
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec690f54-3575-3183-ab53-83878f991c00.roa
File: ec690f54-3575-3183-ab53-83878f991c00.roa (raw, json)
Hash identifier: DBpKafI035xDtikvOuFhsvHILi7uItl1DNe9EiOQSgo=
Subject key identifier: F4:4C:17:ED:A7:76:05:66:C4:67:CB:82:5C:C6:20:0B:3F:C8:36:C2
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D5F7FA3629B18361D3268A540
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec690f54-3575-3183-ab53-83878f991c00.roa
Signing time: Thu 02 Apr 2026 13:00:30 +0000
ROA not before: Thu 02 Apr 2026 13:00:30 +0000
ROA not after: Wed 01 Jul 2026 13:00:30 +0000
asID: 395747
IP address blocks: 104.31.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5f:7f:a3:62:9b:18:36:1d:32:68:a5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 2 13:00:30 2026 GMT
Not After : Jul 1 13:00:30 2026 GMT
Subject: CN=a69cdfaf-4579-47f6-8c49-6e4b23acf6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:6b:8b:49:8d:5c:19:07:f0:e3:f9:15:d2:
b7:65:9f:91:79:6d:89:36:c9:2f:14:06:23:a6:d4:
64:99:5d:83:69:53:e5:89:5f:42:69:be:d0:72:52:
08:cd:da:2e:4b:77:dd:bb:8a:a0:17:90:09:21:ae:
16:5a:d2:ab:a5:6f:ec:2f:42:f4:e9:1e:c0:cb:73:
71:0d:25:20:be:c3:bf:d2:27:ac:0c:13:17:e7:cb:
59:80:1d:0f:a5:43:a3:c5:15:3d:ae:40:c0:9e:4f:
b4:50:c3:3e:57:1d:f1:8c:44:f5:cf:58:7e:cc:d0:
55:1c:46:b3:5d:74:7c:cc:8c:8f:4d:8e:81:ed:a9:
fe:98:eb:6a:17:3f:56:6c:e2:34:4d:cd:cb:d6:a1:
4e:b7:2b:ca:e7:f9:9c:27:03:a9:18:11:1e:ac:63:
69:3f:a5:75:1a:56:bf:7d:26:fc:1a:a4:60:98:bd:
96:6b:9d:0d:94:0e:90:ac:c6:7f:2f:cb:1d:7d:0a:
ff:ca:ab:65:04:f7:d6:d4:ba:18:33:2e:19:80:2b:
90:ba:ad:59:54:de:d2:71:01:35:fa:a7:24:12:f2:
ad:6a:03:89:d1:2e:41:0d:97:f3:c7:43:73:7b:02:
b3:50:a6:58:47:0f:33:0c:42:43:de:08:e6:fa:ac:
01:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4C:17:ED:A7:76:05:66:C4:67:CB:82:5C:C6:20:0B:3F:C8:36:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec690f54-3575-3183-ab53-83878f991c00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.31.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:bd:d2:b3:f2:40:3c:e0:42:81:af:d1:7e:65:dd:85:a5:a6:
c2:46:3c:94:b7:a9:77:9e:c5:42:8d:b8:db:42:74:21:a9:e3:
55:cf:aa:34:6f:e3:26:ff:b1:9f:19:6d:b9:75:c4:08:e3:ab:
3e:e3:6f:6f:c0:d0:98:14:53:dc:f6:7f:b0:44:a3:71:e6:ea:
02:fe:24:26:cc:6e:1b:d9:35:45:e3:32:57:fa:de:0b:0a:3c:
49:6a:72:8d:aa:5d:53:5d:66:8f:76:d1:8a:1a:72:e2:7e:26:
c9:da:8f:0b:2c:2d:70:20:b8:5d:d5:d5:eb:8a:a7:9d:b6:ba:
4d:68:2e:75:15:b0:78:44:f7:92:66:89:e1:87:d4:77:a0:7f:
5c:74:00:11:ac:3b:10:62:fd:40:80:0d:41:a7:f0:e6:41:c3:
3f:65:ed:07:2b:c8:7f:f1:0a:b7:60:c4:ca:a9:5e:24:f3:f1:
eb:af:4e:48:31:f5:87:59:6d:49:0e:59:46:00:f6:ac:c8:a4:
d0:70:ef:5f:cd:3e:26:1e:dc:30:75:dd:cf:e2:09:65:fc:1b:
da:6f:06:60:16:79:93:b5:ea:b5:34:e1:39:e8:52:00:1d:5f:
c2:ed:35:47:ab:1d:cd:74:57:78:74:db:74:ab:8c:99:f5:a6:
dc:8e:54:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ff6Nimxg2HTJopUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk
YTY5Y2RmYWYtNDU3OS00N2Y2LThjNDktNmU0YjIzYWNmNmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1hri0mNXBkH8OP5FdK3ZZ+ReW2JNskvFAYj
ptRkmV2DaVPliV9Cab7QclIIzdouS3fdu4qgF5AJIa4WWtKrpW/sL0L06R7Ay3Nx
DSUgvsO/0iesDBMX58tZgB0PpUOjxRU9rkDAnk+0UMM+Vx3xjET1z1h+zNBVHEaz
XXR8zIyPTY6B7an+mOtqFz9WbOI0Tc3L1qFOtyvK5/mcJwOpGBEerGNpP6V1Gla/
fSb8GqRgmL2Wa50NlA6QrMZ/L8sdfQr/yqtlBPfW1LoYMy4ZgCuQuq1ZVN7ScQE1
+qckEvKtagOJ0S5BDZfzx0NzewKzUKZYRw8zDEJD3gjm+qwBpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPRMF+2ndgVmxGfLglzGIAs/yDbCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWM2OTBmNTQtMzU3NS0z
MTgzLWFiNTMtODM4NzhmOTkxYzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaB8UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIC90rPyQDzgQoGv0X5l3YWlpsJGPJS3qXeexUKNuNtCdCGp41XPqjRv
4yb/sZ8Zbbl1xAjjqz7jb2/A0JgUU9z2f7BEo3Hm6gL+JCbMbhvZNUXjMlf63gsK
PElqco2qXVNdZo920YoacuJ+JsnajwssLXAguF3V1euKp522uk1oLnUVsHhE95Jm
ieGH1Hegf1x0ABGsOxBi/UCADUGn8OZBwz9l7QcryH/xCrdgxMqpXiTz8euvTkgx
9YdZbUkOWUYA9qzIpNBw71/NPiYe3DB13c/iCWX8G9pvBmAWeZO16rU04TnoUgAd
X8LtNUerHc10V3h023SrjJn1ptyOVPU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:51:50 2026 by rpki-client