e:70:80:69:6f:27:90:
e1:96:a9:e5:55:c3:d2:4d:ac:0e:4d:64:38:67:57:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:80:E7:D5:05:45:65:33:D4:28:C6:4C:59:D1:5C:36:B0:1A:A8:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a7366dd-e22b-3889-8006-d4eb02fd6707.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.31.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:3d:71:c0:ff:4f:53:ab:b0:30:4c:5e:22:36:b1:4a:75:6d:
0c:0d:c8:47:d9:29:31:d5:aa:8a:55:f5:4b:08:ed:89:1f:ed:
ab:98:dc:71:06:1d:00:70:d4:e9:51:aa:fc:46:ff:9a:7a:a0:
28:16:08:47:78:72:d8:78:d6:26:30:3c:b6:75:8b:4e:a2:93:
90:dd:3b:b8:d9:d9:b5:ea:61:ab:a8:cb:0e:ee:c7:30:6a:dd:
5c:04:05:cc:42:6b:13:1c:a6:a9:1b:91:21:b2:40:14:dc:20:
9d:34:a2:a7:dd:d2:69:d4:08:ab:11:e2:fa:db:b4:65:45:72:
33:84:cd:2e:d4:37:84:95:db:78:ba:2b:05:1c:c9:9b:a1:ab:
de:31:44:6f:fc:8a:74:e8:2b:1e:af:8e:3c:1e:7e:54:b8:8e:
0a:0b:23:7d:bc:d5:2d:7e:b8:65:21:aa:30:fe:9f:a5:4a:6a:
24:18:b8:51:0e:9b:87:76:71:21:25:20:17:71:fa:b4:6b:54:
8b:8a:8f:bf:d9:40:0f:ea:53:54:cc:df:b7:97:5e:59:8a:2e:
29:49:ba:b4:1e:9d:48:e0:85:d3:ae:23:5e:7b:43:9d:4c:66:
6c:1f:8a:6a:2c:86:db:45:6d:49:21:67:47:ba:f3:7c:4b:cc:
4f:3b:97:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:51:06 2026 by rpki-client