
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afde6ea1-89e2-3302-863c-c2ece761e905.roa
File: afde6ea1-89e2-3302-863c-c2ece761e905.roa (raw, json)
Hash identifier: HecoyczoQ27YBEKcK5J4beYDqO5Sinen8lGFiRmv1kg=
Subject key identifier: E8:83:0F:B6:AC:B0:9B:AD:43:1B:C7:90:01:44:AE:8D:C2:3B:54:45
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584CB551C6E0149AFF9945B94F80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afde6ea1-89e2-3302-863c-c2ece761e905.roa
Signing time: Sat 31 Jan 2026 14:00:39 +0000
ROA not before: Sat 31 Jan 2026 14:00:39 +0000
ROA not after: Fri 01 May 2026 13:00:39 +0000
asID: 13335
IP address blocks: 104.22.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b5:51:c6:e0:14:9a:ff:99:45:b9:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jan 31 14:00:39 2026 GMT
Not After : May 1 13:00:39 2026 GMT
Subject: CN=a18bdda1-9511-4541-9046-be6d40943bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:23:9e:3f:58:e9:13:5c:a9:37:f7:0d:c9:
1b:4d:66:60:99:be:b7:68:30:cf:03:35:6b:29:fc:
26:64:56:98:2e:1b:e9:8a:90:e8:10:8d:99:26:38:
05:2d:2c:a6:86:98:b7:72:06:07:a1:38:b5:4a:65:
23:ff:5f:c3:dd:72:03:66:18:9e:78:a1:1c:b9:04:
e9:8d:f1:e2:a6:ae:53:ad:62:08:e4:a5:1e:a3:f3:
37:36:23:1b:09:b5:66:63:66:a4:93:c6:a3:b1:d3:
02:fb:b2:81:06:06:28:6b:00:4d:ca:90:2c:32:32:
16:e1:f4:a7:3e:ce:c9:1a:dd:6a:64:39:8d:80:dd:
72:d0:3e:44:08:dc:de:09:9c:97:38:c2:65:a4:a1:
62:a9:dd:77:1e:42:de:ab:30:3b:fd:68:d8:02:fe:
6f:4a:0f:23:e7:0d:5f:9a:63:e1:58:07:37:bc:b3:
ba:1a:3c:18:b9:07:33:b2:7c:79:c3:5f:86:f9:ed:
b1:3d:28:7e:11:88:7e:15:bd:3f:15:3e:d9:7a:d8:
a6:01:3c:10:87:a5:5e:e5:bb:34:1f:5c:16:ce:11:
59:18:34:6d:d1:3d:88:42:e8:4a:77:6d:ba:50:c9:
8a:a9:a2:a8:c0:b6:31:fa:d3:25:bf:d2:1d:fc:dd:
ac:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:83:0F:B6:AC:B0:9B:AD:43:1B:C7:90:01:44:AE:8D:C2:3B:54:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afde6ea1-89e2-3302-863c-c2ece761e905.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.22.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:47:33:8a:77:90:e0:cc:1e:32:8f:6c:6e:6f:1c:5d:20:dc:
56:5a:73:da:84:20:a7:15:2e:5d:db:58:f2:92:77:72:4d:0d:
62:2f:ac:d0:09:15:ac:45:8b:10:0c:cc:b6:f1:72:40:1b:22:
54:bd:c5:8b:f4:e7:90:67:e5:15:e5:dc:51:59:70:9f:4e:dc:
bb:97:96:c3:84:7c:c5:ed:f2:24:2b:e5:a9:42:42:13:a4:44:
94:a0:01:71:c8:14:ae:62:75:cf:31:f2:2d:b6:c4:65:bc:0d:
4a:d6:21:cf:6c:6a:f0:1a:b7:d4:ba:9f:2f:3b:64:3c:c1:86:
8a:a1:d8:f9:6c:71:08:cf:c6:26:fe:25:b0:48:07:ba:99:0a:
01:4b:67:14:bc:e8:c1:1f:f2:5d:87:b7:d9:7b:a5:4e:a0:a6:
8f:66:47:08:d6:6f:0f:fa:2d:e1:d7:61:fe:9a:59:9e:4f:24:
91:38:65:da:ca:58:7e:b1:b0:d6:a4:7b:73:de:47:83:8c:cd:
ef:74:ab:e0:2e:bb:7e:30:4c:2c:13:c7:ba:d0:78:7d:df:1c:
ad:e0:f0:2d:5d:eb:72:8d:69:86:2f:b5:50:cb:6b:ff:d6:3a:
42:0f:82:1f:c2:c0:0c:e9:cb:b0:81:20:33:a3:fb:be:89:03:
68:a2:33:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:54:03 2026 by rpki-client