
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e2b4887c-e7b9-3380-80da-0297ac7dfded.roa
File: e2b4887c-e7b9-3380-80da-0297ac7dfded.roa (raw, json)
Hash identifier: fKui3Nz5ChPdVS24d/pJS1u1hA77xJYMklU0KJP0dTk=
Subject key identifier: 04:EA:01:E9:96:10:54:3E:AB:A9:86:55:2B:63:06:A3:7B:07:C0:8A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EEA8769B2E808E9C73625AAC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e2b4887c-e7b9-3380-80da-0297ac7dfded.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 104.21.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:69:b2:e8:08:e9:c7:36:25:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=c9d137c5-99e1-4b14-840b-c076abbacde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6d:54:37:23:6f:01:d6:55:0c:f2:8f:16:9b:
4d:dc:81:4b:f0:ad:2a:7f:80:a9:83:01:de:bf:b9:
a8:ee:69:71:19:5d:88:8c:d4:2e:44:d6:a9:7c:ae:
9c:10:a4:2c:e7:0b:02:3d:60:29:b5:53:fd:be:7c:
60:1a:c4:33:43:3c:29:1a:90:3f:3b:74:4d:a0:58:
d8:d7:7b:2e:0e:c1:58:d2:15:aa:5d:30:7c:58:de:
13:13:a8:a5:1f:4b:16:bd:b5:c6:ec:3e:af:8e:4b:
07:ed:7d:b8:81:23:8d:bc:7f:be:5e:6d:e0:1a:62:
e5:f7:fa:75:a2:85:84:b1:d8:3d:d7:2a:7d:24:81:
1a:20:ad:c2:51:8c:c4:72:66:7d:12:d8:e8:53:2f:
b8:5f:32:c2:f4:ce:ab:18:86:6c:4c:c3:c8:d4:5c:
67:67:09:04:42:33:b8:b0:0b:40:a1:3e:f9:35:49:
8e:c1:5f:44:83:a1:4c:ee:fa:84:37:bb:66:c9:73:
fb:93:5a:c0:3e:11:e6:20:3d:e9:b8:ba:da:0f:6d:
bf:21:62:b6:2c:eb:82:70:05:4f:08:49:1b:53:26:
e7:29:53:e0:d1:8f:8a:00:82:dc:0b:97:99:37:f7:
4f:6c:ad:eb:dc:d3:2f:fa:1c:18:98:ab:17:93:95:
e3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EA:01:E9:96:10:54:3E:AB:A9:86:55:2B:63:06:A3:7B:07:C0:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e2b4887c-e7b9-3380-80da-0297ac7dfded.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.21.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:f2:25:09:3a:7e:ee:4b:74:83:5c:4e:5d:b2:f0:7f:e0:79:
32:87:45:37:0d:d5:58:1a:b2:51:00:7d:06:e9:6f:00:16:54:
94:2b:ef:27:ea:f8:f7:84:ab:fc:8c:e3:3d:26:1b:d9:3e:1b:
13:59:8d:65:d6:17:6d:19:b9:74:bc:ae:fc:9e:44:52:a5:38:
bd:11:da:af:7c:00:73:de:16:91:d7:b8:9e:30:26:77:5e:2e:
9b:06:29:84:c5:4b:36:b0:a6:ef:f9:c5:db:c9:02:01:c7:6f:
37:cc:40:b6:c8:2b:c3:73:2c:8c:32:c0:ce:2a:a4:f2:88:aa:
55:81:e0:80:86:63:8b:f6:4f:a9:0a:4d:94:88:79:2d:38:a2:
ad:6e:34:52:13:bd:12:83:ac:44:6e:ff:bc:b5:ef:fb:75:9c:
10:59:5e:37:0c:4a:8d:0b:1e:99:74:c0:c6:e7:ad:3b:c3:a2:
27:ef:8b:37:67:a1:0e:88:08:2c:ec:7c:d0:2e:92:04:de:a1:
ad:09:87:05:74:5e:46:ee:2d:92:c2:9f:9b:d2:05:03:10:8e:
76:54:61:31:cb:be:bd:1b:b8:77:13:04:65:e0:60:66:f4:24:
42:8b:f0:c2:e5:cd:b3:54:fc:d2:4f:50:47:4f:ae:59:1d:19:
1d:9b:2b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:50:06 2026 by rpki-client