
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8be1effc-cfa7-3b8d-a081-510cb1054720.roa
File: 8be1effc-cfa7-3b8d-a081-510cb1054720.roa (raw, json)
Hash identifier: lNulXLmQv7QXOWiDv9O1Pofkz1hHsgWDaPEH8nmGB7I=
Subject key identifier: E4:12:34:DD:09:1E:26:D6:72:85:1D:08:61:01:E8:27:7D:9B:12:27
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E4824963DD7D6FCCCED5DDCC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8be1effc-cfa7-3b8d-a081-510cb1054720.roa
Signing time: Wed 24 Jun 2026 21:00:12 +0000
ROA not before: Wed 24 Jun 2026 21:00:12 +0000
ROA not after: Tue 22 Sep 2026 21:00:12 +0000
asID: 13335
IP address blocks: 104.16.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:48:24:96:3d:d7:d6:fc:cc:ed:5d:dc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 24 21:00:12 2026 GMT
Not After : Sep 22 21:00:12 2026 GMT
Subject: CN=3421bb57-90be-4a17-b10e-e88ce2f2d95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:09:a7:20:e2:6a:d9:d7:fd:16:74:35:50:b1:
3e:39:71:fb:e7:43:be:89:3f:54:5c:72:4a:f3:3d:
35:b6:6f:a4:27:7e:fb:8b:13:9a:24:bf:bb:37:c7:
2b:2f:fa:3f:1e:61:d3:4b:a8:b3:18:1e:05:f6:fc:
82:75:d2:4b:7c:cc:37:ec:3d:d7:c6:da:07:e3:99:
2c:43:40:a8:3f:ab:a2:00:9f:18:64:32:e8:bb:9a:
23:8a:1d:bc:a6:1b:17:dc:3b:79:bf:9e:b1:a6:db:
9b:2c:a5:52:dd:15:03:b5:e6:65:fd:f2:89:47:e7:
35:3b:40:f4:12:5c:a7:49:8a:df:36:32:2a:a8:da:
53:90:bb:0a:36:57:f5:20:cd:21:a6:9d:05:e4:65:
df:0f:c6:f5:9d:a8:ac:49:71:d4:a7:50:5f:e4:b0:
f9:8c:0d:72:f8:a7:28:ef:20:b4:35:58:3a:ba:a3:
9e:35:25:f7:ec:8a:40:e3:72:bc:cf:8f:09:93:3d:
bd:5c:fc:6d:fd:77:40:24:ed:21:74:dd:df:ee:c0:
44:0b:7b:b1:ba:5e:09:59:09:58:ef:f3:63:55:84:
7b:c7:51:51:eb:f1:9d:8b:0c:2b:54:e4:0a:ac:fb:
95:22:b5:91:d2:04:91:1c:3a:fb:ba:c6:98:05:c5:
2f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:12:34:DD:09:1E:26:D6:72:85:1D:08:61:01:E8:27:7D:9B:12:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8be1effc-cfa7-3b8d-a081-510cb1054720.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.16.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:06:05:59:05:26:46:29:e1:85:46:fd:e7:1f:29:e1:e3:6b:
e0:71:32:94:06:75:ae:e0:7f:e0:26:27:cd:a6:59:a1:97:ec:
fc:05:33:00:45:16:8c:33:6d:34:82:f4:cc:f1:c4:7d:ea:db:
d2:18:a3:e7:4e:0a:a9:84:ae:d1:5e:eb:a5:6e:61:7d:48:cd:
c1:c2:cf:52:27:a1:76:65:80:fa:22:fd:d3:1c:24:19:6d:27:
7c:1a:25:7c:72:74:ed:11:41:70:e7:f7:20:b4:b5:f2:d1:12:
42:48:85:e3:32:d8:3a:6d:a7:ab:dc:05:77:fd:98:07:4a:c8:
9a:ab:7e:57:4e:86:d4:76:6e:0f:27:5d:8a:67:b9:c3:bb:f5:
d9:5e:bc:d5:be:bc:b1:93:36:08:74:55:ad:b9:18:d1:be:dd:
39:3c:fe:b0:78:ea:de:db:04:5d:9e:e0:36:62:3d:d8:e3:a0:
ed:c2:b9:46:f9:2c:18:a8:a9:0e:fd:31:ab:b1:21:ea:9e:c8:
88:be:f0:a6:07:96:83:09:a6:7d:04:d4:11:48:ec:15:88:24:
d1:6e:9a:32:da:17:b2:db:ae:dd:36:48:d0:cf:6c:ba:a7:49:
6a:ae:10:da:b4:34:10:8b:38:8b:31:ad:24:c1:65:6b:12:30:
f3:a8:16:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:25:26 2026 by rpki-client