
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9da9201f-16ee-311d-a4d2-4238a2cc88ae.roa
File: 9da9201f-16ee-311d-a4d2-4238a2cc88ae.roa (raw, json)
Hash identifier: UigJFh8iitNmwKjI4tg0shl/Wx2P7PhltLe7F4gHnQ0=
Subject key identifier: 6F:B5:D3:32:A3:17:8B:2C:2E:09:C3:20:5B:03:0F:71:90:16:E8:8E
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584CD433F31136419B0B93F3B180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9da9201f-16ee-311d-a4d2-4238a2cc88ae.roa
Signing time: Wed 11 Feb 2026 15:30:41 +0000
ROA not before: Wed 11 Feb 2026 15:30:41 +0000
ROA not after: Tue 12 May 2026 14:30:41 +0000
asID: 14789
IP address blocks: 104.22.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d4:33:f3:11:36:41:9b:0b:93:f3:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 11 15:30:41 2026 GMT
Not After : May 12 14:30:41 2026 GMT
Subject: CN=6f15bc05-a2f4-4f51-b349-a01410e1cba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:39:7c:5d:05:87:e3:34:c4:7f:76:fc:2f:1e:
e3:af:8b:14:2a:f5:71:6a:d3:f5:1d:34:c4:c5:58:
0e:07:20:cc:00:34:eb:e2:dd:3d:65:a1:3a:99:0a:
5a:7a:80:9e:c9:37:2d:c6:44:8b:e2:80:7b:30:66:
01:dc:47:43:c2:b2:fd:49:48:aa:c0:ad:b6:92:87:
01:9a:a1:c3:9d:f9:0a:8b:c6:19:13:28:9b:3d:16:
fa:68:42:fe:3b:32:c5:03:23:dc:41:52:ea:84:55:
c1:af:22:71:17:51:ea:d4:51:b6:51:0b:eb:05:ae:
56:e9:50:89:e4:2f:9a:87:2a:bd:2e:87:c0:23:1c:
c9:97:35:9e:b2:33:8f:c9:cb:0c:7f:b4:51:55:97:
1c:63:a6:18:95:7d:e4:bd:7e:aa:d6:89:cb:5f:96:
64:01:25:9d:d7:75:76:6b:7d:0a:a8:d4:31:cc:d9:
88:fb:e0:e7:d4:2d:5d:71:53:40:bf:a0:12:31:20:
72:a4:ea:3d:da:b9:52:68:69:4a:43:b9:e9:5d:4c:
d0:f5:06:8f:63:d3:a4:87:ed:e3:f9:96:d6:45:96:
d4:f9:8f:68:b7:1f:fe:19:db:9a:18:06:fa:14:38:
26:28:8e:9d:71:94:45:9b:d1:c9:b3:85:58:2c:23:
50:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B5:D3:32:A3:17:8B:2C:2E:09:C3:20:5B:03:0F:71:90:16:E8:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9da9201f-16ee-311d-a4d2-4238a2cc88ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.22.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:e3:81:0f:4f:e9:87:ad:8a:fe:a1:f9:f8:7c:4c:30:b5:40:
63:57:0d:4c:f2:01:66:7c:41:fa:c3:18:b5:a4:9a:0e:31:72:
98:d0:9a:47:d6:1b:43:2f:e9:37:96:01:4d:75:b1:67:ea:a0:
ba:ef:16:d8:6c:2f:77:3b:f5:5d:e9:13:37:da:b9:df:e0:1a:
f3:ee:40:49:7e:db:9b:5c:a8:f8:73:f6:f5:01:cc:af:60:a5:
1d:ff:fa:9f:55:52:b2:01:30:a5:5a:f8:0e:a6:68:fd:40:b5:
86:db:ba:be:d5:e2:b1:e6:42:0b:d5:e3:6d:12:65:0b:84:a6:
13:ed:3a:da:45:ef:17:b4:fb:5c:c8:e1:ee:42:32:c0:13:52:
e0:18:10:d4:26:20:08:a7:30:59:f0:31:58:43:57:64:42:34:
ac:27:e6:85:32:a4:79:b0:c0:ae:af:c1:34:b7:54:26:38:9c:
6a:6d:37:06:4a:c6:11:1b:28:3c:2f:57:85:fc:62:1f:f8:51:
57:9c:fe:30:44:02:53:63:22:e2:ac:87:3a:0d:d8:24:a5:a7:
3d:fe:91:33:ff:e0:9b:f0:a2:8a:0f:e4:d6:12:61:7f:ca:ba:
e3:d5:ae:d1:cf:48:3a:86:66:93:44:d6:45:de:b5:95:1a:5a:
b5:e5:86:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:26:03 2026 by rpki-client