
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d42ae873-ebf2-30f4-b018-8470ff7c2590.roa
File: d42ae873-ebf2-30f4-b018-8470ff7c2590.roa (raw, json)
Hash identifier: 1RbIEWHFH7hiBrPFB96bza7a38wChruDf77nhO9P2mk=
Subject key identifier: 5C:50:09:FD:4F:12:16:F0:10:40:FD:95:D4:0E:68:6E:47:52:FD:1B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584F4986C12D427962038386C180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d42ae873-ebf2-30f4-b018-8470ff7c2590.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 13335
IP address blocks: 104.30.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:86:c1:2d:42:79:62:03:83:86:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=22ed6059-5b8c-480c-95b2-95ebba9e877e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fa:fd:01:7c:ff:6e:74:92:c4:8d:53:1e:ea:
d7:4a:81:14:fb:2d:49:4b:9f:1a:3c:2c:3b:77:66:
48:c2:00:5f:6d:d2:0c:f2:de:8c:f5:23:5f:e8:f8:
1d:a0:f3:f8:c9:55:1e:a4:77:61:5d:f4:b6:e7:db:
b0:29:76:ca:d9:9a:f8:96:4e:dc:79:c3:e1:1b:18:
0a:ba:c2:93:40:8f:28:4d:1d:4f:05:06:e3:f7:c9:
f6:a6:4a:01:f2:8c:5d:3c:47:94:b9:c3:8b:15:8e:
37:b5:5f:5b:bf:37:04:92:aa:aa:31:02:7d:42:26:
4b:8e:78:18:8f:3c:17:68:9d:64:13:fb:e3:44:27:
c2:8c:cb:e1:b3:8f:68:c2:77:3b:ea:35:79:ca:24:
44:7d:25:a3:9e:8b:ad:2d:79:1f:b7:0e:f0:e5:c5:
e0:5a:01:2e:55:2b:30:c6:7c:9e:8b:9c:c8:2b:29:
4c:d5:f6:ca:09:6e:61:20:31:36:7b:a1:17:19:d0:
9b:a7:2b:4b:52:16:d3:d9:18:ff:08:b9:1d:a0:1d:
f1:27:d6:97:38:4d:f0:83:bb:81:6d:2a:b8:d6:d7:
00:b7:4c:a5:69:aa:5e:dd:ec:5f:dc:4b:52:1d:f6:
b7:87:37:c3:5e:3c:12:8a:06:dc:e6:72:4a:7a:ef:
4d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:50:09:FD:4F:12:16:F0:10:40:FD:95:D4:0E:68:6E:47:52:FD:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d42ae873-ebf2-30f4-b018-8470ff7c2590.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.30.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:df:98:5e:f8:61:10:71:92:8e:33:63:e3:a2:6d:b2:e4:bc:
02:09:e4:26:b6:3e:85:00:e6:26:5e:3f:44:bd:ca:77:5b:ba:
5b:14:0c:2f:e3:44:a9:a3:b1:40:02:4e:35:c7:82:07:91:10:
39:99:5f:39:45:86:15:30:2f:39:c1:ca:85:b5:44:12:e1:b1:
c8:a4:d1:6f:ef:1a:ff:b1:0d:e6:f6:17:dc:b1:39:cb:09:07:
7f:84:da:4e:0e:f9:c9:10:1a:f7:d9:0c:45:6d:14:d7:c3:5b:
e2:9e:59:b0:dc:af:52:33:6d:ca:b5:c3:ad:4b:d0:5a:14:8a:
7e:50:29:34:09:5d:e8:80:3f:45:93:a5:a2:de:2f:b9:e4:32:
74:3e:cc:30:36:b0:1e:cf:d1:3d:4c:39:0d:13:8e:b4:e4:89:
8c:53:ff:f1:0c:7e:30:99:26:cf:77:9c:71:c8:ef:41:3c:dd:
25:47:c0:09:87:00:76:f8:a0:82:11:7b:1f:40:bc:db:aa:ea:
e3:43:94:c9:71:58:1f:0c:67:ac:23:fd:63:bb:1d:4e:2d:ce:
f4:dd:c6:7b:03:fe:c1:cd:d1:da:d6:1b:bf:37:1e:b4:4a:40:
95:f3:ff:16:07:cf:f2:fb:67:e8:e3:d4:66:ea:0f:23:84:e5:
15:17:de:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:11:31 2026 by rpki-client