
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e619196-552f-38fc-9588-4bec6952fccc.roa
File: 4e619196-552f-38fc-9588-4bec6952fccc.roa (raw, json)
Hash identifier: soB8wmy6k8Dxtr0M/wdWcVWUSGZWtdtuGy8sbIslZRE=
Subject key identifier: 5F:29:6D:4F:8E:3D:5D:E6:B7:82:47:C4:39:F5:B3:47:0A:A2:D5:7F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BA7CD0FF814365217AAFEF0A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e619196-552f-38fc-9588-4bec6952fccc.roa
Signing time: Mon 27 Oct 2025 01:00:31 +0000
ROA not before: Mon 27 Oct 2025 01:00:31 +0000
ROA not after: Sun 25 Jan 2026 02:00:31 +0000
asID: 13335
IP address blocks: 104.31.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a7:cd:0f:f8:14:36:52:17:aa:fe:f0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 27 01:00:31 2025 GMT
Not After : Jan 25 02:00:31 2026 GMT
Subject: CN=7e31234f-7ce2-414a-a4b4-d6f00c2282e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:01:fe:76:13:61:18:41:d0:e8:32:6b:f6:c5:
8f:5b:14:61:8b:25:d0:4a:59:88:8c:f7:99:d7:02:
29:1d:b3:6f:c1:a3:38:6f:e6:f8:0b:f2:fd:e0:81:
24:b2:e4:df:11:79:05:6d:27:1b:5e:ef:3a:2b:7c:
40:0b:8a:2d:bd:de:aa:20:ec:2e:7f:07:dd:06:58:
60:4a:ea:2f:70:f0:8b:7c:f2:3c:04:37:93:ff:ef:
9c:bc:a6:77:59:27:9f:cf:c6:b2:10:eb:be:ff:f4:
b7:f5:a1:8b:aa:09:bd:cf:b8:1d:61:8a:7b:c4:c8:
ca:db:65:8c:7f:a3:b4:61:75:92:25:6c:74:c0:61:
7c:44:5c:f2:9c:5f:13:82:fa:d6:18:35:97:30:48:
45:ea:33:51:f1:ad:ee:3a:cc:33:02:48:fd:f9:50:
71:66:ec:00:6c:68:7a:ac:5a:16:98:1a:92:59:bc:
55:f3:5e:72:07:6a:e1:66:d8:7a:92:19:e4:35:71:
12:f8:6c:79:40:8e:70:6f:8a:23:89:0c:56:f3:8d:
82:37:f6:94:86:cd:5c:25:2c:f0:25:23:2a:0c:94:
9c:10:6a:2b:22:98:0b:a8:b8:c1:99:9f:c3:67:b6:
a4:45:a2:37:ab:ab:23:b4:56:0e:f4:a5:5e:58:6c:
05:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:29:6D:4F:8E:3D:5D:E6:B7:82:47:C4:39:F5:B3:47:0A:A2:D5:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e619196-552f-38fc-9588-4bec6952fccc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.31.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:e0:45:2d:8a:b0:b7:b9:2f:8d:7e:9d:15:8c:3c:a5:73:21:
62:20:84:8f:8d:98:c1:85:ae:70:1a:7f:51:c5:61:75:7b:ea:
71:04:ed:fc:94:5f:84:e0:6e:72:3a:3b:b6:7a:ff:29:73:89:
e4:79:01:45:87:64:a5:8b:14:eb:b8:42:98:86:47:7e:d9:5a:
6b:14:8a:02:8f:7a:92:ce:2c:a1:fd:8f:7a:a7:60:3d:5e:80:
2f:36:96:94:fe:e1:60:05:39:92:03:4a:be:b9:22:24:09:94:
e2:94:be:9b:69:d7:94:c5:70:33:a0:91:b3:ae:cc:aa:a2:47:
07:13:49:51:1c:31:51:d9:0f:d5:74:c4:89:50:4d:ff:52:57:
f4:06:6e:0f:ae:cd:4d:2d:fa:37:e4:77:c6:07:32:0a:bb:13:
20:d1:92:1c:ed:a5:a7:6b:9d:35:a9:08:9c:f9:4b:63:7a:2e:
82:e0:25:d6:70:26:cc:24:07:01:7b:68:c9:52:5e:d8:0e:22:
2a:45:91:48:3f:9f:0d:39:11:a5:08:f0:c3:ec:ac:34:14:ee:
21:74:01:d9:36:cf:17:af:29:06:a9:a3:f8:ab:a7:5a:16:da:
56:7d:f5:f6:5a:f7:46:57:1d:42:24:4a:ce:f9:88:38:b9:df:
88:bc:cf:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQ/4FDZSF6r+8KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk
N2UzMTIzNGYtN2NlMi00MTRhLWE0YjQtZDZmMDBjMjI4MmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAH+dhNhGEHQ6DJr9sWPWxRhiyXQSlmIjPeZ
1wIpHbNvwaM4b+b4C/L94IEksuTfEXkFbScbXu86K3xAC4otvd6qIOwufwfdBlhg
SuovcPCLfPI8BDeT/++cvKZ3WSefz8ayEOu+//S39aGLqgm9z7gdYYp7xMjK22WM
f6O0YXWSJWx0wGF8RFzynF8TgvrWGDWXMEhF6jNR8a3uOswzAkj9+VBxZuwAbGh6
rFoWmBqSWbxV815yB2rhZth6khnkNXES+Gx5QI5wb4ojiQxW842CN/aUhs1cJSzw
JSMqDJScEGorIpgLqLjBmZ/DZ7akRaI3q6sjtFYO9KVeWGwFjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF8pbU+OPV3mt4JHxDn1s0cKotV/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGU2MTkxOTYtNTUyZi0z
OGZjLTk1ODgtNGJlYzY5NTJmY2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB8SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFrgRS2KsLe5L41+nRWMPKVzIWIghI+NmMGFrnAaf1HFYXV76nEE7fyU
X4TgbnI6O7Z6/ylzieR5AUWHZKWLFOu4QpiGR37ZWmsUigKPepLOLKH9j3qnYD1e
gC82lpT+4WAFOZIDSr65IiQJlOKUvptp15TFcDOgkbOuzKqiRwcTSVEcMVHZD9V0
xIlQTf9SV/QGbg+uzU0t+jfkd8YHMgq7EyDRkhztpadrnTWpCJz5S2N6LoLgJdZw
JswkBwF7aMlSXtgOIipFkUg/nw05EaUI8MPsrDQU7iF0Adk2zxevKQapo/irp1oW
2lZ99fZa90ZXHUIkSs75iDi534i8z1c=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:07:50 2025 by rpki-client