
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ada8f72e-4d32-3a14-b045-26908e699ef8.roa
File: ada8f72e-4d32-3a14-b045-26908e699ef8.roa (raw, json)
Hash identifier: nd5s9U0/+H7NwTfGYERKhDtPdcCZTxvTbirxJly5nQs=
Subject key identifier: F6:82:04:DE:78:51:32:34:9B:FC:69:AF:E8:56:E3:A1:65:FE:98:9C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BA667BC99785F88C2492F3180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ada8f72e-4d32-3a14-b045-26908e699ef8.roa
Signing time: Sun 26 Oct 2025 13:00:38 +0000
ROA not before: Sun 26 Oct 2025 13:00:38 +0000
ROA not after: Sat 24 Jan 2026 14:00:38 +0000
asID: 13335
IP address blocks: 104.16.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a6:67:bc:99:78:5f:88:c2:49:2f:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 26 13:00:38 2025 GMT
Not After : Jan 24 14:00:38 2026 GMT
Subject: CN=7f8fab79-6378-47e5-b266-1e82acc09f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:08:73:cb:88:e8:93:05:c8:84:e8:58:48:86:
48:d9:05:8e:41:de:44:78:b4:61:19:f8:07:cc:01:
04:1b:fc:a9:8f:98:37:05:89:fe:ab:60:e0:01:a4:
0a:2c:36:16:64:dc:ef:22:d7:c4:be:73:a2:b3:7e:
a8:b7:63:65:d6:db:2e:e3:cd:b1:56:c0:32:d9:18:
fa:7f:92:71:c5:f9:65:a2:c1:c3:00:19:4c:34:93:
ea:d1:a9:85:47:20:54:72:b3:b3:55:fc:f9:a6:2c:
74:77:9e:6f:fb:08:6d:cf:0e:6e:5d:43:1f:4e:01:
46:60:49:30:85:a2:d7:2f:a2:16:2a:f8:87:66:38:
84:f0:c5:bd:9d:ea:54:4c:75:17:fd:21:d6:64:69:
19:6e:90:3e:c7:fd:d3:f4:0b:70:83:42:03:18:fe:
e4:40:ae:b4:71:0b:98:fc:dd:6b:22:3b:35:59:5c:
f6:bc:58:8f:0b:26:71:94:a3:a3:94:6a:cb:95:06:
a3:f5:73:5e:f6:54:90:33:ae:59:36:da:38:01:4f:
d3:f4:68:01:21:54:9a:15:a4:0b:b1:c7:85:56:39:
b8:cd:bd:1f:5b:47:25:63:8f:98:a7:d3:1e:cf:e5:
3b:0a:1b:da:05:c7:ea:05:91:af:af:34:cc:81:24:
2f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:82:04:DE:78:51:32:34:9B:FC:69:AF:E8:56:E3:A1:65:FE:98:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ada8f72e-4d32-3a14-b045-26908e699ef8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.16.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:22:bc:bf:5e:e3:13:d9:5f:3a:c8:eb:53:3c:6f:d9:9e:1f:
39:8f:1d:6c:79:67:27:28:e4:2f:3e:f5:56:d1:4d:b4:ed:8f:
30:5b:f7:ba:dd:a8:3a:b2:60:e2:f1:3a:f5:d0:36:ae:75:42:
4e:82:7f:e5:c6:dd:ac:c1:f0:9d:26:34:34:59:5d:ce:14:1a:
38:c3:05:b4:3c:f5:b6:cc:26:c4:e2:4d:5e:d3:9a:a4:84:f8:
a3:43:71:51:31:e2:1a:92:aa:0c:03:47:c7:74:ef:3c:41:52:
cc:7d:95:aa:3f:01:96:d5:86:08:cd:45:8c:5d:c4:90:d2:91:
b9:d5:0c:62:b9:7d:7f:9c:df:ca:35:3e:04:ad:98:ad:df:7d:
48:b7:99:5f:e3:72:b4:40:15:63:4d:88:a4:cf:17:2a:3e:fd:
db:22:d2:59:05:37:12:da:ff:28:fb:5b:82:6d:5f:a2:1e:ca:
d1:b1:a6:e6:3b:a8:31:f9:c1:3b:8a:7c:23:1e:23:e8:37:d4:
d6:5d:14:db:d0:12:e2:fd:8c:1f:ab:e3:f6:f4:16:52:ac:80:
1d:25:fa:23:75:1d:dd:ea:3f:9f:13:a1:77:09:f2:8b:bd:1c:
6f:3f:00:2c:d9:40:7b:5e:70:2f:de:e5:b8:43:8f:5c:97:fd:
c0:2c:77:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:31:16 2025 by rpki-client