
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/897fb56e-da5b-3350-83c3-5691de7bc50e.roa
File: 897fb56e-da5b-3350-83c3-5691de7bc50e.roa (raw, json)
Hash identifier: OP69CBMDn6vKNd3wM+CkqN/4qxoBtEe6M0ZOkX8wOOQ=
Subject key identifier: 19:B8:35:95:2D:8C:F1:22:43:28:78:05:98:21:44:E2:E4:33:A5:73
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EA7932BA8556FFA3FE3EC7980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/897fb56e-da5b-3350-83c3-5691de7bc50e.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 13335
IP address blocks: 104.23.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:93:2b:a8:55:6f:fa:3f:e3:ec:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=be170e8d-0c40-48d9-b37f-41588cc5ecca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6b:16:5b:73:e4:6f:a2:bc:80:53:9a:3c:40:
e2:83:1e:d9:80:c8:3a:cc:eb:05:d9:b1:cb:40:68:
23:93:40:77:80:b5:3d:42:45:11:5d:49:c8:a8:89:
e0:e2:36:a4:c7:53:e8:be:6c:51:f5:1d:bb:3c:61:
8d:cd:fd:c5:a9:0b:6b:6a:76:44:80:bd:5c:17:3e:
60:54:8d:1e:b6:39:a5:75:1e:36:9b:01:8e:83:90:
0f:40:47:7b:67:37:74:79:a1:af:4f:d1:8a:89:9c:
0d:21:a1:a8:9b:f6:de:df:89:c9:41:d4:12:eb:2a:
e4:37:19:2f:8c:fd:91:46:6b:a3:00:38:a1:1f:91:
79:06:84:58:ba:97:d6:dd:40:ef:5a:06:d0:65:6e:
50:40:81:ca:30:47:ff:10:ae:51:b7:5b:0c:9f:9c:
4f:47:56:e3:f3:a4:5f:8c:a3:16:e5:cd:54:5e:1b:
f4:97:df:63:de:b8:bf:46:4a:36:95:99:c7:be:49:
01:a3:a3:c7:c6:d4:f7:fc:c1:6a:9a:8e:8c:6d:6b:
49:6a:72:00:f4:5f:7a:74:1c:ff:a0:29:27:02:6d:
46:24:2c:fd:70:a0:99:40:20:b6:f5:6f:5c:69:7f:
a7:50:37:0d:c9:a1:56:83:04:29:13:a4:e3:19:5f:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B8:35:95:2D:8C:F1:22:43:28:78:05:98:21:44:E2:E4:33:A5:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/897fb56e-da5b-3350-83c3-5691de7bc50e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.23.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:1c:9f:e3:52:32:16:72:86:32:d9:0d:cf:8e:11:45:08:6c:
67:45:d3:b1:4e:a0:92:d8:77:bf:e4:a1:d8:de:f7:d6:96:8e:
d4:92:13:05:a0:ae:43:85:7d:ea:75:fb:f5:f2:7f:ba:ad:be:
de:ff:dd:89:e7:f0:73:e7:f0:30:3a:fd:66:f9:9d:ee:08:45:
45:f0:5f:85:22:5e:4f:76:bb:b3:8a:11:92:a6:84:3b:92:e1:
67:03:a5:29:e6:e6:08:e4:a5:d1:6f:59:bd:9f:c5:8c:8a:ec:
21:70:4e:95:2b:66:cb:c3:68:53:8c:12:92:0c:6e:66:b9:43:
02:47:0b:62:c8:86:1f:f3:e0:61:48:04:6d:48:36:5e:19:b7:
21:19:97:6f:c8:35:26:fe:9a:c9:66:8d:a4:98:71:e8:4a:b2:
fd:9c:0a:74:f3:0e:a7:ea:be:2f:ca:e2:59:ee:66:48:88:bc:
81:bf:7f:d6:0e:2a:cf:31:ee:53:b4:12:b4:21:ac:24:a1:e2:
d1:c7:7a:cc:95:69:4e:0c:9c:67:ff:65:4a:1e:8e:6b:1c:0d:
19:cc:4e:81:da:16:94:47:b7:e3:d7:dd:38:66:88:96:ec:c8:
2f:36:88:1a:b4:59:31:db:9a:b9:33:95:ee:44:12:f1:cc:59:
0d:a7:14:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:00:53 2026 by rpki-client