
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afe83c0a-1cc3-335f-877d-d278e5800174.roa
File: afe83c0a-1cc3-335f-877d-d278e5800174.roa (raw, json)
Hash identifier: wktRhJdNYtYccmViaCMoezZbuDFN7eUrstf5SaRA/vk=
Subject key identifier: 4A:A0:E1:5E:D7:E9:AC:5B:3B:65:78:FC:42:5E:73:73:C5:24:29:99
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D67DFEBBA917BC2257038D680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afe83c0a-1cc3-335f-877d-d278e5800174.roa
Signing time: Sun 05 Apr 2026 13:00:31 +0000
ROA not before: Sun 05 Apr 2026 13:00:31 +0000
ROA not after: Sat 04 Jul 2026 13:00:31 +0000
asID: 13335
IP address blocks: 104.29.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:67:df:eb:ba:91:7b:c2:25:70:38:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 5 13:00:31 2026 GMT
Not After : Jul 4 13:00:31 2026 GMT
Subject: CN=e4f965c6-42f8-40b4-a21d-5af7b4829f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:14:4c:6c:98:e1:a4:d7:12:87:ba:1f:ee:
b4:8f:48:d6:5c:a0:5d:58:ce:2a:05:6b:20:57:fa:
72:be:2d:af:d8:39:b3:02:b9:58:e6:8e:99:1f:d3:
b6:fc:1b:02:ac:76:e7:63:58:df:1a:f8:b1:fe:c5:
ab:fc:1b:c9:7f:c1:59:5c:48:44:c8:c5:ec:01:e0:
59:c5:78:6b:e6:60:e2:c9:3f:11:09:a1:60:2f:cc:
48:6d:52:93:fd:32:a4:91:43:f0:30:3b:2d:55:31:
c4:3f:0b:4c:4b:f7:59:ca:df:89:0b:24:f6:35:4a:
59:f1:98:8a:c8:3b:5b:0d:13:dd:3a:0c:5e:d5:77:
3a:c8:71:a8:4c:35:47:1f:93:27:cf:2e:36:3b:dc:
a3:20:8e:79:ff:7e:a0:38:f5:a6:c1:85:3f:5f:9e:
60:78:76:b6:4e:96:8a:8e:64:8a:00:20:d9:e7:cb:
2e:26:97:16:96:db:8c:7a:d5:be:6a:dc:6f:33:1a:
96:c7:84:67:83:b0:1d:be:d7:82:54:ff:3c:7e:e1:
08:23:a2:b8:fd:c6:4d:b2:dd:71:d9:06:4a:88:6e:
d8:cc:20:65:7f:21:8c:b7:a0:c5:75:bf:2c:f2:4b:
2e:b0:51:c1:f0:45:ad:01:22:18:5a:63:9c:61:bc:
0f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A0:E1:5E:D7:E9:AC:5B:3B:65:78:FC:42:5E:73:73:C5:24:29:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afe83c0a-1cc3-335f-877d-d278e5800174.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:83:4e:cc:e8:cf:e3:4e:f7:aa:2e:fe:e9:b1:46:98:2f:36:
df:51:49:ee:8b:8a:00:26:78:68:bb:10:06:0a:bc:87:98:cf:
7e:57:a5:ad:f3:da:55:0f:da:9f:ae:c3:b4:c2:1f:85:f4:e5:
c8:35:9d:90:7c:f7:d0:52:15:3d:8f:6a:a0:a4:eb:91:23:49:
dc:05:84:f4:73:5a:a1:b2:6e:a5:16:26:b4:a2:bc:d9:ce:c2:
56:0c:2f:db:13:3f:db:ff:ea:76:86:ab:ad:bc:a5:f8:6e:ef:
2f:62:27:71:d6:b3:dd:61:67:ea:d2:d8:6a:85:ae:7d:e7:4f:
29:0d:45:55:b5:af:41:9e:1b:be:bd:38:bf:62:1f:9e:77:d2:
e0:ea:aa:05:9f:08:7c:d1:b7:96:50:34:35:02:f8:e8:f7:8c:
73:6d:46:06:b8:df:4a:6e:ef:33:6f:51:13:69:a2:b5:4e:3a:
6d:2f:1b:d3:f3:c1:79:de:a9:86:e2:af:92:66:42:63:7e:aa:
d3:26:88:42:55:30:55:a2:f3:4d:0e:2d:b6:a0:d7:93:f5:34:
e3:45:0e:7f:4d:9c:f6:6e:ea:a1:e8:81:d5:99:5c:b7:9b:3b:
be:c5:c5:51:b9:1b:93:e9:7f:e5:76:75:e5:fa:20:2e:02:bc:
fe:45:7a:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3+u6kXvCJXA41oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk
ZTRmOTY1YzYtNDJmOC00MGI0LWEyMWQtNWFmN2I0ODI5ZjM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMwUTGyY4aTXEoe6H+60j0jWXKBdWM4qBWsg
V/pyvi2v2DmzArlY5o6ZH9O2/BsCrHbnY1jfGvix/sWr/BvJf8FZXEhEyMXsAeBZ
xXhr5mDiyT8RCaFgL8xIbVKT/TKkkUPwMDstVTHEPwtMS/dZyt+JCyT2NUpZ8ZiK
yDtbDRPdOgxe1Xc6yHGoTDVHH5Mnzy42O9yjII55/36gOPWmwYU/X55geHa2TpaK
jmSKACDZ58suJpcWltuMetW+atxvMxqWx4Rng7AdvteCVP88fuEII6K4/cZNst1x
2QZKiG7YzCBlfyGMt6DFdb8s8ksusFHB8EWtASIYWmOcYbwPPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEqg4V7X6axbO2V4/EJec3PFJCmZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWZlODNjMGEtMWNjMy0z
MzVmLTg3N2QtZDI3OGU1ODAwMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHeDTszoz+NO96ou/umxRpgvNt9RSe6LigAmeGi7EAYKvIeYz35Xpa3z
2lUP2p+uw7TCH4X05cg1nZB899BSFT2PaqCk65EjSdwFhPRzWqGybqUWJrSivNnO
wlYML9sTP9v/6naGq628pfhu7y9iJ3HWs91hZ+rS2GqFrn3nTykNRVW1r0GeG769
OL9iH5530uDqqgWfCHzRt5ZQNDUC+Oj3jHNtRga430pu7zNvURNporVOOm0vG9Pz
wXneqYbir5JmQmN+qtMmiEJVMFWi800OLbag15P1NONFDn9NnPZu6qHogdWZXLeb
O77FxVG5G5Ppf+V2deX6IC4CvP5Fejo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:29 2026 by rpki-client