
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa
File: 3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa (raw, json)
Hash identifier: HiHdfEbuSccIv556nycxNQyqS+pM7CZ2COk5WqwDGh8=
Subject key identifier: 2D:BC:E4:1A:19:6B:15:FC:E0:2E:84:FF:CA:31:17:48:4B:F2:21:26
Certificate issuer: /CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a
Certificate serial: 010D0C9F4328584EA7882D83F239BDD955AC48C0
Authority key identifier: 2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 9712
IP address blocks: 104.251.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:2d:83:f2:39:bd:d9:55:ac:48:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=0c771590-36be-40ec-8419-a9f9d508be8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d8:55:66:6e:2e:0e:54:97:49:b5:63:55:a3:
29:26:4d:1d:d3:dc:4b:86:21:22:d1:af:c9:86:09:
b1:6e:4f:c3:19:fc:44:77:6c:61:59:c4:90:36:62:
3e:41:16:9b:bc:ea:71:21:e5:e9:e8:3b:05:0c:92:
04:e4:29:8a:d1:36:7e:6d:41:90:92:92:26:55:45:
cc:b3:7a:f7:c3:b9:e7:d3:6d:f8:25:85:d6:46:88:
52:3e:f9:2a:9d:3f:36:b2:b2:96:e6:68:46:32:2d:
c3:40:89:dc:65:8d:a6:a0:af:4f:1d:ce:9c:8a:d3:
44:cf:f2:16:22:0c:b0:55:e0:df:29:b7:be:97:fa:
e3:43:13:f4:3d:fd:20:0e:0c:b6:0f:1f:7c:53:df:
54:14:7f:05:51:96:68:82:13:36:3a:65:74:2d:df:
6c:c7:be:b0:4c:a6:20:65:00:14:3e:52:30:cd:13:
8d:80:18:94:41:a2:d2:f6:84:89:47:45:cc:e3:53:
07:40:b6:a9:6c:34:0c:17:b2:e2:f0:62:02:84:30:
15:1d:cc:d3:45:05:85:6f:68:2d:06:11:e1:ea:f1:
2c:4e:be:b7:e7:75:75:a8:eb:d2:62:ad:7c:8b:e4:
3e:80:38:f0:55:7d:aa:ea:3f:90:ee:89:19:b8:53:
9d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BC:E4:1A:19:6B:15:FC:E0:2E:84:FF:CA:31:17:48:4B:F2:21:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl
X509v3 Authority Key Identifier:
keyid:2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.251.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:b2:d3:13:f2:d2:79:c5:9b:40:19:6a:58:a2:85:6f:5f:83:
a8:84:1b:3e:8e:36:12:93:cb:db:aa:ca:61:ed:72:63:c0:30:
a8:94:b2:76:0a:e2:a1:72:f3:92:15:1f:3d:c5:58:8b:11:33:
e2:b5:05:e5:4f:4f:6c:e1:a1:7e:15:14:9c:a1:62:66:da:dd:
2f:d6:67:a8:4e:0a:45:96:6f:dd:c8:4e:ad:d2:b1:1b:d7:13:
9e:3d:34:b0:a2:04:48:c5:76:20:96:74:b6:4c:5b:fa:55:cb:
d7:cd:16:5f:e2:4e:ac:be:22:b6:16:58:90:1a:b9:ad:02:37:
b4:73:12:aa:e9:04:8e:3d:76:6d:06:b0:cc:5e:ef:43:1f:8e:
cf:d0:17:62:a5:e0:21:ef:e8:6c:e0:ff:63:1a:32:c8:24:9b:
25:a7:fa:ab:0e:6a:3a:29:2a:1b:f2:31:55:e3:a9:72:1a:f9:
6a:03:75:ff:8d:10:5c:9d:6a:2d:72:e6:65:45:11:e4:7e:b0:
de:3a:90:24:ad:2a:ae:57:13:17:cb:db:cc:9d:d0:f0:52:48:
1d:30:5b:1b:9d:2f:76:66:5d:d7:cb:89:1a:b1:d7:ea:3a:7e:
68:e8:2e:92:e0:30:40:a9:d3:45:50:b6:75:6a:10:81:29:83:
aa:eb:15:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:40:31 2026 by rpki-client