
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/84cde4f4-6b3a-32b4-8547-230c540ead1d.roa
File: 84cde4f4-6b3a-32b4-8547-230c540ead1d.roa (raw, json)
Hash identifier: u34tOAkL2lavix0Z3tfIOiQ/VngrPxZgXAfyOkEHxLU=
Subject key identifier: 37:34:BB:F1:05:94:4D:D0:28:B1:FD:9E:9E:94:E5:D2:F8:4F:07:15
Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial: 010D0C9F4328584DB4A588D3CE0B6404991F8E80
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/84cde4f4-6b3a-32b4-8547-230c540ead1d.roa
Signing time: Sun 03 May 2026 01:00:23 +0000
ROA not before: Sun 03 May 2026 01:00:23 +0000
ROA not after: Sat 01 Aug 2026 01:00:23 +0000
asID: 23470
IP address blocks: 104.238.204.0/24 maxlen: 24
104.238.205.0/24 maxlen: 24
104.238.206.0/24 maxlen: 24
104.238.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b4:a5:88:d3:ce:0b:64:04:99:1f:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Validity
Not Before: May 3 01:00:23 2026 GMT
Not After : Aug 1 01:00:23 2026 GMT
Subject: CN=d9a8ec7e-93b3-404b-8a84-b5a30a7f154f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e9:e7:73:27:ac:32:1b:25:b3:58:90:d3:c1:
47:c9:c4:cf:4a:6a:a6:c0:b7:97:94:23:1f:42:b4:
af:03:1b:bb:bb:43:ad:35:84:07:a1:db:d1:a1:93:
11:35:31:d9:c4:3f:b2:ca:bf:38:fa:e3:fa:81:d4:
03:12:3f:51:a3:ea:d4:7f:fb:29:ca:5f:e2:ef:f2:
ac:34:e6:f0:c6:5a:ca:87:59:c3:74:08:75:9d:cb:
25:13:7a:2e:9e:04:f7:91:3f:02:f3:19:3f:8b:14:
eb:66:be:2f:39:68:b6:a3:48:83:e8:37:f4:19:6e:
24:95:6e:08:85:bd:8a:58:43:4f:8d:65:9e:7b:32:
6a:82:79:3d:10:ce:13:9c:36:7f:b5:24:4e:4f:03:
ca:8c:e7:29:a9:8c:c1:22:74:46:ed:2b:f2:0d:4c:
19:21:5a:39:b9:eb:60:fb:bc:b5:3e:4d:12:11:89:
92:e1:52:49:a2:10:32:ba:35:07:30:16:51:95:75:
0b:a1:03:1f:b1:5a:1e:d2:2d:86:f2:5d:c0:24:1a:
64:e8:1e:e3:9f:94:fa:bc:3e:93:3d:e3:b8:17:19:
30:0e:6d:74:85:0b:59:e9:4e:10:a5:be:29:b0:e2:
49:8f:5c:18:f1:68:29:ce:2f:f5:1e:a8:d0:3a:22:
fd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:34:BB:F1:05:94:4D:D0:28:B1:FD:9E:9E:94:E5:D2:F8:4F:07:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/84cde4f4-6b3a-32b4-8547-230c540ead1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
X509v3 Authority Key Identifier:
keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
sbgp-ipAddrBlock: critical
IPv4:
104.238.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:25:46:c5:7c:d5:3a:c0:d9:bf:e2:d5:5b:1d:ed:e3:89:6f:
e6:7f:d3:48:d2:95:68:55:21:af:84:ef:c4:7a:e4:9b:1a:87:
1d:a9:7d:7c:3a:b6:2f:ba:3b:fb:23:1a:79:ab:f5:bb:18:2b:
6a:5b:e2:f8:76:7e:26:80:f3:41:48:01:72:2a:27:23:bc:f9:
7e:ad:8e:84:f2:7e:a2:96:b6:b2:db:b1:70:be:fe:6a:4c:93:
05:8e:db:99:34:58:23:bc:8c:50:36:09:75:0c:fc:74:c3:2b:
48:56:cd:60:7e:3e:3a:7d:8c:b2:75:de:8b:22:e3:43:f1:e2:
eb:5d:ff:29:4c:9c:26:d9:5e:af:59:ed:30:1c:3a:96:05:99:
c4:3b:f4:5e:10:90:2f:03:14:63:2b:14:e6:a3:55:ad:ef:7b:
bf:8e:14:8c:9a:fc:e1:81:c8:36:a7:d9:32:9a:09:33:e4:03:
1e:d1:7b:2f:cb:db:1d:58:cc:11:3c:93:be:2c:1d:a3:e6:8e:
d2:08:ea:3d:fb:e8:f2:0c:90:dc:cd:85:0f:47:d7:a5:18:91:
aa:d1:3e:20:4b:54:e1:ce:35:37:3d:c2:f3:3a:4e:cd:76:d9:
e4:c4:70:56:f2:bc:7c:ab:ea:d1:cd:c1:8d:be:fe:62:4b:a8:
ae:cb:d6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:10:08 2026 by rpki-client