
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/654ebbd6-d45d-394f-9ca4-182851f75abc.roa
File: 654ebbd6-d45d-394f-9ca4-182851f75abc.roa (raw, json)
Hash identifier: HDc7zUBgrzsxEcvxed7bA089ErDjJ17HNklUGLWOvJQ=
Subject key identifier: 04:40:BA:9B:C2:0E:3D:E0:5C:C3:24:A2:0F:FD:3F:B9:79:E9:D1:C7
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BA667BCD9F6B237450C2D4D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/654ebbd6-d45d-394f-9ca4-182851f75abc.roa
Signing time: Sun 26 Oct 2025 13:00:38 +0000
ROA not before: Sun 26 Oct 2025 13:00:38 +0000
ROA not after: Sat 24 Jan 2026 14:00:38 +0000
asID: 13335
IP address blocks: 104.17.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a6:67:bc:d9:f6:b2:37:45:0c:2d:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 26 13:00:38 2025 GMT
Not After : Jan 24 14:00:38 2026 GMT
Subject: CN=4eeb7e27-744d-440f-92ea-b84fad5712ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:a2:b4:2e:b5:64:61:03:99:b1:be:f9:00:
15:e1:04:fe:96:be:ea:2d:82:1b:2a:92:41:1b:45:
2c:44:d5:13:c0:f4:9b:50:c1:92:c0:34:6d:28:3b:
c7:b7:c8:c2:cc:9b:d1:21:0c:6a:a5:80:9e:a1:c2:
17:06:9d:b4:76:61:c4:e0:11:18:35:2a:1d:8f:88:
14:0f:24:2e:b8:a4:1f:f0:13:2d:e2:ed:55:0d:f9:
81:89:7e:cb:1f:88:1a:c3:8a:95:a9:95:a7:c4:b8:
7c:59:aa:26:de:2b:34:fe:ee:40:e6:fd:e6:2f:5b:
ff:bf:ca:99:af:d3:af:5b:e5:68:9f:d3:38:ca:c5:
66:d9:75:da:42:ef:c5:4f:00:eb:98:8b:68:d6:ea:
00:e3:48:da:cc:4a:54:14:05:b1:6b:55:0d:b0:a6:
d2:7b:33:12:f3:84:ca:d3:b5:52:65:8c:ad:5d:59:
97:11:84:ec:bd:6c:e5:c1:9d:2c:9d:2b:d3:68:f5:
70:e8:5b:d9:b1:1c:c7:d8:43:5d:0b:49:20:74:50:
62:70:33:5c:f1:df:8d:ca:3c:8e:77:f7:2e:df:0d:
2c:ed:ef:da:a2:46:18:a6:ea:33:60:d4:49:a7:39:
50:af:89:da:df:84:a4:fb:3f:b5:26:78:f1:6b:78:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:40:BA:9B:C2:0E:3D:E0:5C:C3:24:A2:0F:FD:3F:B9:79:E9:D1:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/654ebbd6-d45d-394f-9ca4-182851f75abc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.17.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:c5:c5:08:ca:b9:3d:bf:73:07:0f:48:ac:8d:05:31:4b:61:
e1:c3:3a:7f:bf:a1:a3:d1:14:1b:23:8b:cf:f1:10:28:d4:8e:
5e:ff:18:fd:6d:82:e0:8e:12:20:5f:85:c9:08:e7:41:0c:2b:
62:46:d1:fb:d7:4d:fc:00:34:db:66:91:1c:8b:06:d0:83:7f:
3d:94:28:e5:b7:10:54:06:87:db:19:3a:03:3b:b5:ed:59:56:
2f:9c:38:d5:90:c0:9c:f9:e8:41:60:7a:cd:90:ab:1a:07:c0:
c3:8e:ab:68:82:b4:5b:1d:16:6a:3d:dc:f4:f6:c2:4b:35:31:
48:17:29:d9:68:22:f0:01:36:8f:8d:b2:dd:c7:ed:5a:c8:ea:
ab:8e:d0:71:ea:80:50:ec:2b:ed:c2:12:c6:05:1f:0e:44:22:
aa:3c:f9:05:0b:3b:01:b2:8f:67:18:5f:a7:79:33:0b:68:48:
b1:d1:d7:d6:04:cd:80:64:89:9b:8d:ea:5a:9c:47:2a:ad:c1:
85:a4:49:cf:c0:d6:ba:09:e2:ad:76:15:2f:57:63:0b:8b:c0:
20:2a:a2:0d:2f:b2:7d:b2:53:14:b6:8a:5f:ee:ea:9f:8f:88:
60:ad:8a:af:a7:b0:ff:4b:56:e4:53:f4:e1:2f:24:c5:79:99:
24:39:e5:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7zZ9rI3RQwtTYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk
NGVlYjdlMjctNzQ0ZC00NDBmLTkyZWEtYjg0ZmFkNTcxMmVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNeitC61ZGEDmbG++QAV4QT+lr7qLYIbKpJB
G0UsRNUTwPSbUMGSwDRtKDvHt8jCzJvRIQxqpYCeocIXBp20dmHE4BEYNSodj4gU
DyQuuKQf8BMt4u1VDfmBiX7LH4gaw4qVqZWnxLh8Waom3is0/u5A5v3mL1v/v8qZ
r9OvW+Von9M4ysVm2XXaQu/FTwDrmIto1uoA40jazEpUFAWxa1UNsKbSezMS84TK
07VSZYytXVmXEYTsvWzlwZ0snSvTaPVw6FvZsRzH2ENdC0kgdFBicDNc8d+NyjyO
d/cu3w0s7e/aokYYpuozYNRJpzlQr4na34Sk+z+1Jnjxa3iVwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFARAupvCDj3gXMMkog/9P7l56dHHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjU0ZWJiZDYtZDQ1ZC0z
OTRmLTljYTQtMTgyODUxZjc1YWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBFQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLFxQjKuT2/cwcPSKyNBTFLYeHDOn+/oaPRFBsji8/xECjUjl7/GP1t
guCOEiBfhckI50EMK2JG0fvXTfwANNtmkRyLBtCDfz2UKOW3EFQGh9sZOgM7te1Z
Vi+cONWQwJz56EFges2QqxoHwMOOq2iCtFsdFmo93PT2wks1MUgXKdloIvABNo+N
st3H7VrI6quO0HHqgFDsK+3CEsYFHw5EIqo8+QULOwGyj2cYX6d5MwtoSLHR19YE
zYBkiZuN6lqcRyqtwYWkSc/A1roJ4q12FS9XYwuLwCAqog0vsn2yUxS2il/u6p+P
iGCtiq+nsP9LVuRT9OEvJMV5mSQ55f0=
-----END CERTIFICATE-----
Generated at Sat Nov 1 12:36:54 2025 by rpki-client