
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3dc75dd7-440e-37df-ab3f-91097bf8f5a4.roa
File: 3dc75dd7-440e-37df-ab3f-91097bf8f5a4.roa (raw, json)
Hash identifier: k128ITTkTk7i2Ryda5r0V/ZTtlNJ8+3ySQeqoVN1mA8=
Subject key identifier: AE:AD:50:0D:F7:F8:38:3F:6B:CD:36:A4:18:0E:A3:38:21:D5:EF:37
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EA7922DDA47804076AF076A80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3dc75dd7-440e-37df-ab3f-91097bf8f5a4.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 14789
IP address blocks: 104.22.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:92:2d:da:47:80:40:76:af:07:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=23f38519-88be-47ba-a039-08d7b160805b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:96:8c:fd:63:b3:01:2c:19:5f:af:55:80:
43:84:ed:75:f9:8e:eb:fc:0b:a0:a8:1e:6d:50:3d:
5e:33:79:9e:1c:5e:4d:fd:b4:4a:e1:d6:1f:ec:cf:
61:89:e9:75:ec:39:db:b5:fd:c4:f9:df:f4:ee:80:
05:ea:b4:29:90:58:15:80:88:66:bf:53:5a:36:be:
c6:56:b4:b2:90:60:8c:36:50:b3:46:df:cb:63:a6:
c9:cf:f1:f7:31:32:52:56:a2:ab:bb:93:14:36:76:
90:ef:5f:12:85:7d:1c:65:8f:ac:e7:6c:f5:5d:a0:
55:1a:94:50:fa:b2:19:77:3a:da:c0:91:94:37:68:
a4:6d:f6:c2:70:56:7d:c9:c9:cc:7d:ec:99:7f:a0:
82:ae:50:66:b8:d4:9d:d9:2e:a1:04:b7:a1:1d:c4:
19:44:10:c3:75:f0:a4:91:99:17:3b:a5:56:f2:4f:
56:9f:eb:50:b6:11:bc:25:dc:92:e0:9f:46:c7:ef:
1a:d0:cf:d6:80:d3:36:cb:d0:0b:69:73:c8:68:c5:
6b:c6:e6:99:91:12:98:bf:fc:4f:55:ee:19:10:24:
32:3d:4e:5c:59:fd:f3:52:f7:34:fa:c2:00:79:fd:
a9:4a:b8:6a:98:24:76:3d:91:cb:09:1d:42:d6:53:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AD:50:0D:F7:F8:38:3F:6B:CD:36:A4:18:0E:A3:38:21:D5:EF:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3dc75dd7-440e-37df-ab3f-91097bf8f5a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.22.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:d5:93:af:51:f2:1a:77:b7:13:ae:04:84:46:c7:ac:74:ee:
ab:66:0c:14:e4:2f:69:d3:f2:60:d9:27:ad:92:89:89:c0:c3:
b1:fa:f8:e4:27:3b:33:4b:47:5b:18:bb:27:9d:fb:9b:80:c1:
31:f0:65:38:f0:77:a8:09:bc:22:e7:f9:aa:c2:9e:03:df:6d:
85:64:38:83:8e:cd:3d:c0:af:05:32:9a:86:15:55:c2:e2:82:
8f:c3:35:51:ba:01:9c:69:85:67:51:32:a9:bb:a7:d1:a1:68:
15:d3:d4:11:25:9e:3b:40:99:b8:14:11:a9:40:67:87:94:48:
5c:ca:44:1d:06:90:b6:a8:7c:fa:50:76:b0:76:02:b3:0b:0b:
80:ff:dd:7f:3d:59:57:cc:c9:b1:05:85:47:20:42:c9:a9:12:
ac:58:42:ac:62:aa:1a:73:b3:44:81:c3:ac:66:08:f0:f6:b5:
f9:68:d2:15:fd:27:60:41:bb:4c:66:aa:1d:ae:08:b0:40:38:
8c:43:7e:5e:a2:91:ff:03:84:da:c7:a3:7d:6c:5e:bf:33:66:
9f:59:b8:ea:1f:55:d4:4d:6f:23:44:f7:01:28:d7:39:43:18:
92:ab:e9:cf:1b:cb:af:31:0a:0e:71:a4:89:eb:9c:fc:58:12:
1a:79:97:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:35:50 2026 by rpki-client