
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c866806-6d79-3b67-a043-761b6dcaba0f.roa
File: 8c866806-6d79-3b67-a043-761b6dcaba0f.roa (raw, json)
Hash identifier: JGCXXaE+GEzOKR/VWrw1TH4PfxqaYW/L2hbBGf5pEQM=
Subject key identifier: 14:1C:D2:53:6A:61:DD:6D:2F:F2:F2:26:B9:C3:FE:FC:2A:EC:C9:A7
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584DD625CA257E396FD40AE43F80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c866806-6d79-3b67-a043-761b6dcaba0f.roa
Signing time: Fri 15 May 2026 01:00:24 +0000
ROA not before: Fri 15 May 2026 01:00:24 +0000
ROA not after: Thu 13 Aug 2026 01:00:24 +0000
asID: 14789
IP address blocks: 104.22.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d6:25:ca:25:7e:39:6f:d4:0a:e4:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: May 15 01:00:24 2026 GMT
Not After : Aug 13 01:00:24 2026 GMT
Subject: CN=6bc8de41-fe87-4ad5-bec6-77736890ca98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cd:cb:f4:b2:dd:7a:d8:41:d8:47:fe:77:8a:
bb:f5:07:a1:ff:af:01:af:32:4b:5d:53:b9:1b:f9:
f8:07:1c:8b:1a:7f:b0:ac:c0:40:b9:58:fe:ce:89:
ff:ba:dd:e5:65:e5:68:6f:01:4a:66:ca:bf:28:b3:
ae:10:bf:9e:5d:77:6d:4a:0d:6c:bc:bd:77:f1:50:
b4:ba:18:4f:6a:42:94:fa:f8:cf:8e:88:12:b9:4c:
33:b1:b4:06:ab:2d:ca:04:89:ea:79:a1:8c:65:81:
18:93:08:01:39:a5:a4:af:51:40:7d:d7:e7:13:95:
1f:b2:ce:f0:2c:8e:c2:e4:1a:aa:82:8d:c1:e6:95:
7d:04:3c:2a:69:c8:41:b1:d9:eb:35:84:b0:5b:c7:
6e:bb:86:89:cb:06:c6:11:d7:81:bc:c0:45:b9:21:
4a:ec:b8:1e:e7:e4:10:d1:17:23:23:24:56:57:50:
54:92:f3:d7:03:f9:ed:61:27:37:89:a2:f6:6e:67:
3d:63:d0:0b:3d:8b:10:90:c9:fb:19:15:e5:cf:19:
f0:63:4d:2a:2d:31:cf:39:9b:3c:8a:f6:bd:01:9d:
87:c6:c8:63:29:6d:1c:92:80:5b:ad:57:00:29:a1:
86:9c:be:f0:e8:6c:34:b9:42:63:96:52:43:46:4b:
cf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1C:D2:53:6A:61:DD:6D:2F:F2:F2:26:B9:C3:FE:FC:2A:EC:C9:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c866806-6d79-3b67-a043-761b6dcaba0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.22.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:72:0a:4d:e2:11:f2:46:67:1e:23:b3:ed:65:99:ea:27:f8:
69:f5:0c:55:52:32:f5:e0:f5:26:ce:5a:58:11:e4:8c:9a:32:
67:ac:93:66:5d:58:2c:ab:55:e7:d3:34:56:72:2e:98:05:cf:
b4:8c:1a:2a:15:9e:29:f2:be:8b:9a:fe:80:69:8f:0f:d2:76:
2e:7d:9e:9f:be:c7:d9:bd:53:06:fd:f8:36:4e:1f:c8:e9:9e:
33:0e:e7:51:95:56:7c:c2:38:3e:73:f7:6c:f6:67:04:c7:30:
af:0e:c2:4a:29:87:42:88:6d:f4:28:70:46:a8:07:a4:f7:0b:
89:73:1f:46:3b:da:4f:ac:a3:98:bc:34:61:8a:b8:26:84:b4:
e4:52:63:e2:d9:cf:81:80:a2:7f:58:80:70:e9:0e:f5:f8:4d:
d0:6b:0b:a5:02:04:38:38:aa:8b:4e:27:a3:75:7f:17:66:e9:
da:25:b2:e6:b1:c2:09:3b:75:80:41:0d:f5:7c:8f:7c:17:41:
f8:17:e7:a8:23:80:63:5f:55:3a:85:70:10:1c:be:97:9d:fb:
f1:73:e1:62:64:8f:3e:1b:c6:32:7d:cc:86:dd:61:9f:4f:21:
c6:87:e6:df:26:18:92:8e:db:3f:88:d6:27:8e:6f:84:77:12:
ed:8e:79:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:07:03 2026 by rpki-client