
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d42ae873-ebf2-30f4-b018-8470ff7c2590.roa
File: d42ae873-ebf2-30f4-b018-8470ff7c2590.roa (raw, json)
Hash identifier: AaG6AZE3aIpBgWMU+2n6cFXO+fgv4xn6gxDT2s3UKHc=
Subject key identifier: 55:CC:C2:24:30:20:82:03:DB:FD:44:FC:2A:96:8B:FA:6D:2E:F1:2B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EA79B19330B69F1F9632FC500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d42ae873-ebf2-30f4-b018-8470ff7c2590.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 13335
IP address blocks: 104.30.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9b:19:33:0b:69:f1:f9:63:2f:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=3234dbd9-487b-4b63-953a-3be12f7d77d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:8f:89:48:00:f2:15:d5:22:da:fe:2a:5e:
ac:04:4a:28:d6:f7:8f:00:b5:78:22:8d:63:e5:f4:
83:36:14:35:72:cd:d9:e4:3c:58:9b:12:16:0b:d4:
e9:eb:bf:1f:96:58:f0:43:31:fe:ea:17:16:83:7a:
14:d5:38:af:d2:6e:1b:a6:37:0c:ae:61:36:e2:64:
e6:15:b2:dc:4d:81:19:2b:74:79:3b:06:a4:c6:26:
68:e8:01:66:7b:9f:09:06:3e:ab:ca:8d:15:53:45:
f3:13:fa:9e:69:84:ce:d3:80:e2:d4:e1:da:a2:d7:
9a:d0:0c:3f:c0:a5:22:11:5f:2a:9a:35:0e:d0:94:
77:e1:36:e9:a9:95:36:cd:22:be:1c:5f:8a:58:d8:
4d:29:8f:d0:ff:de:a6:91:bb:c6:33:d8:43:c9:80:
5b:55:8a:d0:f7:9e:71:e6:ed:74:91:68:70:5b:3b:
13:15:cd:81:7f:e5:52:90:8d:18:b4:51:48:21:1b:
4a:5f:80:19:cb:7c:65:06:57:d5:e1:81:47:f0:8b:
0d:d1:f2:92:28:72:c2:4e:13:05:a5:82:8d:ab:46:
df:39:c0:07:63:51:f1:b9:3e:e6:fb:c9:72:62:0a:
e6:9c:21:a2:d4:18:c0:a1:1f:fb:2c:6e:b1:62:84:
f8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CC:C2:24:30:20:82:03:DB:FD:44:FC:2A:96:8B:FA:6D:2E:F1:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d42ae873-ebf2-30f4-b018-8470ff7c2590.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.30.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:17:55:89:16:72:0a:8c:e3:1b:5e:76:23:b2:07:d6:e3:8c:
dc:0d:ac:3c:86:e8:c0:7a:b5:34:cf:df:14:8e:e0:fc:29:c2:
a2:ab:05:6b:9d:d2:d2:c7:48:b4:0f:43:60:89:31:bd:e0:49:
85:a7:cb:95:f5:f0:11:51:ef:02:26:3f:3d:b8:8c:21:a5:87:
2c:e8:e2:fb:9c:7c:eb:64:42:61:2f:13:eb:fa:3f:b4:0f:63:
24:dd:48:e1:28:c6:4d:25:3a:bc:5c:65:a3:bf:9a:e4:a8:91:
1f:dd:38:78:0c:63:a1:df:0e:27:88:88:ed:90:9f:2b:07:53:
05:c8:87:c0:57:7d:40:37:a4:01:2f:98:f5:b9:8b:af:8d:ed:
14:8b:84:a6:ad:b8:a5:34:d6:0f:36:bf:93:52:11:1e:ad:ad:
13:24:5a:82:46:21:a4:cb:15:00:4f:63:c2:24:5e:f4:de:23:
11:55:f6:41:23:44:0a:b3:0e:ff:64:6f:4b:44:3a:d1:61:a3:
d6:3e:68:12:c0:9c:df:ed:64:7d:78:2a:80:ff:ad:20:fd:bf:
74:4e:8c:75:13:c8:8c:3e:1d:8f:75:d9:72:08:ad:29:03:3e:
95:79:54:6f:3d:b4:2b:01:d8:88:85:da:68:20:e6:90:7a:88:
4b:56:6d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:00:46 2026 by rpki-client