
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/081a19d8-4ceb-373a-9318-5f7f7c105aa8.roa
File: 081a19d8-4ceb-373a-9318-5f7f7c105aa8.roa (raw, json)
Hash identifier: KgmOl2DrD8aMqOi26JddzEo7cumEjvkoFPev9eHeMBY=
Subject key identifier: 7D:04:49:80:A7:A4:96:BE:53:08:D9:B8:D7:4F:02:7D:3F:AA:C3:A9
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BA7CCFCFCB3853D09E069F380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/081a19d8-4ceb-373a-9318-5f7f7c105aa8.roa
Signing time: Mon 27 Oct 2025 01:00:31 +0000
ROA not before: Mon 27 Oct 2025 01:00:31 +0000
ROA not after: Sun 25 Jan 2026 02:00:31 +0000
asID: 13335
IP address blocks: 104.29.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a7:cc:fc:fc:b3:85:3d:09:e0:69:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 27 01:00:31 2025 GMT
Not After : Jan 25 02:00:31 2026 GMT
Subject: CN=4a76a095-7af6-4c82-aec7-247a68444a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:06:ae:11:c4:32:3a:ca:15:f7:0a:19:1b:9b:
94:48:44:e4:47:eb:67:b9:48:f4:7f:2e:d7:ec:2e:
25:7b:ec:65:59:41:3f:e5:75:6d:c8:a7:58:87:d0:
8b:15:ba:52:6b:a8:6b:9b:b2:17:59:0d:12:83:2d:
e4:a1:50:b3:b0:4c:f9:13:42:41:40:84:95:fa:c8:
06:de:de:c7:35:2f:f6:3a:46:d7:71:1b:ff:24:92:
8e:e3:74:27:61:15:7f:91:9d:f9:56:3b:bf:55:12:
b6:7d:82:f5:8c:46:a7:d5:6f:a8:7e:0f:42:ef:ba:
ce:98:0c:c2:af:9e:19:b0:5f:15:78:4d:f6:3f:d5:
6a:71:08:1c:6e:2c:27:d8:15:06:8e:0c:24:f7:47:
90:a9:e6:af:fc:7e:d9:bc:27:85:50:8c:e2:11:ab:
46:e7:95:ba:e3:d3:d8:db:8b:c3:da:24:30:89:85:
52:b1:16:b0:ee:bf:fe:c0:1d:3e:8e:6b:65:0e:0c:
96:70:35:9a:ec:89:f9:26:76:ba:90:92:bc:19:3c:
03:05:32:29:4c:ba:36:d7:d3:94:74:13:e4:43:24:
e6:9c:9e:3a:82:a3:0e:fd:34:43:47:d7:95:61:78:
3d:e4:a6:0d:95:b9:54:98:3e:67:92:1b:f8:87:02:
98:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:04:49:80:A7:A4:96:BE:53:08:D9:B8:D7:4F:02:7D:3F:AA:C3:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/081a19d8-4ceb-373a-9318-5f7f7c105aa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.83.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:6d:eb:10:79:c8:fa:10:9d:7d:28:5a:3d:2d:4d:4a:a5:4e:
8a:a1:45:51:00:f2:db:b3:d9:ea:d9:e6:36:53:b9:43:ce:1e:
36:7c:00:09:2b:f2:48:c9:22:85:e5:ca:28:47:02:d4:1f:d9:
3b:a7:35:f6:8d:b8:54:d2:ef:5c:69:c2:96:80:cd:ce:bc:b7:
ad:89:5b:79:9f:2e:b9:34:1c:7d:0e:8e:b4:b7:e1:ff:87:f5:
02:34:bc:cc:89:bf:3f:a0:5f:2a:65:fa:08:6c:34:94:68:21:
50:d4:30:00:83:39:44:f6:db:cf:64:69:95:5b:42:9f:12:1f:
66:59:20:2c:0e:a8:4b:f3:4f:21:d2:59:e7:d8:b4:10:94:1d:
37:da:b1:60:3c:c6:10:94:90:45:0d:62:21:69:b5:2b:e6:e8:
62:89:47:bb:73:f2:73:42:8b:77:1f:0f:58:34:e8:5e:14:1d:
a9:00:6b:71:63:0a:f9:03:99:21:66:7a:9f:57:11:7a:d4:fe:
17:8d:23:14:cb:9f:6c:24:12:0c:2f:3f:a4:20:ec:76:27:90:
57:3e:a0:97:71:b6:a3:5b:8d:cc:b8:f6:5f:13:dc:87:f0:f5:
4f:49:23:73:d2:a1:20:4a:ea:00:67:cd:e9:50:29:37:e8:14:
76:7d:e8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:37:15 2025 by rpki-client