
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb7a7706-2d04-30bb-8d9d-a9683f39d7ae.roa
File: bb7a7706-2d04-30bb-8d9d-a9683f39d7ae.roa (raw, json)
Hash identifier: /l7a+Hx/fNQft5S+85nnAWjpQycTwnAxhAQN5456Jb4=
Subject key identifier: F2:67:B8:03:4E:30:28:E7:9D:C2:8C:03:47:C3:3D:37:6B:E3:43:B1
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584CB981F8FC6C65BA8C8C44B380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb7a7706-2d04-30bb-8d9d-a9683f39d7ae.roa
Signing time: Mon 02 Feb 2026 02:00:32 +0000
ROA not before: Mon 02 Feb 2026 02:00:32 +0000
ROA not after: Sun 03 May 2026 01:00:32 +0000
asID: 13335
IP address blocks: 104.23.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b9:81:f8:fc:6c:65:ba:8c:8c:44:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 2 02:00:32 2026 GMT
Not After : May 3 01:00:32 2026 GMT
Subject: CN=90ef12b8-f9ae-4393-8e6b-29421c5856f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b8:11:5b:e1:f6:d1:12:96:82:6b:8a:42:46:
9e:c8:57:28:c3:94:0d:96:74:a2:6b:6a:02:d1:9b:
ec:bd:b5:7e:15:80:57:e0:8a:6d:3e:c9:65:48:44:
f1:37:6d:c3:a6:17:2a:19:6e:c9:6d:b7:4e:ff:79:
a2:f7:29:f3:dd:fd:a3:4d:2f:6e:c1:63:37:4a:6a:
2f:42:72:d0:b1:c3:0b:77:0f:0c:4f:ea:5c:df:21:
1e:bc:3d:fd:66:2e:3c:fd:8b:9d:76:e6:b2:ce:95:
dd:03:00:d2:38:64:4f:b5:53:57:b8:40:41:cf:f6:
7d:a4:b6:0b:cf:d4:e3:74:ea:5e:9d:b3:26:57:b2:
46:1c:91:d4:13:78:67:74:9b:19:b6:ff:9d:03:85:
cc:36:fb:b9:79:fb:1e:10:fb:78:4c:93:3f:47:3b:
64:90:18:20:48:86:ec:8b:7b:48:93:d6:a8:18:59:
53:ba:ef:6a:33:d0:c9:bb:ca:45:e6:db:0f:be:09:
d3:7d:93:53:c1:c9:60:b9:18:eb:95:cf:45:95:d9:
2c:e2:cb:f3:33:62:86:cf:65:b3:fa:f1:58:6c:ca:
42:c5:34:2d:b3:9a:c4:bb:2a:e4:7b:90:59:f3:8e:
38:7b:6d:9c:ac:80:c1:47:a0:ab:35:f5:21:7f:68:
63:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:67:B8:03:4E:30:28:E7:9D:C2:8C:03:47:C3:3D:37:6B:E3:43:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb7a7706-2d04-30bb-8d9d-a9683f39d7ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.23.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:1c:61:9d:f4:2c:30:f3:fa:15:67:5d:9f:ca:cb:20:8c:3c:
a0:00:8c:85:fb:12:7a:41:e6:3d:15:43:7c:9f:95:44:f4:6f:
8e:93:c3:3d:b3:48:06:04:5c:7b:9a:8d:9c:bf:fa:00:76:91:
15:6c:3a:e3:33:e7:9d:d4:53:b2:c6:95:6e:fc:68:15:04:39:
51:8b:0f:31:43:4d:35:31:3b:51:98:94:6f:08:c5:5d:0c:22:
7d:28:86:a2:73:09:09:0a:33:f4:cc:c3:97:b5:7a:5e:0d:5f:
61:06:2a:1f:71:28:12:52:8e:17:ac:c2:de:59:79:f5:dd:8b:
e5:79:1e:28:9a:31:99:0f:d6:80:44:f8:8e:33:1d:7f:bd:94:
0a:0a:7f:29:ff:44:70:d2:7a:b5:b4:07:87:af:77:c2:13:8a:
f9:cc:4f:54:f3:19:1c:21:79:43:df:db:03:13:a7:24:c7:73:
be:31:8e:70:22:bf:86:9d:b0:b8:41:db:43:cb:7c:72:ec:07:
64:a3:9e:ab:16:23:7a:b3:53:55:b1:de:7a:1e:ca:86:38:61:
06:6c:d0:95:8f:e4:e0:6b:bb:8b:eb:f2:b3:ec:70:fa:0b:c1:
79:43:ed:f5:c0:12:6d:dd:83:7d:bb:0e:9d:fe:42:16:89:24:
14:1a:54:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:51:14 2026 by rpki-client