
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3e3b5b42-836a-34e7-badf-cdb1abc030ea.roa
File: 3e3b5b42-836a-34e7-badf-cdb1abc030ea.roa (raw, json)
Hash identifier: f0dvTv2iqcwK90hvE2Yr01V4VEAywdKowDQAkHK7ctU=
Subject key identifier: E1:AA:2B:9A:9D:E3:AC:71:4B:FB:9F:15:29:2D:0C:BB:11:59:46:0B
Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial: 010D0C9F4328584E37647DB5D9E59E8CEBC68900
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3e3b5b42-836a-34e7-badf-cdb1abc030ea.roa
Signing time: Thu 18 Jun 2026 21:00:12 +0000
ROA not before: Thu 18 Jun 2026 21:00:12 +0000
ROA not after: Wed 16 Sep 2026 21:00:12 +0000
asID: 16789
IP address blocks: 104.156.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 25 Jun 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:37:64:7d:b5:d9:e5:9e:8c:eb:c6:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Validity
Not Before: Jun 18 21:00:12 2026 GMT
Not After : Sep 16 21:00:12 2026 GMT
Subject: CN=5a3c7a2c-dfca-40a6-9610-f6058ef0dac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:cc:f5:6d:ee:dc:0a:0e:40:89:58:b1:87:
91:07:7f:f1:c2:17:3c:c8:80:12:93:28:b1:e4:d9:
79:10:d5:77:31:94:47:79:3c:8c:ad:d4:d1:c9:b0:
77:6b:d4:6f:11:57:10:1f:12:b3:a0:80:59:42:02:
03:33:e0:6d:d8:cf:85:2d:41:c8:93:3e:2e:3e:15:
47:85:d2:2a:bb:bc:64:4f:4b:3b:66:48:45:31:35:
ed:db:87:32:f8:dc:43:e3:eb:cd:c0:3d:94:ee:b0:
3a:4c:ea:0c:ee:b2:f7:1b:79:bf:0b:bf:be:24:31:
d2:ad:29:ee:bf:5b:96:1d:c0:5c:73:b4:15:c4:b6:
0b:ef:ed:ba:e8:47:8f:ee:9c:ca:7b:c1:ce:8d:e8:
22:ab:de:41:e1:75:bb:e1:fe:81:0d:ff:ef:00:c5:
a4:c5:1d:41:e7:6c:16:b8:85:18:c0:bc:df:4d:3b:
41:69:39:f6:7d:a5:2a:b8:d0:47:db:45:32:bf:ce:
e5:f5:6f:7a:30:29:16:40:46:a0:a0:45:d4:9f:b4:
20:43:38:c5:bb:4a:e2:f0:18:a6:8a:e9:3c:74:68:
59:d4:18:ee:03:97:4d:c3:f5:7d:83:ec:e9:7d:7d:
f3:4e:0a:e8:a8:c3:9d:fd:2b:18:75:5d:d9:81:fc:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AA:2B:9A:9D:E3:AC:71:4B:FB:9F:15:29:2D:0C:BB:11:59:46:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3e3b5b42-836a-34e7-badf-cdb1abc030ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
X509v3 Authority Key Identifier:
keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:1a:8b:a3:c7:23:60:3f:dd:63:6b:7f:be:5d:01:8a:9b:99:
22:e1:e0:50:e1:4c:8d:f1:c7:7a:99:b7:6e:18:aa:41:57:c2:
fc:da:c0:ff:52:93:91:72:a4:ca:1f:d7:7e:68:06:65:79:e8:
e3:a1:a3:4f:ea:af:db:a2:47:e7:95:48:15:bd:3a:f8:f2:e6:
07:f2:4a:f2:84:6b:e1:81:19:fe:d0:28:bf:52:25:4f:45:7f:
fb:57:5b:8a:3e:b1:3f:6a:ab:7a:70:d0:44:27:fd:5f:ab:12:
b1:c2:1f:a9:94:a2:80:45:ac:2c:aa:ce:53:3e:83:1f:17:e2:
95:10:bb:96:d5:93:c1:a2:5f:1b:39:ac:f2:a0:a7:b3:f5:34:
52:5f:6d:16:4d:7e:e9:e6:b9:77:ec:8a:ba:ff:a9:ba:51:02:
6a:1f:81:14:47:ee:b1:de:15:89:e9:06:03:da:7a:8a:21:03:
4b:9a:8c:55:a7:64:f5:f5:2b:2a:3c:78:43:87:cf:51:99:71:
d3:b3:b8:aa:f5:5c:61:d6:92:cc:69:cb:99:0c:32:0f:6f:44:
fe:ab:8f:2a:29:9c:56:11:b8:9a:15:b0:4b:33:b2:14:86:8c:
76:a1:1f:e2:89:e6:4f:ff:ea:05:e7:98:e7:3e:0f:8d:34:40:
43:96:ea:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:45 2026 by rpki-client