
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e78ff60d-373f-310c-8674-f5cf68ca09b7.roa
File: e78ff60d-373f-310c-8674-f5cf68ca09b7.roa (raw, json)
Hash identifier: 3RdNp2oBcRP2FXWjt3baGROshddUAcnxz5/LwckAbAQ=
Subject key identifier: FF:FA:AA:ED:1E:65:97:B1:08:15:4B:A6:60:88:D6:21:CC:9B:9B:E6
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EEA87718343D5EE09402E9C80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e78ff60d-373f-310c-8674-f5cf68ca09b7.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 104.30.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:71:83:43:d5:ee:09:40:2e:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=29e35154-a9b2-4991-9341-f749a05224a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:3a:05:3d:52:8b:29:aa:20:4a:15:89:f0:
92:0f:a3:04:2b:f7:00:34:43:24:99:0b:95:a0:3d:
91:a9:76:56:3e:c0:91:16:3a:d3:58:93:e8:fb:0a:
6e:ee:8c:a7:28:2d:e4:ca:de:8a:62:9d:e1:21:8e:
da:21:7f:03:0f:9b:77:6a:1c:e5:c5:a3:cb:cc:0b:
37:af:83:b1:8f:b1:13:0f:1c:b7:ef:a1:84:de:17:
41:bf:bf:df:98:55:80:8e:3d:79:22:a9:0e:16:e9:
95:e9:c2:a5:95:32:34:ab:4a:66:5c:e5:15:0f:cd:
90:00:1f:90:2f:31:22:19:8b:a9:c0:e0:83:e2:aa:
b8:a3:7e:93:ea:0b:24:32:41:dc:e1:91:a7:93:dc:
af:74:ff:ae:7e:22:e5:bd:c1:b5:e3:ea:49:c5:cf:
68:e9:c6:39:c2:5a:6c:02:66:92:ce:d1:bf:e2:a1:
22:ab:f2:cf:18:a5:4f:94:23:23:6c:b3:33:02:73:
0b:8d:4f:e2:4a:0d:69:98:fc:b1:e0:5d:cf:c8:02:
81:4a:34:6f:4f:78:4c:ed:8e:08:2f:40:0a:bb:aa:
82:6d:ff:05:ff:dd:88:7a:74:7f:1c:9f:d1:4d:e8:
53:8d:d2:9d:56:b4:86:db:63:93:3c:e0:a3:c0:1d:
91:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FA:AA:ED:1E:65:97:B1:08:15:4B:A6:60:88:D6:21:CC:9B:9B:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e78ff60d-373f-310c-8674-f5cf68ca09b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.30.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:c0:02:9a:15:ee:fe:be:9d:7f:47:7f:ac:45:71:a3:05:0c:
51:4c:42:22:1d:ab:ea:c9:eb:bc:f8:21:85:d0:c6:28:f4:47:
d5:3d:b6:df:06:7e:3d:08:ed:a3:25:18:89:3f:28:87:79:34:
a1:e1:5a:83:f3:83:bd:a3:d0:af:63:ae:32:2a:6a:bd:54:66:
fe:d1:70:32:86:bd:0c:7b:a5:ad:48:ac:07:20:68:49:0d:c9:
a9:6a:d3:1d:30:b7:a1:5b:58:06:0b:94:13:4f:6c:04:60:7e:
8d:e0:8d:ad:13:23:fb:65:3d:f0:b6:35:60:cc:a5:01:33:82:
cd:8a:67:51:7f:b9:72:55:9a:e9:a8:28:2b:b9:61:6a:d0:f2:
4e:42:68:8c:78:42:a1:53:1c:99:02:58:cc:cc:0d:6e:87:53:
3b:25:90:5e:b7:a4:e6:ce:74:ad:d6:ff:16:de:93:0b:56:e8:
e4:43:90:06:a9:90:34:3a:f5:65:c7:9e:4e:ea:3a:7c:c5:c3:
33:f3:eb:d9:ac:ec:05:24:89:0a:1e:f1:c7:91:c0:f3:e0:2b:
34:80:0a:d6:a2:53:12:e0:ed:81:01:4a:fe:a3:94:8e:b1:a1:
93:b8:f9:6b:49:15:5e:da:45:f2:85:95:74:59:0c:c7:eb:21:
ab:90:bc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:07:28 2026 by rpki-client