
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc888596-0098-3b49-93eb-f032469fdd69.roa
File: dc888596-0098-3b49-93eb-f032469fdd69.roa (raw, json)
Hash identifier: 3e2BYfox5NBA/8jsQu7tQOy38e9OEW5HjJsFDZMhgt0=
Subject key identifier: 99:B3:3B:EF:37:67:5F:DD:1B:A5:3E:DF:D6:C4:38:F7:39:5F:C7:E1
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E4C023CF7DD04185E6841D9C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc888596-0098-3b49-93eb-f032469fdd69.roa
Signing time: Fri 26 Jun 2026 06:14:27 +0000
ROA not before: Fri 26 Jun 2026 06:14:27 +0000
ROA not after: Thu 24 Sep 2026 06:14:27 +0000
asID: 13335
IP address blocks: 104.22.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4c:02:3c:f7:dd:04:18:5e:68:41:d9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 26 06:14:27 2026 GMT
Not After : Sep 24 06:14:27 2026 GMT
Subject: CN=d945bb83-2a8f-4c42-8748-989b02cdd1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:b8:ed:04:7e:44:25:90:79:04:a0:e0:12:
02:b2:16:75:de:fe:19:8a:ec:c1:71:09:73:37:de:
44:74:bf:62:3e:86:cb:d6:3d:b4:1d:b8:03:7a:35:
61:97:39:78:af:10:b1:87:43:d3:2e:0b:72:43:5b:
df:55:c3:38:1a:c8:53:ae:b2:03:cd:3f:64:26:67:
40:ff:b9:8d:0a:6a:7f:e7:bc:a4:25:af:37:d9:16:
04:07:0f:f3:35:d7:98:ce:f6:45:e7:95:1b:45:21:
d2:9f:30:e5:c6:f4:7c:df:09:50:a9:aa:40:b2:d8:
3c:7e:af:60:a9:ad:1b:d1:63:c2:c6:53:05:8a:c7:
ca:2b:4a:f3:e0:7b:af:1d:7e:1d:f1:f0:37:ba:cd:
e3:22:fe:f7:01:32:b8:01:5d:d2:c1:81:05:5d:92:
61:dc:52:6d:52:c3:9c:1d:80:c0:be:a0:ce:d6:79:
0d:25:b1:80:27:80:42:4b:bf:62:62:31:de:20:17:
f5:34:2c:4a:b7:05:d5:a7:c4:c9:44:31:bf:51:b0:
68:da:11:37:c0:cf:fd:aa:01:82:b8:b1:97:e1:09:
0b:9e:95:7c:f6:f6:0c:ea:da:1c:ce:f8:7c:ef:67:
39:25:10:1b:9e:c6:e6:9a:a5:bb:59:f1:de:3f:b0:
90:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B3:3B:EF:37:67:5F:DD:1B:A5:3E:DF:D6:C4:38:F7:39:5F:C7:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc888596-0098-3b49-93eb-f032469fdd69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.22.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:70:da:22:ea:3b:de:8a:95:d9:58:ef:1d:05:08:3d:b7:4f:
81:81:f2:a1:ee:f5:33:93:30:11:e2:34:d2:5e:3f:53:1f:b1:
58:e6:c1:3b:77:97:21:cd:ec:2c:f2:eb:16:26:07:69:93:9e:
47:f4:40:0d:0a:6b:47:8d:82:6c:b8:d2:ec:36:91:d9:9a:0a:
1b:8d:e0:0a:df:c8:f2:ea:30:1d:f1:94:43:e2:5f:d6:58:f0:
ef:ad:ac:60:d4:38:b6:74:d2:44:bd:36:4b:ea:da:53:91:1a:
84:28:c7:f0:88:88:8c:2d:dc:b2:0c:f8:c0:0c:09:1d:eb:63:
d7:a9:72:3e:d9:45:88:45:6b:4d:ea:f0:28:cd:a7:7a:3c:f9:
52:05:70:ae:1d:39:61:33:fc:79:6a:e6:20:4e:16:ea:f0:22:
aa:44:45:c4:ee:05:51:61:65:3e:8c:ed:af:d2:62:d3:9e:91:
f9:73:41:3a:88:ce:06:8d:ec:65:16:cd:b0:99:84:e4:98:14:
90:53:11:2a:71:6a:8b:63:9e:7a:f4:2b:ca:90:cc:b7:bd:58:
9b:d0:ab:a5:26:09:d3:2c:45:88:95:02:62:2a:31:d3:7d:ba:
4c:38:d0:04:07:4b:50:99:77:72:d7:43:f1:0d:53:d9:2b:02:
fe:5d:2e:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MAjz33QQYXmhB2cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDYyNjA2MTQyN1oXDTI2MDkyNDA2MTQyN1owLzEtMCsGA1UEAxMk
ZDk0NWJiODMtMmE4Zi00YzQyLTg3NDgtOTg5YjAyY2RkMWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoW47QR+RCWQeQSg4BICshZ13v4ZiuzBcQlz
N95EdL9iPobL1j20HbgDejVhlzl4rxCxh0PTLgtyQ1vfVcM4GshTrrIDzT9kJmdA
/7mNCmp/57ykJa832RYEBw/zNdeYzvZF55UbRSHSnzDlxvR83wlQqapAstg8fq9g
qa0b0WPCxlMFisfKK0rz4HuvHX4d8fA3us3jIv73ATK4AV3SwYEFXZJh3FJtUsOc
HYDAvqDO1nkNJbGAJ4BCS79iYjHeIBf1NCxKtwXVp8TJRDG/UbBo2hE3wM/9qgGC
uLGX4QkLnpV89vYM6toczvh872c5JRAbnsbmmqW7WfHeP7CQJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJmzO+83Z1/dG6U+39bEOPc5X8fhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGM4ODg1OTYtMDA5OC0z
YjQ5LTkzZWItZjAzMjQ2OWZkZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBZ3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALtw2iLqO96KldlY7x0FCD23T4GB8qHu9TOTMBHiNNJeP1MfsVjmwTt3
lyHN7Czy6xYmB2mTnkf0QA0Ka0eNgmy40uw2kdmaChuN4ArfyPLqMB3xlEPiX9ZY
8O+trGDUOLZ00kS9Nkvq2lORGoQox/CIiIwt3LIM+MAMCR3rY9epcj7ZRYhFa03q
8CjNp3o8+VIFcK4dOWEz/Hlq5iBOFurwIqpERcTuBVFhZT6M7a/SYtOekflzQTqI
zgaN7GUWzbCZhOSYFJBTESpxaotjnnr0K8qQzLe9WJvQq6UmCdMsRYiVAmIqMdN9
ukw40AQHS1CZd3LXQ/ENU9krAv5dLlQ=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:45:34 2026 by rpki-client