
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83090252-48f0-39e4-9ba7-8aa2153e3236.roa
File: 83090252-48f0-39e4-9ba7-8aa2153e3236.roa (raw, json)
Hash identifier: ajscCv9OFWjgjChhp4uRkkviK06OLf80p0knh1sPEks=
Subject key identifier: F2:5C:3F:12:E9:AF:14:45:A7:D3:FF:09:70:7F:37:46:A6:F1:82:45
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D143D1146B993D349B22B8F30
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83090252-48f0-39e4-9ba7-8aa2153e3236.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 13335
IP address blocks: 104.29.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:11:46:b9:93:d3:49:b2:2b:8f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=021a6c85-f546-48a8-8710-cd542e8f83aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:62:eb:70:d9:a7:71:4f:ec:e3:a7:40:76:
f7:08:67:0b:35:82:4c:d9:f8:8d:bd:97:9c:bb:c0:
80:89:99:24:3b:a1:96:b0:6a:e6:ac:d3:99:f6:f3:
42:82:94:28:52:ba:10:55:5e:3b:fb:92:92:44:c8:
7d:31:7b:db:71:8f:e6:df:94:fe:ef:a5:32:9a:81:
59:61:02:9b:13:a4:5a:28:1e:7a:c7:c9:43:2b:16:
88:5f:dd:9b:b5:94:9d:a3:11:c7:49:6e:a2:42:8f:
69:d4:3b:92:9c:24:13:42:00:58:96:2f:8a:67:e6:
ba:3b:8e:66:7e:1c:57:1b:e1:48:db:68:2d:54:6c:
bd:d2:5b:58:a9:0e:ef:b5:16:5b:42:bc:1c:70:76:
d4:f4:8f:5f:56:2f:16:19:27:fd:b6:9f:fb:3c:65:
90:aa:ff:c5:ce:20:e6:cb:42:50:6e:83:bb:3f:e3:
8a:36:fb:e0:d0:57:39:46:77:f4:a0:a2:38:f7:20:
83:3d:22:a2:c2:b1:0d:05:30:32:1a:01:41:06:4b:
73:b1:05:9c:8e:65:9a:e3:60:d3:8e:a1:f6:80:6a:
ef:31:a5:c3:53:8b:9e:9d:be:58:ad:e4:b6:57:25:
f2:cf:30:b8:57:ee:d3:22:60:ee:83:0f:31:0b:a1:
05:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5C:3F:12:E9:AF:14:45:A7:D3:FF:09:70:7F:37:46:A6:F1:82:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83090252-48f0-39e4-9ba7-8aa2153e3236.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:6a:85:bc:16:ab:da:e5:59:1a:d1:96:99:c0:7b:d1:02:20:
88:70:2f:88:8d:64:e9:de:75:fa:29:d9:8a:49:fe:64:87:8c:
61:db:e4:1b:6f:21:91:56:3f:f9:fc:4a:4e:66:6f:34:64:31:
60:38:74:9c:da:b5:1d:1d:76:cb:0d:10:b4:61:19:47:44:7f:
20:46:73:96:b7:ea:cd:21:34:81:c5:6d:48:df:94:69:be:c7:
79:7e:69:83:e8:8f:3e:69:b6:50:4e:c8:be:24:19:8d:fc:fc:
3c:c1:31:35:db:48:9b:1a:a1:58:5e:02:63:76:5b:74:9e:d1:
0e:85:49:6d:01:6f:09:50:80:08:03:5e:b9:88:86:15:e5:76:
97:49:6d:5b:2e:b8:69:4e:0e:65:94:43:1c:21:b1:57:0c:b8:
cf:9e:08:a6:dd:50:50:18:e1:98:fb:bf:11:4d:3f:2d:39:13:
a5:38:c4:38:df:9c:c7:c5:da:b4:04:ad:fd:d8:18:02:2c:30:
0e:35:80:6c:12:b2:ac:41:da:cf:e5:bd:11:f8:5a:8b:50:0c:
0a:c2:ce:61:08:b4:0c:34:38:d2:10:e4:fd:b6:70:93:04:0a:
8a:3d:b4:48:7a:b3:30:c3:ca:86:a0:cd:b1:78:1d:55:8d:56:
5d:c6:9b:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPRFGuZPTSbIrjzAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
MDIxYTZjODUtZjU0Ni00OGE4LTg3MTAtY2Q1NDJlOGY4M2FhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8Bi63DZp3FP7OOnQHb3CGcLNYJM2fiNvZec
u8CAiZkkO6GWsGrmrNOZ9vNCgpQoUroQVV47+5KSRMh9MXvbcY/m35T+76UymoFZ
YQKbE6RaKB56x8lDKxaIX92btZSdoxHHSW6iQo9p1DuSnCQTQgBYli+KZ+a6O45m
fhxXG+FI22gtVGy90ltYqQ7vtRZbQrwccHbU9I9fVi8WGSf9tp/7PGWQqv/FziDm
y0JQboO7P+OKNvvg0Fc5Rnf0oKI49yCDPSKiwrENBTAyGgFBBktzsQWcjmWa42DT
jqH2gGrvMaXDU4uenb5YreS2VyXyzzC4V+7TImDugw8xC6EFlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPJcPxLprxRFp9P/CXB/N0am8YJFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODMwOTAyNTItNDhmMC0z
OWU0LTliYTctOGFhMjE1M2UzMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH1qhbwWq9rlWRrRlpnAe9ECIIhwL4iNZOnedfop2YpJ/mSHjGHb5Btv
IZFWP/n8Sk5mbzRkMWA4dJzatR0ddssNELRhGUdEfyBGc5a36s0hNIHFbUjflGm+
x3l+aYPojz5ptlBOyL4kGY38/DzBMTXbSJsaoVheAmN2W3Se0Q6FSW0BbwlQgAgD
XrmIhhXldpdJbVsuuGlODmWUQxwhsVcMuM+eCKbdUFAY4Zj7vxFNPy05E6U4xDjf
nMfF2rQErf3YGAIsMA41gGwSsqxB2s/lvRH4WotQDArCzmEItAw0ONIQ5P22cJME
Coo9tEh6szDDyoagzbF4HVWNVl3Gm9M=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:08:07 2026 by rpki-client