
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ccf18623-6760-3517-a581-038fce7cc33e.roa
File: ccf18623-6760-3517-a581-038fce7cc33e.roa (raw, json)
Hash identifier: NOVIrGjh3d5JLufZS7V+Qf5YaPQdIil+GF5uGHzWwcI=
Subject key identifier: 39:1C:F6:25:06:59:54:6A:22:12:45:E2:AC:8D:92:2C:EF:18:16:18
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584DA6E5FE36E73731510A6EE300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ccf18623-6760-3517-a581-038fce7cc33e.roa
Signing time: Tue 28 Apr 2026 02:49:10 +0000
ROA not before: Tue 28 Apr 2026 02:49:10 +0000
ROA not after: Mon 27 Jul 2026 02:49:10 +0000
asID: 13335
IP address blocks: 104.22.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 11 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a6:e5:fe:36:e7:37:31:51:0a:6e:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Apr 28 02:49:10 2026 GMT
Not After : Jul 27 02:49:10 2026 GMT
Subject: CN=12a6dd3b-a5a5-4a2b-8134-71fd02f45ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7c:77:46:34:6d:30:11:b9:f9:af:ae:60:35:
db:6f:be:03:e4:e3:c1:7e:34:30:32:e8:22:a2:88:
d0:51:c3:ca:47:c5:42:20:13:ba:59:fe:e4:fc:5a:
26:d8:e4:58:7c:62:e3:a0:ae:8f:1d:60:b4:fa:38:
93:6c:8f:f5:bc:20:c0:51:14:9a:eb:dc:84:67:c3:
ee:13:7d:ae:6a:04:00:92:21:0d:ef:ee:89:29:00:
b8:f1:13:19:c8:bc:20:c7:c9:ca:76:3c:5e:ca:28:
f1:1c:0d:fe:09:af:53:44:a8:00:ce:31:98:66:23:
e6:0d:f1:99:53:bb:53:04:20:ac:ba:77:a9:54:62:
30:0c:26:44:93:d5:0e:18:5a:d3:60:ca:54:3b:67:
1d:44:d8:8f:2f:e6:34:68:ba:16:48:f2:58:ed:a9:
25:0f:92:a7:95:82:da:96:dd:8c:68:55:7c:11:b0:
ca:c9:a0:3b:75:ad:3d:13:bc:03:86:e4:27:4d:78:
10:96:da:e9:98:12:d1:79:00:f2:e3:de:31:16:44:
58:11:e1:17:f6:ba:14:a1:45:9e:82:63:f7:5b:0d:
1a:38:e9:10:0b:ad:64:93:4a:0f:3e:3c:19:f1:42:
a2:ee:74:c7:ad:e8:2c:45:d7:38:90:28:5e:5e:a5:
df:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1C:F6:25:06:59:54:6A:22:12:45:E2:AC:8D:92:2C:EF:18:16:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ccf18623-6760-3517-a581-038fce7cc33e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.22.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:18:1e:ec:71:a4:2c:a5:de:41:c6:b4:dc:e9:66:98:87:e3:
8d:eb:03:13:9a:55:84:45:0e:d8:e1:5f:5b:e5:06:5e:e3:b3:
18:e2:61:f4:83:c4:be:38:0a:6b:7d:9f:b2:c3:22:56:23:5a:
c1:5a:7a:90:63:2f:1e:fa:23:e6:41:ce:aa:8c:bd:a0:59:b1:
99:9c:71:42:31:bc:b0:c4:b6:96:7d:cd:81:10:55:2c:9f:14:
0c:ea:c7:85:49:b8:c4:42:b6:89:19:df:5f:ba:9d:89:ce:7e:
60:7f:79:8f:95:96:4c:0c:7f:5d:80:e8:7d:ed:01:1f:cd:95:
7c:7e:b3:15:bb:26:ba:41:29:3e:67:8b:08:a2:49:5d:fb:58:
c7:2f:ee:01:91:70:b9:74:48:b8:7f:4c:c2:13:84:57:f2:11:
54:75:f8:26:6e:27:0f:1f:ff:c1:ca:76:89:4d:45:4f:59:94:
9c:b6:e2:64:71:99:86:34:32:b1:c1:94:6f:f5:64:bf:2c:e9:
80:e7:3a:7f:e3:7f:3e:1d:02:c1:15:7b:3e:91:81:94:01:3b:
57:5e:c7:0d:95:3d:05:2e:3e:43:5f:17:53:48:08:38:6b:73:
c3:e4:ff:c8:e4:0f:4f:53:a7:c9:56:52:42:a5:4d:89:04:c4:
e1:f9:57:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 08:09:40 2026 by rpki-client