
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dff95e31-c987-3dc4-8df4-8faa54bc45da.roa
File: dff95e31-c987-3dc4-8df4-8faa54bc45da.roa (raw, json)
Hash identifier: 9eivPbeFYhAb76RAubkeGj4CB8CaeNitCvJinm23z20=
Subject key identifier: D0:6C:94:8A:1E:CF:FD:4F:4E:8A:CB:E3:20:43:6D:3D:05:9A:C7:6E
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EBDDC59A970A37266C9E63F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dff95e31-c987-3dc4-8df4-8faa54bc45da.roa
Signing time: Thu 06 Aug 2026 01:00:12 +0000
ROA not before: Thu 06 Aug 2026 01:00:12 +0000
ROA not after: Wed 04 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 104.23.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bd:dc:59:a9:70:a3:72:66:c9:e6:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 6 01:00:12 2026 GMT
Not After : Nov 4 02:00:12 2026 GMT
Subject: CN=dd7de3f8-3c9e-4893-9f6a-0d3fb9c4aca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:33:64:86:65:ce:c5:d3:42:fd:6a:c4:4c:67:
d9:23:01:b6:94:b4:1b:a8:73:1b:b6:4c:37:65:88:
e3:43:05:24:4f:34:7c:c1:b6:ef:a2:bb:b0:8a:8f:
ba:72:af:98:61:c6:a5:c4:10:ce:e0:5b:c4:3c:d8:
8d:96:24:4c:97:26:13:6c:4d:85:3d:78:9b:80:56:
2a:bd:c2:23:12:21:9d:3c:d3:b3:d7:e8:60:81:d2:
57:e1:af:48:e6:16:e5:a0:d9:0d:17:75:be:5b:b5:
97:a3:5d:56:61:f9:2d:82:27:c7:62:19:38:c0:36:
94:63:44:0c:60:87:64:75:66:b1:54:ef:05:a8:2b:
f5:1b:10:e2:f4:3c:86:3a:c7:56:fd:6e:47:39:cd:
3b:b0:8d:26:7a:9c:dc:9a:a0:2c:7c:55:0e:36:b7:
07:8d:98:a9:d5:e1:d8:0e:97:79:0f:ce:63:bb:47:
7e:2f:0f:1a:67:18:b2:d9:2e:64:c3:5d:78:b7:8d:
22:98:07:eb:f2:a8:d3:22:24:1c:ff:b4:cd:e5:67:
72:7d:a3:9f:04:a3:75:73:cf:78:e0:9b:70:38:32:
e7:6b:93:45:1d:2a:00:c7:04:57:5b:e7:0b:1f:bc:
82:a9:57:da:c0:38:b7:70:9b:c4:c4:b0:75:56:3c:
ac:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6C:94:8A:1E:CF:FD:4F:4E:8A:CB:E3:20:43:6D:3D:05:9A:C7:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dff95e31-c987-3dc4-8df4-8faa54bc45da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.23.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:0e:af:6f:2e:d5:a6:a7:10:70:91:b4:3b:a7:80:ee:ad:e3:
26:04:a5:c5:f9:e9:a6:2e:8a:dd:21:f0:dc:9e:4b:a2:8e:d0:
5b:09:31:ef:2d:db:80:29:37:53:c0:0a:3c:5d:dc:20:04:d6:
72:76:d7:8e:ec:71:cc:07:d9:e8:6d:0f:70:89:56:cb:b2:9d:
23:ac:89:7a:2e:f1:2c:91:27:ae:f3:69:80:c1:29:5e:32:d5:
11:53:2f:90:11:1c:d3:c0:9d:3c:df:60:a3:16:29:11:fb:c9:
8d:31:bf:11:f4:e9:b8:86:1e:45:77:2f:cd:fc:40:15:63:f2:
b8:7f:97:b0:1d:3d:d4:80:86:62:63:de:21:79:1c:66:8c:54:
2b:84:ed:a1:c6:4b:2c:83:10:e9:c6:e5:20:cc:cc:dc:f5:a5:
8b:c5:ff:14:d5:f4:26:b3:8d:45:19:b0:f7:2d:cb:7d:22:0f:
ab:fb:89:4e:e4:44:33:55:a4:2e:e6:a9:1f:61:16:e0:f9:e6:
4d:0d:71:79:60:5f:65:ae:42:10:2d:56:71:fc:71:85:30:29:
6b:22:f8:93:cf:dc:dd:90:d8:f2:4e:dc:6c:df:d9:ae:cc:f3:
2d:cc:b7:40:66:ba:30:24:bf:2e:01:8f:35:66:54:fe:44:cf:
f4:b1:57:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:43:27 2026 by rpki-client