
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00fadf28-ea31-371e-b63d-eb0a5142679c.roa
File: 00fadf28-ea31-371e-b63d-eb0a5142679c.roa (raw, json)
Hash identifier: jEesXQ1ulcLZ4/u/1PwDvbLAAOUBnQkCjUjxF2/5zLY=
Subject key identifier: 66:E5:34:68:6D:C0:12:EB:FB:4F:CC:EC:52:7D:46:F0:82:DA:E3:B0
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EEA8777E63E2FDBC13F934180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00fadf28-ea31-371e-b63d-eb0a5142679c.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 104.16.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:77:e6:3e:2f:db:c1:3f:93:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=7d11cffb-4ee4-4fa1-ae31-9201e0aa0eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9e:25:e9:1b:d1:43:7c:8b:fc:a5:67:56:5f:
88:f6:80:31:73:18:20:17:b6:5f:b2:d2:59:d5:d7:
c4:1e:7e:94:27:ae:0a:85:73:ee:32:d0:49:9a:e5:
df:71:9c:4f:d8:33:0d:dc:7e:0a:7e:99:d3:32:36:
74:c3:da:4d:91:73:4f:d6:dd:50:76:4a:27:0b:de:
fc:87:1f:3f:2b:10:b5:74:f5:ca:41:c2:44:46:9f:
d9:db:33:d7:e1:63:50:64:9d:5c:65:50:7f:95:21:
ae:94:87:20:63:69:92:55:9b:f5:a6:de:eb:48:b7:
64:1a:d4:d1:26:b8:eb:1e:3e:46:cc:b0:9f:a5:3f:
b1:55:9e:e9:97:43:01:c8:91:5c:48:72:9f:f8:4b:
e0:fc:e1:a0:b9:e6:df:eb:89:f2:44:a6:1c:02:81:
c7:d2:43:78:2a:04:70:45:63:ef:84:94:56:cf:ca:
73:4a:ec:ce:08:46:96:95:4e:47:d2:e4:75:49:b2:
0f:07:22:b3:a3:bb:5a:13:b7:25:f5:97:ea:22:3b:
31:14:ae:0a:3d:2a:17:f0:77:65:3f:44:7d:0a:e8:
72:d1:ce:10:91:68:c6:f8:8c:d8:13:a5:c9:dc:ec:
4b:3f:bd:99:27:c7:56:f2:41:9e:ca:b8:c3:3e:22:
d5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E5:34:68:6D:C0:12:EB:FB:4F:CC:EC:52:7D:46:F0:82:DA:E3:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00fadf28-ea31-371e-b63d-eb0a5142679c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.16.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:d5:e6:80:96:33:95:58:ea:a0:70:f1:0e:75:63:53:34:e3:
6d:f1:3f:73:c0:fb:30:af:45:12:a4:7a:54:49:8d:a9:25:64:
31:37:62:4c:24:a9:75:c1:9b:0b:f1:82:09:81:9d:26:2b:73:
98:95:8b:27:46:59:e7:c7:03:f3:b8:b7:be:70:06:8c:a4:19:
50:c0:e5:29:8e:5a:96:57:d9:ef:54:66:de:b6:81:f0:85:f4:
ea:b7:1c:54:c7:f1:89:e1:19:7b:74:a9:c6:50:27:18:45:72:
75:fe:7e:55:66:0b:fe:85:83:5b:aa:41:4c:1f:cb:f8:71:fc:
82:06:fe:fb:7a:2d:5d:9f:8f:90:9d:72:41:9a:42:6e:0e:9e:
ae:2d:e1:28:41:61:1b:18:f2:4f:b6:8d:1e:69:3a:4c:d8:46:
a7:a8:c6:7a:ed:18:30:2c:56:57:4c:f4:47:37:fb:02:35:ff:
7e:42:4c:72:da:8a:59:63:36:7f:70:cd:21:8c:e1:d8:f0:b6:
d0:a0:e6:95:72:e8:d3:11:6b:97:b9:3d:b2:90:6e:16:ad:0c:
75:3c:6a:55:e6:ff:e5:45:41:ad:33:71:de:80:00:67:b7:0d:
de:17:b5:35:47:4b:40:db:75:3c:5f:e0:bb:f9:6d:85:dd:8e:
46:96:ea:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:57:32 2026 by rpki-client