
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0b3d676-8d81-3776-9084-78bd06aa5966.roa
File: a0b3d676-8d81-3776-9084-78bd06aa5966.roa (raw, json)
Hash identifier: 1JN0I8FhBy7Fxymxa+nkIfLb45rMOuyU0WiQra2BDcA=
Subject key identifier: EE:91:51:34:C0:8E:02:99:73:15:F6:6A:D0:DF:AE:CA:5A:90:C1:76
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E482495FC3B9FA7653FCFA1C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0b3d676-8d81-3776-9084-78bd06aa5966.roa
Signing time: Wed 24 Jun 2026 21:00:12 +0000
ROA not before: Wed 24 Jun 2026 21:00:12 +0000
ROA not after: Tue 22 Sep 2026 21:00:12 +0000
asID: 13335
IP address blocks: 104.16.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:48:24:95:fc:3b:9f:a7:65:3f:cf:a1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 24 21:00:12 2026 GMT
Not After : Sep 22 21:00:12 2026 GMT
Subject: CN=b82bfcb5-98bd-4a01-b90d-ac6d1e29db9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:81:a1:61:61:61:32:6c:b2:46:04:ad:01:2b:
9c:58:f6:9c:a9:ed:40:ab:c6:c3:b5:54:c1:01:99:
55:e1:0e:aa:46:d0:de:34:df:5f:f6:64:7d:ef:1b:
d1:f1:cc:6d:83:0b:e8:07:47:25:ba:c5:85:50:a2:
89:3a:39:68:3a:b6:2c:07:4f:8f:c6:bd:37:bf:9c:
80:21:04:fe:31:59:bd:7f:08:ad:cc:5f:f4:a3:71:
9f:01:15:50:c2:b2:2f:8e:8c:25:55:86:cc:b0:90:
c6:bb:2e:12:26:cb:36:1c:2b:32:da:a5:27:ef:49:
83:fb:98:70:ae:fc:eb:e1:7a:a6:ab:d6:ca:8d:dd:
ca:5b:33:66:65:1d:26:d7:fe:09:69:df:b6:03:e0:
01:8f:04:33:e2:a8:11:b8:73:8a:2d:18:3d:78:a2:
70:97:33:a1:eb:de:f1:e2:57:40:30:f1:cb:ba:e8:
fa:5e:1f:1c:51:5c:ac:31:ce:2b:88:68:b9:4c:f7:
9c:f1:fd:8b:a1:8b:c9:83:51:95:5c:60:dd:5a:ba:
55:7e:2d:f9:49:6a:11:dd:3c:ca:94:20:7b:7e:ea:
b9:71:64:bd:ec:0b:e1:06:06:7b:3c:c1:af:1c:e0:
9b:2b:ee:00:94:4b:06:26:2f:96:fc:70:1c:ca:fa:
ea:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:91:51:34:C0:8E:02:99:73:15:F6:6A:D0:DF:AE:CA:5A:90:C1:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0b3d676-8d81-3776-9084-78bd06aa5966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.16.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:5e:f4:c6:07:b7:9d:94:af:2f:b1:77:46:9f:27:43:eb:ec:
35:06:81:e6:a4:7e:30:0c:7b:7e:63:9c:85:8a:0e:73:85:7e:
3e:da:13:07:c7:4d:e9:7c:27:e0:27:84:c9:b6:f1:2f:b0:cd:
b3:06:e2:f3:a3:87:6c:73:ec:2a:0d:9a:b2:3a:9c:2b:fb:48:
d9:a9:05:f0:2e:13:95:c2:4c:80:b1:3c:9d:37:b7:83:11:aa:
48:5d:e9:96:ed:ed:7d:17:ae:0c:78:17:79:cc:31:68:bf:b9:
06:5f:22:44:a2:4a:88:be:fb:1f:21:ce:19:3f:24:52:ee:bb:
83:88:57:27:23:b0:ef:6a:e6:3a:3a:bc:8f:38:2b:ac:74:eb:
86:03:bc:a5:61:06:02:72:38:a1:03:50:2b:f9:c0:ef:c4:68:
26:30:c9:70:e0:c1:35:02:1b:15:a8:fa:f6:7d:75:3c:8b:8a:
e8:ec:18:32:18:c6:94:9a:9f:ab:a3:d7:7a:32:e9:26:7a:ef:
7c:97:be:9a:19:0a:2d:01:43:42:fc:48:0d:1a:b2:98:c7:06:
8f:77:47:2a:4d:d5:77:ae:34:7a:b2:9d:19:ba:7e:22:b6:47:
85:12:2d:b8:18:5e:cc:1f:a8:18:5d:0a:72:65:7a:1d:5d:67:
2a:37:fd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:49:03 2026 by rpki-client