
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90c1d3a7-261c-3cdb-bfc9-b70cb3d6a04e.roa
File: 90c1d3a7-261c-3cdb-bfc9-b70cb3d6a04e.roa (raw, json)
Hash identifier: NKd2k2VojmdrZL6KN52YpJCH6QGO7l0bZ8uEcGDYYGk=
Subject key identifier: 18:F7:C2:8A:70:01:E9:E7:C4:C3:9A:FD:DD:D5:46:39:B9:49:99:E5
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584F3CE28189986C5884C06739A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90c1d3a7-261c-3cdb-bfc9-b70cb3d6a04e.roa
Signing time: Sun 20 Sep 2026 13:00:12 +0000
ROA not before: Sun 20 Sep 2026 13:00:12 +0000
ROA not after: Sat 19 Dec 2026 14:00:12 +0000
asID: 13335
IP address blocks: 104.23.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3c:e2:81:89:98:6c:58:84:c0:67:39:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Sep 20 13:00:12 2026 GMT
Not After : Dec 19 14:00:12 2026 GMT
Subject: CN=9f22f73b-884b-4595-ac6e-7886172628ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:84:db:75:a0:6f:14:35:7f:5c:1f:18:20:1a:
07:61:52:7c:1a:a4:bb:1f:c6:90:0f:3e:b8:0e:39:
9a:12:8a:17:20:86:45:0b:63:64:68:2b:57:00:2f:
b0:fa:a8:e7:97:6a:dc:ae:82:4b:5c:98:c0:7b:f1:
e4:c2:8a:73:ec:eb:c6:ab:af:76:78:cb:29:34:35:
ab:11:09:04:35:06:a3:3f:dd:80:6e:42:5c:3f:1a:
16:e6:dc:00:06:16:4c:10:f3:3f:ae:7a:27:c3:3b:
28:8a:7e:61:69:f6:a7:55:26:cc:42:bf:86:bf:a9:
55:71:37:a8:82:db:2c:b3:03:d1:7f:d6:e3:57:e3:
9f:0a:28:30:d3:bc:4c:a4:d4:97:d3:f1:a2:97:04:
43:cd:74:45:c5:96:41:17:82:d1:3b:24:31:9f:aa:
24:a3:08:99:a4:2b:0a:1c:77:3e:d7:3a:ed:a5:20:
f4:69:f6:1a:e0:22:2e:ca:5e:f3:89:f2:45:b0:c8:
1e:05:be:2f:af:20:6a:21:0a:66:4a:9b:27:07:1c:
8b:86:47:ce:ec:b3:76:1a:04:b1:18:2e:a3:7e:3b:
20:96:8d:c7:ab:1e:ff:c2:e4:a5:66:46:6f:44:55:
20:bd:f2:73:f4:3e:e1:80:63:2c:c4:0f:da:87:61:
b5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F7:C2:8A:70:01:E9:E7:C4:C3:9A:FD:DD:D5:46:39:B9:49:99:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90c1d3a7-261c-3cdb-bfc9-b70cb3d6a04e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.23.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:b6:62:1f:89:f4:0b:5a:36:61:77:b1:0c:07:cc:c9:46:4f:
32:30:ce:1d:6b:d6:fd:59:44:0a:3e:96:ff:1d:53:82:72:2d:
c9:5e:f7:bb:0a:0a:f2:f2:25:9d:7e:14:91:0d:25:ed:76:a0:
52:48:92:a4:cd:ca:23:5e:09:2d:81:e3:50:82:cb:9d:f2:f3:
bc:2a:16:bc:a1:3b:86:71:26:6a:5c:19:35:58:c4:57:fd:6a:
96:fe:1c:c7:7b:fd:0c:4d:16:2c:50:7a:24:78:09:3e:12:5b:
70:30:3c:ca:da:44:5a:ae:3f:f1:f5:94:96:33:06:f4:c1:80:
09:ad:c5:5b:2a:f3:e7:09:3a:f3:14:56:79:de:ce:f4:f4:6d:
fc:dc:7c:1b:8b:ee:3d:2a:44:0c:b7:58:97:5d:b7:e0:64:56:
ac:2d:4d:69:df:d1:73:7b:c4:0e:8d:b1:bf:fd:55:c9:2f:93:
a1:7d:a6:4f:fa:a0:f6:97:b5:89:22:7e:a5:bd:6b:d7:84:ea:
39:ed:02:4c:41:af:67:32:4a:e4:09:62:92:cb:b0:fd:f8:4a:
56:7f:d7:c4:78:7f:d1:69:5a:44:f4:79:a0:3b:2b:63:b3:cf:
15:b2:a1:6a:6e:bf:f3:7f:a0:23:3b:c8:f6:66:c9:91:5e:1c:
25:eb:58:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:50:09 2026 by rpki-client