
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae787592-e911-36a3-888b-4f4a37abd16b.roa
File: ae787592-e911-36a3-888b-4f4a37abd16b.roa (raw, json)
Hash identifier: EiVIJaapybD8mesF7oWpgfQ4Hd8mdl21FkSzGkJyq/s=
Subject key identifier: 33:38:93:94:9F:E9:0E:FC:59:AF:4E:12:75:16:42:DE:A6:0C:78:E3
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EEA87841A5AA2FFD262394500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae787592-e911-36a3-888b-4f4a37abd16b.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 104.31.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:84:1a:5a:a2:ff:d2:62:39:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=4305759f-053d-4527-a3e8-961bc3025b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:53:59:5f:e0:3c:61:ed:81:c0:9c:3c:07:
66:1e:f2:6a:10:fb:49:95:bd:2e:36:e3:b2:96:fe:
81:42:e4:9b:c8:f3:b6:38:e9:dc:d3:35:83:ec:be:
97:01:bb:79:af:d9:ab:6c:d7:8e:d7:cf:e4:17:68:
42:39:83:67:8d:09:64:b5:e4:50:ac:6e:74:5a:71:
84:03:71:71:ef:94:a9:f3:b5:89:76:ab:d1:60:e3:
2f:a8:f5:cd:32:51:3d:7f:e0:7b:c0:83:5c:61:37:
22:60:4f:2a:94:f7:06:66:46:58:da:74:b2:9d:2d:
b2:87:9a:67:aa:9c:49:df:e8:68:3a:8d:69:2c:5b:
f4:e0:f2:83:e3:21:45:15:cd:28:92:dc:d8:ff:4a:
a5:ce:c2:8c:ec:f3:f5:3a:c7:d8:9f:52:bc:f3:ce:
3d:e7:68:5c:7f:cc:88:51:55:bd:2a:3f:e3:0d:4a:
e6:1c:07:cb:ce:32:a9:3d:e5:1f:e9:c6:cb:cd:b6:
88:eb:5c:b9:db:51:61:6c:1d:cd:09:73:32:65:74:
b7:c6:8d:b8:5d:3e:d7:dc:2f:a8:56:ed:53:ea:9a:
69:2e:8f:8f:f8:9e:94:ed:85:79:55:ba:4a:f5:d3:
3a:ae:fe:f3:e8:0b:71:3e:91:cf:e4:19:51:39:97:
9b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:38:93:94:9F:E9:0E:FC:59:AF:4E:12:75:16:42:DE:A6:0C:78:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae787592-e911-36a3-888b-4f4a37abd16b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.31.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:2d:9f:b2:28:2d:c4:83:89:5b:f0:3b:5f:6c:5d:df:ad:c2:
38:4c:89:9c:9d:e6:1e:6b:de:ad:e3:b2:e8:75:df:ff:55:13:
f1:29:42:f2:93:30:12:f4:21:2f:63:4e:00:7a:dc:e6:d4:82:
b2:29:2b:92:d0:85:af:f3:60:bf:3e:b0:f2:ff:fc:e1:62:2a:
47:b4:74:02:6b:e5:c6:a1:66:8c:ca:38:9a:1c:56:61:b1:a6:
c6:27:46:27:03:e4:d4:e5:0c:b5:e6:36:dc:8a:6c:1a:4f:b3:
1d:c2:c0:d6:08:cd:39:95:21:be:0f:ec:bc:2a:41:96:49:4a:
23:9e:0a:91:23:a0:66:92:89:27:08:a9:7c:64:ac:2a:bd:83:
7e:0c:83:4e:f5:0a:08:83:13:e3:b6:22:90:6b:4b:65:b6:7f:
5c:95:7f:1f:e5:7f:5c:24:6b:8e:c0:8a:35:ee:80:b5:24:49:
a3:46:58:71:62:b1:37:a9:4c:cd:f3:89:fc:5e:bb:0a:b3:a6:
98:77:77:08:c7:85:e3:c0:54:97:d5:4a:b4:29:fc:52:db:64:
cb:0a:16:9e:68:32:f2:0d:2a:be:e2:e1:ce:53:d2:60:4f:f4:
78:33:c1:f9:f8:e5:11:06:ec:0f:cc:fc:c4:ac:72:77:01:c6:
2a:7d:35:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:38:31 2026 by rpki-client