
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99c34a1c-c3af-3080-9e98-df2f1bf1b50c.roa
File: 99c34a1c-c3af-3080-9e98-df2f1bf1b50c.roa (raw, json)
Hash identifier: xl9kjKHZDSACeYkij45+1NWoPgmjYracBYHCASs1sWU=
Subject key identifier: 28:77:4E:88:32:92:17:46:6A:05:67:7A:15:18:90:3A:37:CD:58:27
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E4824AA1FA428C0E2D5DDDF00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99c34a1c-c3af-3080-9e98-df2f1bf1b50c.roa
Signing time: Wed 24 Jun 2026 21:00:12 +0000
ROA not before: Wed 24 Jun 2026 21:00:12 +0000
ROA not after: Tue 22 Sep 2026 21:00:12 +0000
asID: 13335
IP address blocks: 104.20.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:48:24:aa:1f:a4:28:c0:e2:d5:dd:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 24 21:00:12 2026 GMT
Not After : Sep 22 21:00:12 2026 GMT
Subject: CN=649048a0-bcce-4217-b56a-93974d25c1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cb:3d:3e:4c:f8:10:8d:be:17:88:89:d8:37:
08:99:c7:bd:57:16:f7:eb:e4:3d:e3:46:a6:af:e7:
bf:8d:3b:d9:45:47:f3:dd:82:12:8a:71:1a:c0:fa:
a1:12:b8:79:39:a2:c6:8f:46:61:4f:a2:0e:7c:27:
78:47:ba:da:6c:bd:f2:5b:55:fa:97:a4:37:e9:b6:
01:de:91:64:d2:9e:ab:7e:97:66:86:43:73:45:f9:
26:c0:4c:da:2a:94:4c:45:1f:21:a0:92:9f:bf:87:
8a:af:d7:e3:b7:c1:dc:9c:7c:4c:b4:5d:f3:3f:2a:
81:f6:e5:fd:8a:1b:ed:57:6f:ff:b4:db:52:eb:3b:
d9:66:dc:76:77:5d:67:c3:07:c5:28:ba:ae:f6:48:
3e:d9:d1:74:06:dd:7a:85:f6:84:b3:4c:69:d6:f0:
fd:f3:0c:22:72:c3:c5:a4:69:52:3a:d8:26:7f:fa:
96:9e:27:d0:8e:11:42:c6:8a:3d:e2:3a:8b:77:aa:
b6:2e:a6:ca:05:66:39:da:bb:eb:cd:ff:a6:b1:5c:
17:27:a7:a0:c4:ec:82:77:f1:40:af:1c:27:c8:3d:
97:8d:b3:ab:a5:db:c9:68:f9:3a:99:df:0b:5e:84:
0e:dc:c5:8f:1f:44:30:95:9f:ac:da:f4:ad:fa:ff:
19:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:77:4E:88:32:92:17:46:6A:05:67:7A:15:18:90:3A:37:CD:58:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99c34a1c-c3af-3080-9e98-df2f1bf1b50c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.20.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:1d:df:a4:68:5d:7e:d4:21:25:4b:bb:b8:9f:20:ce:81:0e:
53:32:81:39:03:ce:05:7c:2d:ff:8c:ce:4e:4f:52:d0:bd:0c:
ea:73:e0:9f:29:c7:69:c8:9c:a6:38:53:94:aa:11:4e:cd:3f:
6e:fc:98:fb:9c:53:c5:1a:33:f2:c6:9b:34:90:1b:62:fc:4a:
0e:88:cd:76:53:d1:f9:00:ef:18:7b:03:26:38:50:86:d5:fd:
14:b6:b6:b1:55:a7:84:45:c0:f2:f8:6c:06:0c:50:27:18:4e:
2b:a7:30:18:4f:49:3b:46:38:9f:ec:54:bc:de:d4:e0:95:34:
fa:e2:f4:d2:b1:17:06:ab:99:0b:a4:f7:e2:50:22:ef:28:61:
f4:ce:d1:15:d9:49:d3:f3:26:ed:ad:25:31:5f:92:77:5e:45:
5c:7a:2a:ff:5a:9f:59:13:08:51:dc:88:6f:df:4c:d4:1c:08:
2e:74:81:10:b6:0b:56:cc:72:f7:50:65:40:1f:1e:f6:5a:9f:
de:1b:0a:11:2d:c2:fd:e0:d1:e8:b3:3e:e9:ef:d0:f1:53:bf:
00:c5:c0:17:51:6b:6d:30:11:b5:6c:07:be:b1:71:af:bb:d8:
14:11:43:65:66:66:a5:f3:57:6f:cc:38:bf:47:05:31:b2:36:
57:44:f8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:48:11 2026 by rpki-client