
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/63ed5120-4137-340a-b2e6-d935b1db72bd.roa
File: 63ed5120-4137-340a-b2e6-d935b1db72bd.roa (raw, json)
Hash identifier: LJ4tgM5aXjHFWS6GT8uwx1Kz0F+0CeVn65PfekiNRl4=
Subject key identifier: 70:F4:E6:A0:6E:E0:01:1D:80:7E:D0:DB:80:FF:A8:2B:EA:FE:60:9F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584DF4DB5258FD88DE61FB57A380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/63ed5120-4137-340a-b2e6-d935b1db72bd.roa
Signing time: Tue 26 May 2026 01:00:24 +0000
ROA not before: Tue 26 May 2026 01:00:24 +0000
ROA not after: Mon 24 Aug 2026 01:00:24 +0000
asID: 13335
IP address blocks: 104.29.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f4:db:52:58:fd:88:de:61:fb:57:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: May 26 01:00:24 2026 GMT
Not After : Aug 24 01:00:24 2026 GMT
Subject: CN=0159185e-26a1-468f-ba73-66658983f4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:a1:a5:d6:e4:ff:24:49:fc:31:5e:49:fc:
36:ad:f3:ad:a2:8f:90:78:95:66:f2:e4:62:8a:66:
79:a3:75:7c:e3:5d:4d:c2:ec:9e:a9:43:2c:62:e2:
c3:70:fe:63:41:48:22:fd:a8:77:a9:5c:0f:b2:d2:
d1:7b:8a:4f:90:a8:49:36:58:7a:1e:43:e4:05:78:
30:00:27:7a:d3:97:61:5d:04:34:95:1a:ef:2e:f7:
6c:fe:78:7b:ac:df:93:62:7e:b3:e0:d9:4e:07:f7:
91:08:6d:f1:31:fe:84:f0:6c:da:1c:ca:f0:37:30:
ed:d9:6c:35:1b:e4:21:e2:c2:66:10:61:19:74:ab:
4f:d7:6f:ab:71:df:3e:da:55:b1:95:2f:88:e0:22:
9e:6e:6c:00:8d:2e:05:8a:d4:d7:63:13:a9:89:26:
fa:12:69:63:a4:bd:36:b6:c2:9d:ff:f4:6b:54:85:
4b:86:f8:ff:fe:b3:20:3f:d0:48:b4:53:17:04:6c:
a9:09:fc:dd:c4:78:3a:11:88:44:40:29:1c:79:42:
b8:b6:65:e8:f0:fb:0c:b0:03:85:c7:51:6a:db:54:
cd:43:8d:2a:8b:fe:d6:66:2a:dc:f3:94:b3:48:b1:
3e:6d:42:5c:bf:59:6d:37:a5:5e:85:ec:72:8c:c7:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F4:E6:A0:6E:E0:01:1D:80:7E:D0:DB:80:FF:A8:2B:EA:FE:60:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/63ed5120-4137-340a-b2e6-d935b1db72bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:7f:9a:f9:9e:36:3f:e5:9b:8f:21:8d:ec:a5:10:b2:1b:a5:
78:3f:fb:32:63:cf:33:d8:ac:80:27:15:83:73:76:cc:fe:bf:
6e:80:52:66:0f:95:22:e6:cc:10:6c:79:c7:7d:e0:95:da:8f:
fb:69:8f:5c:0e:70:4c:58:da:45:19:7c:9a:c5:5b:b4:ae:87:
bb:9d:36:d9:51:b5:c9:57:e0:68:ab:8e:fb:33:fd:39:15:18:
80:fc:fd:62:99:1b:56:37:48:3a:c6:ac:45:74:ff:14:da:c7:
58:03:02:6a:cc:82:1b:d2:09:fa:f3:1f:9e:61:11:b8:47:1a:
65:fa:07:97:9a:3b:37:60:52:c3:82:9c:79:01:b4:51:1b:59:
ab:af:4d:21:13:aa:8c:31:92:08:10:05:6a:fd:7f:06:ad:5b:
5f:42:9e:26:2f:c3:fc:4f:3b:eb:ce:88:80:7f:5d:3b:15:67:
2a:eb:22:38:b7:18:96:33:77:1c:1c:03:27:09:7c:43:30:05:
a9:d5:88:f6:55:92:db:24:38:76:c1:24:16:ec:33:1d:71:d3:
fb:80:e9:eb:49:e1:f8:0f:66:f3:54:f1:50:40:16:5f:97:6a:
85:1f:eb:8a:53:24:47:37:79:92:c4:51:52:b7:54:be:73:03:
bd:c9:cf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:01:41 2026 by rpki-client