
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d16751af-613a-3e9c-80ff-bb119980e288.roa
File: d16751af-613a-3e9c-80ff-bb119980e288.roa (raw, json)
Hash identifier: bvUbmpLQdO2s1Db5UVoKla4T2xmYClHjNL7TlG2fJ1I=
Subject key identifier: 09:3C:12:D2:61:A5:1D:8E:A0:62:77:3C:9A:95:8A:9B:96:EC:73:98
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584D67DFD6BA8A14C8508338E880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d16751af-613a-3e9c-80ff-bb119980e288.roa
Signing time: Sun 05 Apr 2026 13:00:31 +0000
ROA not before: Sun 05 Apr 2026 13:00:31 +0000
ROA not after: Sat 04 Jul 2026 13:00:31 +0000
asID: 13335
IP address blocks: 104.19.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:67:df:d6:ba:8a:14:c8:50:83:38:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 5 13:00:31 2026 GMT
Not After : Jul 4 13:00:31 2026 GMT
Subject: CN=17a94ef0-583c-47ff-be1c-4f8d40f68def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8a:50:06:ac:1d:7e:40:92:2c:b8:17:d2:c1:
30:83:65:4a:7f:26:0e:35:9f:a2:e8:f2:0e:74:05:
d5:c2:c9:6d:6e:eb:38:23:88:c6:f3:e3:64:f6:e4:
1e:f9:3b:6e:b2:91:59:87:d3:db:6a:4b:33:c9:70:
6f:00:75:40:40:bf:d7:04:bd:e4:2d:10:3b:2a:3f:
ba:dc:8c:fb:ec:ee:06:27:3a:04:1d:60:78:05:c8:
a8:6f:c3:e0:d6:7a:7b:8d:08:e4:d2:e0:99:1a:55:
2d:17:1d:3e:d4:d7:d8:b3:93:4a:9a:ad:08:85:23:
6b:c1:11:93:11:dd:26:a9:d3:17:67:38:ad:c2:ce:
3d:4f:3e:2b:39:47:f0:6c:08:9d:2d:8b:2e:be:b1:
dc:d5:b7:b1:c1:cd:5c:2b:cb:8d:ba:68:9a:18:8f:
7f:d6:98:64:ce:75:68:38:0d:b4:c7:7e:b9:fd:e5:
9c:2e:1c:f7:93:06:7e:80:a6:b5:c2:b8:a5:b0:56:
c5:88:93:76:65:f4:73:7a:22:3e:3b:ea:1c:32:60:
14:17:cc:a2:81:43:4c:60:ce:fe:a6:29:c1:d0:02:
a2:c5:ba:c1:71:86:fa:00:4d:07:10:e2:ac:20:29:
9c:d4:ce:dd:ff:37:57:03:3d:96:ce:45:c2:d3:b8:
10:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3C:12:D2:61:A5:1D:8E:A0:62:77:3C:9A:95:8A:9B:96:EC:73:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d16751af-613a-3e9c-80ff-bb119980e288.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.19.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:a6:4c:9d:3d:a6:e6:25:76:ac:6f:cd:5c:82:3b:07:ed:c4:
b1:56:b9:84:e0:92:be:eb:48:10:a6:b1:06:65:1e:6f:d1:04:
07:f9:cb:08:71:87:de:45:6a:06:6e:ec:fa:61:e8:31:ec:06:
c0:cb:14:9b:d2:fd:b5:3d:07:68:fd:7b:f1:f9:94:9c:74:3c:
af:ad:62:4d:b1:44:77:9a:1d:e7:03:26:d8:9a:99:23:56:5f:
22:43:59:69:da:4e:b4:2a:c0:0e:fb:be:ee:84:ea:be:b4:32:
e4:85:6a:0a:0e:f5:a8:5a:25:24:fa:36:d6:ae:08:03:97:76:
86:09:44:ca:d5:c2:49:fd:21:b4:91:04:6a:fd:a4:b0:dd:71:
91:ee:b7:53:4d:43:d0:08:24:d9:f9:57:f9:6a:4b:95:48:e7:
a5:29:7b:ae:5b:29:1e:4d:a3:2a:32:97:a5:9f:73:aa:ee:5d:
4f:33:19:24:68:58:34:8e:1e:ac:98:a5:d1:4f:01:aa:9c:d3:
15:87:c8:e1:d8:db:54:b7:3e:24:5c:d7:2d:0d:f3:1a:95:3a:
16:00:13:e5:f3:45:b8:9f:8a:8e:79:82:48:2b:8a:1b:fd:1b:
01:31:f6:61:40:09:8e:c9:7b:03:ac:07:d8:ad:e4:76:cf:54:
b0:99:e8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:55:19 2026 by rpki-client