
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/10d78f7a-2948-386a-87d6-99562cf49edc.roa
File: 10d78f7a-2948-386a-87d6-99562cf49edc.roa (raw, json)
Hash identifier: RY/FToa5q8oNE8vvUJMjqgC6BVDXhi1Dwh5kHV8X1r8=
Subject key identifier: 5B:7A:81:2D:95:DA:EC:D9:F9:5D:DB:B0:90:82:91:21:58:23:25:98
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D67DFD7618189CCDF4ABF0480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/10d78f7a-2948-386a-87d6-99562cf49edc.roa
Signing time: Sun 05 Apr 2026 13:00:31 +0000
ROA not before: Sun 05 Apr 2026 13:00:31 +0000
ROA not after: Sat 04 Jul 2026 13:00:31 +0000
asID: 13335
IP address blocks: 104.21.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:67:df:d7:61:81:89:cc:df:4a:bf:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 5 13:00:31 2026 GMT
Not After : Jul 4 13:00:31 2026 GMT
Subject: CN=d6584c3a-0cbd-48d4-82ac-e4a524287d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f0:c8:91:9a:57:45:b8:74:19:35:04:ae:46:
75:25:d3:29:80:46:2c:49:5b:0a:19:99:9f:d7:c6:
a3:4a:50:26:24:b2:67:c7:87:0f:49:7b:bf:50:e3:
eb:38:d1:5f:60:7e:18:06:45:b4:97:9a:1d:fe:cf:
ea:dd:ca:0e:8c:c8:fa:68:e1:fa:aa:a7:ee:02:e1:
9c:53:fd:c8:c2:3c:99:51:a0:db:93:18:bc:ed:10:
5d:f1:37:9d:28:69:8d:81:a2:bb:e1:f2:c9:bc:09:
84:36:85:e2:36:1e:f8:e5:bb:5f:46:b8:3f:7a:92:
c4:73:44:a9:3f:ce:66:f4:88:c3:ca:07:c8:1d:4c:
1f:35:11:5e:83:2f:e9:75:88:8d:f5:80:64:86:fe:
f8:d4:36:2a:02:28:9d:5d:9e:f9:0b:3b:fc:52:21:
25:c6:2f:75:1c:41:d1:ce:5a:b4:ed:f4:d2:67:32:
3d:d2:5d:46:6b:19:68:4b:5e:35:18:57:0f:89:61:
a1:a7:88:78:c6:12:5a:de:af:22:c6:cc:9a:8a:05:
a6:41:66:77:5c:c9:96:5b:8e:8d:8a:ee:66:b9:c2:
ef:80:07:dc:f5:3c:0f:c9:4a:ac:13:ac:1e:90:15:
7a:80:10:a8:ee:ac:04:ab:70:86:06:13:bd:10:b8:
a7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7A:81:2D:95:DA:EC:D9:F9:5D:DB:B0:90:82:91:21:58:23:25:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/10d78f7a-2948-386a-87d6-99562cf49edc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.21.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:b9:51:87:8a:09:09:90:f2:f4:1a:57:7d:8e:1c:35:4c:42:
a1:c4:05:ef:4f:ae:a0:8c:b1:6d:d3:48:91:5e:24:cc:cf:08:
6a:0f:82:a3:52:f4:b4:c4:30:b1:99:14:8a:32:23:02:e6:15:
00:bf:87:3a:ee:4e:17:2d:e0:d5:e2:3f:61:50:31:72:bc:ae:
05:77:87:7c:41:98:7f:91:14:82:88:96:d1:27:ce:66:f3:11:
95:72:dd:d8:60:0f:62:c1:cd:8c:0d:55:c7:87:cf:ca:f5:a5:
5b:aa:29:79:6c:fc:40:7e:a8:74:54:a8:21:75:80:c3:16:19:
f1:98:f6:f3:69:63:1a:44:c8:b0:40:ae:61:f4:65:47:60:22:
63:27:f4:4a:ba:44:5f:21:d5:d4:aa:cb:38:b6:e8:de:c3:9a:
97:64:79:42:dc:06:e3:a1:10:bf:73:49:6e:1a:4b:e7:f5:29:
3a:14:ff:ff:5a:9a:ad:ee:37:85:da:d3:20:ca:53:dd:b6:ea:
27:c9:3b:b6:0f:bb:2e:a7:b0:48:c7:08:5c:5d:04:90:dc:62:
69:aa:78:03:64:13:27:a6:e0:f1:01:41:3f:39:9c:c2:48:bf:
12:9e:b8:1d:02:cb:7f:28:0c:ce:34:eb:8e:94:c9:ad:f8:47:
19:84:cd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:15:56 2026 by rpki-client