
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e78ff60d-373f-310c-8674-f5cf68ca09b7.roa
File: e78ff60d-373f-310c-8674-f5cf68ca09b7.roa (raw, json)
Hash identifier: pVh7sKBdx8WOKomJyF2aDJC+taAjxswEUcGQRoDxPr8=
Subject key identifier: E3:32:6A:DF:33:F4:E5:29:F6:5A:B4:6F:56:88:4F:01:C9:21:D7:A7
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BA7CD0030ED5E9CC1419FF480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e78ff60d-373f-310c-8674-f5cf68ca09b7.roa
Signing time: Mon 27 Oct 2025 01:00:31 +0000
ROA not before: Mon 27 Oct 2025 01:00:31 +0000
ROA not after: Sun 25 Jan 2026 02:00:31 +0000
asID: 13335
IP address blocks: 104.30.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a7:cd:00:30:ed:5e:9c:c1:41:9f:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 27 01:00:31 2025 GMT
Not After : Jan 25 02:00:31 2026 GMT
Subject: CN=6e5dcae6-32f7-4d27-ada4-2926f4dffff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:c1:53:12:5b:3b:53:c2:4c:fb:70:44:64:
56:bf:1c:d5:17:a7:30:16:7e:d2:2c:3c:ae:10:09:
67:ba:7b:ce:9f:03:64:41:62:51:94:f5:cc:fc:07:
9a:29:7e:2d:cc:77:75:0c:c6:27:07:2a:26:8a:2b:
0a:3c:eb:a9:45:23:ac:dd:2b:22:14:ae:31:de:db:
96:6a:62:44:00:4f:01:85:c0:5b:c7:f9:97:a8:c8:
1a:24:71:17:ed:43:64:f4:17:b9:86:df:b0:89:1a:
f7:e9:b4:32:f8:4b:c1:2b:a6:75:4b:82:40:49:98:
4b:08:2f:cc:2a:5c:c6:f6:7f:91:b4:9c:b8:6b:46:
53:c0:0e:bb:3d:e8:f4:16:bd:8f:b1:ed:8b:be:84:
e9:e4:1d:4d:93:7b:49:37:df:32:b8:19:f6:83:1f:
b2:fe:78:c9:19:56:3d:2c:77:26:fe:e9:17:42:87:
aa:3f:49:21:f8:a6:cb:9c:4a:98:4f:f7:9d:01:40:
d3:35:6b:02:8c:e7:73:56:be:34:40:37:70:7b:29:
f4:81:48:1f:2c:78:cd:da:c3:20:16:31:d8:bd:03:
b3:44:14:0d:57:ce:3b:85:82:36:97:ef:6a:f6:2a:
14:78:7e:1c:d2:8c:dd:e3:70:6e:62:74:51:bb:21:
f6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:32:6A:DF:33:F4:E5:29:F6:5A:B4:6F:56:88:4F:01:C9:21:D7:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e78ff60d-373f-310c-8674-f5cf68ca09b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.30.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:17:37:dd:b2:fe:1a:24:bb:a9:7b:59:21:e1:bf:61:27:04:
45:5f:9c:e0:5e:73:96:07:b9:6f:c4:7c:e9:83:46:69:af:b9:
ff:c7:51:72:76:77:54:3a:54:3f:47:3c:f1:70:08:0a:11:7f:
8d:d7:b6:d6:86:85:b9:4e:77:ab:31:e0:f0:5b:12:68:56:b9:
af:71:cf:7e:57:b5:94:bb:74:e9:e0:b1:db:0d:6a:91:66:57:
93:3d:60:df:0f:d3:16:23:9e:47:b3:b5:da:6e:58:5c:b7:b9:
7a:c9:f5:33:a6:9f:84:b1:88:01:1b:c9:80:4e:31:5e:95:33:
79:06:f2:5b:5c:fd:c8:56:dd:de:09:95:5c:7e:9c:75:ab:cf:
71:1a:8b:b4:4b:0f:84:09:8f:67:15:e2:e0:70:9d:80:3a:88:
b7:6e:27:21:ad:e1:62:59:53:a4:9d:b3:fb:d6:02:1f:66:99:
c4:d3:f4:54:f5:3a:28:55:7c:d4:b3:23:df:33:9b:ce:43:33:
b2:11:20:31:89:2f:a5:54:85:f2:07:9b:d4:ce:9f:4b:da:c8:
81:76:61:4e:0d:19:14:0a:b9:4d:dc:53:fd:0c:00:6a:48:9b:
80:21:34:b2:88:f7:02:8e:dd:b9:dd:c2:dc:4b:18:37:a9:a1:
fa:d1:f4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 09:59:15 2025 by rpki-client