
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5cf16fd8-d01c-3efe-b447-136a16831b92.roa
File: 5cf16fd8-d01c-3efe-b447-136a16831b92.roa (raw, json)
Hash identifier: gYgwsPJUtvEyuz9EUmOdCn04w9HePfNXIMReQwrUUqQ=
Subject key identifier: 7C:2A:87:F0:9A:BC:40:84:2B:FE:08:A1:33:A6:8E:D7:21:EE:93:BF
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E48249DA61D6DA583FE0BAC80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5cf16fd8-d01c-3efe-b447-136a16831b92.roa
Signing time: Wed 24 Jun 2026 21:00:12 +0000
ROA not before: Wed 24 Jun 2026 21:00:12 +0000
ROA not after: Tue 22 Sep 2026 21:00:12 +0000
asID: 13335
IP address blocks: 104.29.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:48:24:9d:a6:1d:6d:a5:83:fe:0b:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 24 21:00:12 2026 GMT
Not After : Sep 22 21:00:12 2026 GMT
Subject: CN=4e93882c-6be6-4dec-9320-d08b3d0aabbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:39:cd:64:8e:6f:6c:31:27:cc:db:b3:bd:
2b:40:9b:89:41:e7:45:7d:c9:62:0a:d0:39:a1:13:
34:3b:00:55:0d:9c:9f:2b:83:2d:cb:83:62:bd:7c:
aa:2b:50:24:9b:e6:29:fc:10:43:a9:76:9d:e9:4b:
22:2a:f1:44:dd:7c:f5:49:82:23:b3:10:6d:f2:14:
33:0a:db:5f:99:87:b3:b0:27:ba:75:1d:4c:af:42:
49:76:77:35:52:77:6b:cc:7f:55:a8:4c:72:f5:c0:
57:19:90:a8:9e:18:a1:a9:69:5b:d0:86:ff:40:06:
26:94:f9:92:c4:01:2e:92:73:01:21:a5:78:da:bd:
e1:af:e5:80:23:10:c9:16:8f:32:12:49:6b:82:b4:
18:bc:4b:ba:52:b7:15:ae:35:80:36:ec:32:e8:01:
58:fa:9d:e6:97:08:64:f6:4f:d6:d8:ba:9a:ba:d8:
fe:bd:f8:19:6a:8b:96:8c:09:bf:30:7e:3e:a0:ed:
d8:1e:60:95:7a:d0:af:23:6a:a1:f1:b8:cb:cc:f3:
f5:fd:32:6f:db:b0:65:dc:0f:b3:88:9a:b9:b9:11:
fa:f0:25:b7:b7:39:e5:5e:4f:31:fe:2b:2f:02:12:
c4:fa:b5:4b:6a:d8:33:2b:0d:48:af:a8:4f:0e:0a:
dd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2A:87:F0:9A:BC:40:84:2B:FE:08:A1:33:A6:8E:D7:21:EE:93:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5cf16fd8-d01c-3efe-b447-136a16831b92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:3f:d3:93:7e:b6:bf:b9:96:53:bd:ed:ce:4d:5f:1d:cd:08:
37:27:fd:f2:f5:a8:a6:59:85:5e:45:65:12:ca:51:df:38:63:
c1:46:07:86:c2:16:cb:cf:e1:27:df:ac:44:23:65:c7:e6:76:
8b:57:08:61:58:0f:ae:fa:54:18:42:10:e6:8c:80:87:a0:e5:
76:07:47:43:fe:5e:3e:a2:db:f3:d6:93:5f:50:6e:cf:17:36:
c1:2f:3d:66:79:a8:7c:87:82:26:ab:51:f9:26:9d:47:42:7f:
53:ee:de:bd:a4:59:e8:d1:30:da:ca:73:09:e0:e7:87:38:91:
10:eb:a9:e0:8e:68:cb:81:16:0b:3b:f3:39:e3:eb:af:bb:a3:
94:c5:1d:50:26:4a:78:7e:f0:dd:0e:42:a5:4d:5c:47:46:f2:
19:9f:bd:8f:18:df:c8:73:ad:b4:88:88:2e:8f:dd:fd:d1:86:
23:f0:87:fd:a1:7c:43:3f:a4:d3:1f:07:b6:61:a2:a4:75:89:
9e:d0:ff:b5:62:cd:04:3d:09:85:04:86:36:f0:14:00:c4:4a:
3b:73:9f:34:87:89:e2:bb:db:13:f5:94:59:eb:b6:14:aa:02:
61:b9:f5:b2:14:21:ed:0c:22:c4:2a:e1:7a:68:f5:f0:a2:1e:
30:59:fb:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJJ2mHW2lg/4LrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk
NGU5Mzg4MmMtNmJlNi00ZGVjLTkzMjAtZDA4YjNkMGFhYmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGg5zWSOb2wxJ8zbs70rQJuJQedFfcliCtA5
oRM0OwBVDZyfK4Mty4NivXyqK1Akm+Yp/BBDqXad6UsiKvFE3Xz1SYIjsxBt8hQz
CttfmYezsCe6dR1Mr0JJdnc1UndrzH9VqExy9cBXGZConhihqWlb0Ib/QAYmlPmS
xAEuknMBIaV42r3hr+WAIxDJFo8yEklrgrQYvEu6UrcVrjWANuwy6AFY+p3mlwhk
9k/W2Lqautj+vfgZaouWjAm/MH4+oO3YHmCVetCvI2qh8bjLzPP1/TJv27Bl3A+z
iJq5uRH68CW3tznlXk8x/isvAhLE+rVLatgzKw1Ir6hPDgrdRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHwqh/CavECEK/4IoTOmjtch7pO/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWNmMTZmZDgtZDAxYy0z
ZWZlLWI0NDctMTM2YTE2ODMxYjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAY/05N+tr+5llO97c5NXx3NCDcn/fL1qKZZhV5FZRLKUd84Y8FGB4bC
FsvP4SffrEQjZcfmdotXCGFYD676VBhCEOaMgIeg5XYHR0P+Xj6i2/PWk19Qbs8X
NsEvPWZ5qHyHgiarUfkmnUdCf1Pu3r2kWejRMNrKcwng54c4kRDrqeCOaMuBFgs7
8znj66+7o5TFHVAmSnh+8N0OQqVNXEdG8hmfvY8Y38hzrbSIiC6P3f3RhiPwh/2h
fEM/pNMfB7ZhoqR1iZ7Q/7VizQQ9CYUEhjbwFADESjtznzSHieK72xP1lFnrthSq
AmG59bIUIe0MIsQq4Xpo9fCiHjBZ+zA=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:33:41 2026 by rpki-client