
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34333a33-6030-30a8-a0f5-5c43aa624f2b.roa
File: 34333a33-6030-30a8-a0f5-5c43aa624f2b.roa (raw, json)
Hash identifier: XOxBGS2A2ZLvduK0tO6HqhM0vA5U3wjVfY7Qbur8D9I=
Subject key identifier: 5E:FF:CF:AD:E3:3E:B1:92:CB:7C:D5:6D:8F:D5:AF:10:BA:2A:C1:47
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D55BCBBDCEBC4749B21D68540
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34333a33-6030-30a8-a0f5-5c43aa624f2b.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 13335
IP address blocks: 104.22.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:bb:dc:eb:c4:74:9b:21:d6:85:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=7984d8e3-3b42-4c73-8991-0bf3de8b4471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:7e:fb:c2:a8:46:62:09:a9:4c:8b:b9:cf:
74:8e:eb:39:af:6c:44:21:ed:27:5d:1a:7f:0f:da:
8a:ee:91:d4:ff:4b:1b:95:a0:6d:51:c3:50:7d:ba:
5b:24:5e:f9:4b:2e:cd:ab:97:61:76:08:cd:52:38:
72:58:51:7f:5d:56:16:04:80:e8:9e:37:79:58:42:
af:d9:1f:d6:e7:83:61:c6:14:cc:fc:14:c9:2f:d4:
90:c2:67:a5:49:1c:0f:52:b8:92:e4:b2:1c:1b:f4:
7f:5a:20:1b:fa:a1:69:82:d3:e1:41:9e:69:3e:45:
7e:d5:3e:0c:9e:fd:58:72:1d:14:20:4e:e6:6a:96:
d0:40:22:12:c5:63:59:8c:84:81:ab:22:01:10:fd:
de:6b:26:04:ef:42:9a:b7:c5:43:1d:58:3b:bf:fd:
59:55:08:1a:7d:e4:09:ec:eb:a2:87:7d:d3:28:ea:
98:6d:e7:f0:e7:b5:35:a1:da:e8:05:9e:4b:ad:43:
69:2f:ef:a8:16:f2:04:0a:92:fe:b4:3c:a2:32:52:
95:94:d0:1b:73:69:95:7b:a5:3f:76:09:f2:0f:fd:
6b:f0:ea:50:9d:70:46:1a:2b:b3:3b:91:0c:2a:54:
50:48:88:2a:fe:82:8c:3f:bf:0e:74:14:d8:1a:03:
bc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FF:CF:AD:E3:3E:B1:92:CB:7C:D5:6D:8F:D5:AF:10:BA:2A:C1:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34333a33-6030-30a8-a0f5-5c43aa624f2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.22.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:a5:fd:99:9e:d1:cd:58:0e:ee:10:c9:53:00:a5:10:d7:5e:
db:c5:c5:9a:e9:6d:d0:e7:e7:1b:07:7c:c0:e0:83:51:8a:7d:
42:68:32:a7:37:8d:e4:c5:42:b3:ff:3d:5b:97:82:66:32:02:
81:a9:67:b0:1b:f7:ba:9e:39:06:79:24:1e:84:6a:c7:c8:2e:
c7:ae:97:18:d2:b9:8c:d0:64:70:ec:55:ea:b6:ef:1c:8a:d9:
ec:e6:e5:78:b2:8c:d0:fb:fe:db:fe:92:1b:ff:84:f1:0a:35:
e5:14:19:40:81:d0:18:fb:6b:ef:03:6a:d7:4e:c9:31:5b:07:
0a:83:e9:30:b9:bf:32:ec:31:8e:de:dc:68:04:4c:7e:f7:ed:
eb:53:85:cd:ed:0f:7a:f8:ae:b1:fa:e7:4f:57:cb:e3:d8:ac:
f0:b4:41:72:ef:92:dc:08:c4:64:99:c0:a4:a0:57:08:19:00:
71:27:80:94:71:7a:5f:85:db:9b:95:d6:0a:f0:70:a2:d2:27:
62:5e:d4:c7:60:1a:f8:3c:f4:d4:2c:ec:3e:5b:61:8b:b2:be:
35:a8:57:99:0f:4e:65:8f:52:27:bf:b7:0a:f2:c0:68:55:e1:
26:8f:75:b9:9f:9e:6f:28:d3:b2:e9:10:81:0c:17:7f:b2:41:
e6:c5:ec:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:33:37 2026 by rpki-client