
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16d913a9-2620-3ad1-a855-dc4276490fa8.roa
File: 16d913a9-2620-3ad1-a855-dc4276490fa8.roa (raw, json)
Hash identifier: 2XMuTVDElkwVECYjraKSLowhHGb86UZ+oBxiFFyyS6Y=
Subject key identifier: A7:62:10:BE:22:BF:AC:7D:9B:D4:D7:4E:DC:DD:B3:05:CD:E9:AB:86
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D75D52DE108D7AE89B9C81778
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16d913a9-2620-3ad1-a855-dc4276490fa8.roa
Signing time: Fri 10 Apr 2026 13:00:31 +0000
ROA not before: Fri 10 Apr 2026 13:00:31 +0000
ROA not after: Thu 09 Jul 2026 13:00:31 +0000
asID: 13335
IP address blocks: 104.31.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:75:d5:2d:e1:08:d7:ae:89:b9:c8:17:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 10 13:00:31 2026 GMT
Not After : Jul 9 13:00:31 2026 GMT
Subject: CN=6db2d2db-855a-4bb1-81d3-c8ccc0655003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:8c:ae:a4:fb:8d:3b:c6:31:70:2e:32:95:
83:57:c7:a3:c1:bf:4d:9f:75:e6:49:19:a5:75:d2:
25:89:e5:7d:92:6d:a3:42:70:aa:ec:37:e5:17:de:
f6:0d:11:f1:1e:36:aa:87:c6:ad:f0:0e:48:a4:4f:
8d:09:37:33:44:64:f9:52:6b:a8:2c:00:38:57:72:
d7:ed:e0:88:1b:35:a4:09:b2:3a:25:ae:bf:65:df:
b4:76:74:66:c2:f4:f0:cb:8e:be:f8:0a:da:0f:e1:
c7:b9:d5:83:7f:e4:0e:31:f9:7d:71:9f:f2:f5:9e:
72:d8:0a:64:90:b5:ef:4a:c8:98:ce:04:a7:f8:8d:
f6:32:05:1f:04:00:1a:82:90:c1:c5:2b:3a:d9:94:
f5:73:d0:fd:3f:17:36:23:6b:fe:21:1b:e2:01:9a:
58:b0:72:f7:53:96:dc:81:d9:46:88:35:a8:d6:80:
65:77:f5:9d:3f:c0:d6:89:43:25:ba:5b:a9:93:84:
33:50:29:1f:7f:3b:ba:a4:1b:58:98:9f:65:e8:98:
43:0f:6e:dd:a5:4f:1b:75:9f:dc:94:da:28:ea:60:
6c:31:74:20:38:a1:79:2f:fa:ce:4b:98:a6:59:a8:
3d:b6:1e:4a:6c:91:42:a7:d1:03:e3:01:8b:68:31:
eb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:62:10:BE:22:BF:AC:7D:9B:D4:D7:4E:DC:DD:B3:05:CD:E9:AB:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16d913a9-2620-3ad1-a855-dc4276490fa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.31.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:e9:fa:94:ed:4b:90:b6:6d:f4:a0:93:0e:0d:f1:3c:66:91:
32:43:25:bf:ba:9b:c6:e4:85:56:fa:8b:db:1b:1c:ec:87:f9:
1c:01:b0:b3:b9:72:ab:f3:ca:82:30:14:5e:8b:55:5e:cd:f0:
99:de:1e:a3:bf:0a:ca:d0:60:04:c8:e6:27:b9:60:75:eb:c2:
f5:c3:23:d3:8a:1c:40:f4:df:a3:e7:02:2b:4d:1c:2e:80:b0:
23:3a:ad:fb:18:fb:17:c6:7a:a5:9a:fc:d3:1e:cf:a8:de:d8:
b4:c8:90:2c:24:b1:64:4f:0f:cb:de:1a:d6:b2:97:3b:bc:c5:
e3:d6:44:44:91:1f:69:49:2e:22:38:b6:3b:dd:ea:21:73:a9:
de:ee:f0:27:e6:12:96:88:26:20:b5:00:79:8b:c8:ae:62:a5:
98:25:e5:93:8b:8b:a4:32:0b:f1:25:b9:99:75:35:c6:79:f9:
31:fb:94:f5:f5:78:16:9e:19:8e:12:99:93:7d:4b:fc:5a:6a:
0f:b8:92:32:13:45:e7:4d:9e:b9:1d:79:bf:69:14:b7:47:fb:
db:1e:ce:2b:e1:e1:4b:ba:f6:80:e4:8c:8f:e9:80:33:af:20:
4c:30:8f:47:3c:a7:a0:24:4b:10:c1:86:22:b5:d6:b2:4c:73:
14:ea:9e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:48:15 2026 by rpki-client