
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/868a1978-2e1f-3361-bbef-2069ed241746.roa
File: 868a1978-2e1f-3361-bbef-2069ed241746.roa (raw, json)
Hash identifier: 4CwJ7JlWdWGH0OZdTzFhIJ5CSvF4CiAcIJCXHwcm0/8=
Subject key identifier: FD:E0:44:D0:B4:18:A2:36:3F:C4:37:03:86:9D:73:FE:06:96:E0:91
Certificate issuer: /CN=3e0f242a-aaee-4297-9937-b33329a8c34f
Certificate serial: 010D0C9F4328584EDC91E852E19247423791EC00
Authority key identifier: 29:B7:9E:D5:E0:7F:C8:56:9A:81:DF:5C:2A:02:EF:A6:F5:E9:9D:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/868a1978-2e1f-3361-bbef-2069ed241746.roa
Signing time: Mon 17 Aug 2026 01:00:12 +0000
ROA not before: Mon 17 Aug 2026 01:00:12 +0000
ROA not after: Sun 15 Nov 2026 02:00:12 +0000
asID: 16509
IP address blocks: 104.207.170.0/24 maxlen: 24
104.207.171.0/24 maxlen: 24
104.207.172.0/24 maxlen: 24
104.207.173.0/24 maxlen: 24
104.207.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/3e0f242a-aaee-4297-9937-b33329a8c34f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/3e0f242a-aaee-4297-9937-b33329a8c34f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dc:91:e8:52:e1:92:47:42:37:91:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0f242a-aaee-4297-9937-b33329a8c34f
Validity
Not Before: Aug 17 01:00:12 2026 GMT
Not After : Nov 15 02:00:12 2026 GMT
Subject: CN=2ce49992-3598-48b1-bb3a-0e421199d2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3f:32:84:71:04:31:a8:2d:c5:bd:f3:8e:42:
ba:0e:82:47:a2:88:5c:57:fb:53:cc:0d:06:9a:5b:
07:95:cf:aa:97:75:e7:66:81:ae:e0:ff:27:6c:d4:
cd:d4:9c:5a:9c:89:06:d5:a2:67:31:02:42:f7:b2:
fd:36:34:89:51:25:bd:ee:c0:88:81:39:81:7d:d3:
e0:8e:3b:21:30:c0:10:dc:b5:d7:95:4a:a0:e6:91:
9a:c7:c4:89:78:0f:78:72:88:4f:a9:07:d6:9a:a1:
d2:3a:7f:6c:ec:c5:99:16:cf:67:5a:0e:94:5b:6a:
77:fb:a5:7c:58:4f:5d:fc:90:a3:21:25:c0:9a:f8:
e7:d5:1c:18:29:de:58:a4:a9:d1:c2:f8:71:11:63:
1c:e0:09:5d:e2:c9:89:f4:b2:08:b9:fb:10:21:bb:
58:67:19:09:c8:50:32:72:e8:fc:96:a8:e5:e1:e6:
61:06:b0:c0:b0:9b:70:53:18:c0:3d:65:f4:ab:f9:
8b:19:0f:8b:6a:50:87:ce:23:39:1e:1a:04:79:7e:
7f:b3:22:df:12:47:4e:6b:42:db:e3:35:62:bb:c1:
12:a8:61:79:0b:9a:c3:3c:5f:ba:91:a1:5d:3b:ce:
b5:9a:a7:c2:84:93:f8:0f:f9:6e:5e:2e:1e:51:38:
66:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E0:44:D0:B4:18:A2:36:3F:C4:37:03:86:9D:73:FE:06:96:E0:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/868a1978-2e1f-3361-bbef-2069ed241746.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/3e0f242a-aaee-4297-9937-b33329a8c34f.crl
X509v3 Authority Key Identifier:
keyid:29:B7:9E:D5:E0:7F:C8:56:9A:81:DF:5C:2A:02:EF:A6:F5:E9:9D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.207.170.0-104.207.174.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:99:c3:50:24:d3:bc:1d:81:b6:d1:5f:17:21:79:d4:76:ac:
b5:94:86:07:8a:02:e4:a7:3f:85:67:9d:40:ae:85:2a:ec:61:
0f:98:21:6d:c3:86:6e:7e:91:80:7c:6e:87:48:39:0e:c3:89:
cc:f1:76:28:74:d3:56:93:ad:a8:b8:7e:d0:75:df:e6:f7:bb:
df:0e:55:42:43:7a:81:34:e7:88:6e:08:84:64:33:a1:85:36:
3d:44:51:75:d7:52:50:81:fa:14:91:5a:f2:94:71:12:c7:8d:
e8:ec:de:6c:ba:72:43:3a:8c:fd:56:18:7d:7e:81:a6:ae:00:
84:2b:0a:9b:a9:fa:ec:ac:e7:96:e6:c4:8f:dd:bd:73:80:9b:
65:d6:1c:36:bf:6e:28:04:f0:0b:a7:e7:72:14:50:46:2b:e9:
ed:5b:c8:5f:3e:ca:34:29:3f:70:71:f5:9f:89:5e:80:dc:d0:
f7:38:d6:22:8d:95:f1:f8:ad:43:0f:95:2a:65:9b:ef:6d:84:
3e:e2:45:ba:10:f3:0a:6c:4b:96:e5:61:5d:e4:c9:01:49:52:
30:e4:d8:fb:1d:fd:e3:e4:af:61:d0:7b:83:39:9b:ff:03:2c:
9b:3c:f1:88:c9:54:1e:36:83:62:00:fd:ac:07:3b:50:05:c9:
87:84:01:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:37:24 2026 by rpki-client