
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29d99c93-798c-35f7-b0ea-814b7f20b495.roa
File: 29d99c93-798c-35f7-b0ea-814b7f20b495.roa (raw, json)
Hash identifier: dViAeTRkxtv5Dll8EVGpnLunawqItjbTeH6Go/UW75A=
Subject key identifier: 01:A0:3F:60:68:5A:58:4A:B7:63:36:CE:E5:43:EC:60:13:CD:D4:82
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584E4824969526A8A50EBADB0D00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29d99c93-798c-35f7-b0ea-814b7f20b495.roa
Signing time: Wed 24 Jun 2026 21:00:12 +0000
ROA not before: Wed 24 Jun 2026 21:00:12 +0000
ROA not after: Tue 22 Sep 2026 21:00:12 +0000
asID: 13335
IP address blocks: 104.17.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:48:24:96:95:26:a8:a5:0e:ba:db:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 24 21:00:12 2026 GMT
Not After : Sep 22 21:00:12 2026 GMT
Subject: CN=387ac4b8-1e17-4137-86aa-09b3b0aa6c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:51:4c:95:5f:70:3a:39:5d:75:e6:d5:53:
59:30:3c:13:55:51:48:c1:98:1e:46:3c:d9:4c:0c:
64:a6:6d:e6:9e:1d:40:f6:ed:5e:34:7e:45:8a:ec:
fe:8d:ba:99:b2:3f:dc:cd:23:96:e0:b2:a4:f6:0f:
f1:8e:7a:6d:41:fa:c8:58:5a:66:d4:30:c2:90:2d:
fa:2a:13:bc:05:c5:c9:ff:cd:fa:49:cd:c6:cf:b8:
7e:9b:16:6f:80:cc:44:69:16:cc:1f:c8:21:fc:31:
c1:2f:65:a8:e8:9c:33:0a:86:37:91:23:e4:21:27:
1f:51:3f:c4:a4:a8:48:5d:3d:80:04:59:16:7e:4f:
b3:5a:f2:ef:9b:75:90:8a:df:c2:b4:bc:9c:2c:b8:
30:b8:fe:49:74:e4:ea:e8:ec:5b:78:15:ca:16:ff:
fd:36:bc:bf:c5:31:ff:c3:3a:e1:06:6f:ae:ee:db:
5e:3e:8b:fd:9d:13:7b:c8:d6:74:4f:16:a6:25:81:
04:dc:39:b6:ae:b8:7f:51:2b:e4:6a:bf:a3:5d:64:
26:47:b9:56:49:10:91:9a:4b:f5:66:b9:d7:b1:56:
81:e9:0b:ab:32:e2:6b:1e:f2:94:b0:4e:5b:b4:5c:
4b:9a:91:a2:31:2a:72:67:c5:ca:42:27:6d:32:af:
00:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A0:3F:60:68:5A:58:4A:B7:63:36:CE:E5:43:EC:60:13:CD:D4:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29d99c93-798c-35f7-b0ea-814b7f20b495.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.17.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:48:4d:ba:05:81:61:60:f4:06:a2:71:17:8f:e5:9b:4d:d9:
6e:c0:ea:4b:5a:a2:eb:0e:f2:8e:b1:ed:94:dd:6b:ce:ac:61:
02:5f:5c:d2:5c:c3:bd:00:05:00:02:fc:34:8e:ac:1b:f9:65:
fa:67:71:57:78:26:78:cc:a9:53:ae:a1:2a:0d:27:ca:b0:de:
c8:14:1d:00:3b:70:a0:d4:50:49:57:15:88:46:9a:06:61:6f:
d1:6c:bb:db:c0:19:44:70:94:4d:00:f0:17:82:da:c4:5b:79:
0f:df:d6:71:51:79:82:22:73:4d:2c:f6:af:b7:36:e3:1b:31:
93:e1:be:b2:db:bc:3d:23:92:7f:39:ae:e1:c2:6b:a7:23:30:
d3:68:26:d4:c4:03:a7:98:fa:6b:ca:52:8a:4e:b9:01:a4:38:
28:69:d7:80:90:45:09:62:23:b3:1e:4c:22:7f:aa:6a:c1:01:
51:76:b2:ba:c4:8e:ad:27:8c:ec:d4:03:ed:32:7a:a6:e5:86:
20:b1:d2:68:ce:1e:f0:6d:c3:f7:c1:e5:46:9a:b3:ef:7f:02:
a2:5b:ac:f3:65:04:74:dc:2e:f8:7f:a3:74:78:83:33:87:81:
88:b0:94:a4:94:ef:62:92:76:54:c5:de:28:58:89:92:9d:2d:
50:15:53:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJJaVJqilDrrbDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk
Mzg3YWM0YjgtMWUxNy00MTM3LTg2YWEtMDliM2IwYWE2YzZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuFRTJVfcDo5XXXm1VNZMDwTVVFIwZgeRjzZ
TAxkpm3mnh1A9u1eNH5Fiuz+jbqZsj/czSOW4LKk9g/xjnptQfrIWFpm1DDCkC36
KhO8BcXJ/836Sc3Gz7h+mxZvgMxEaRbMH8gh/DHBL2Wo6JwzCoY3kSPkIScfUT/E
pKhIXT2ABFkWfk+zWvLvm3WQit/CtLycLLgwuP5JdOTq6OxbeBXKFv/9Nry/xTH/
wzrhBm+u7ttePov9nRN7yNZ0TxamJYEE3Dm2rrh/USvkar+jXWQmR7lWSRCRmkv1
ZrnXsVaB6QurMuJrHvKUsE5btFxLmpGiMSpyZ8XKQidtMq8ARwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAGgP2BoWlhKt2M2zuVD7GATzdSCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjlkOTljOTMtNzk4Yy0z
NWY3LWIwZWEtODE0YjdmMjBiNDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBGgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHVITboFgWFg9AaicReP5ZtN2W7A6ktaousO8o6x7ZTda86sYQJfXNJc
w70ABQAC/DSOrBv5ZfpncVd4JnjMqVOuoSoNJ8qw3sgUHQA7cKDUUElXFYhGmgZh
b9Fsu9vAGURwlE0A8BeC2sRbeQ/f1nFReYIic00s9q+3NuMbMZPhvrLbvD0jkn85
ruHCa6cjMNNoJtTEA6eY+mvKUopOuQGkOChp14CQRQliI7MeTCJ/qmrBAVF2srrE
jq0njOzUA+0yeqblhiCx0mjOHvBtw/fB5Uaas+9/AqJbrPNlBHTcLvh/o3R4gzOH
gYiwlKSU72KSdlTF3ihYiZKdLVAVU1A=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:50:15 2026 by rpki-client