
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa
File: cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa (raw, json)
Hash identifier: 4nFhIDFnmz30WTKA0E4EanSbgoDgOFlsIvdwDtuFqlU=
Subject key identifier: 46:4B:12:25:2B:11:6D:E4:D9:6F:94:E0:76:5E:E7:B0:53:B2:F7:8E
Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Certificate serial: 010D0C9F4328584DE84B37A708BE7B59733782A0
Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa
Signing time: Thu 21 May 2026 13:00:32 +0000
ROA not before: Thu 21 May 2026 13:00:32 +0000
ROA not after: Wed 19 Aug 2026 13:00:32 +0000
asID: 14618
IP address blocks: 104.200.216.0/24 maxlen: 24
104.200.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 23 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e8:4b:37:a7:08:be:7b:59:73:37:82:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Validity
Not Before: May 21 13:00:32 2026 GMT
Not After : Aug 19 13:00:32 2026 GMT
Subject: CN=8fc06cc9-2863-4663-9f1c-8219d33a493a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:b5:3c:5c:85:cc:74:e3:31:ed:0b:8e:4b:
f8:73:20:ab:66:92:b3:0a:92:c8:5a:1b:ae:bd:6c:
04:6b:0b:0d:48:1a:7a:2d:31:71:0e:26:45:48:c6:
85:94:89:02:0b:16:a1:ec:f5:37:8a:33:cc:c6:03:
db:5a:04:c8:1e:bc:22:b3:b5:93:95:e5:a3:d7:8a:
40:78:a3:00:d6:2f:64:56:0d:c3:03:a9:c8:1a:ba:
79:a0:4c:64:58:07:ee:45:e5:4e:5a:ab:69:4a:c0:
7d:82:30:52:43:30:09:5d:9e:91:03:26:40:d1:17:
3b:ea:e6:a3:e7:06:a1:f9:bc:a3:97:27:61:27:91:
3c:34:61:93:a5:ba:b2:6d:85:0a:fc:8c:3a:6e:1d:
b1:7c:f7:24:b4:a8:45:ea:5c:56:78:b6:2b:1d:eb:
01:43:41:1e:11:a1:54:04:f4:f3:f8:c2:e9:4b:7b:
57:59:43:3d:4b:73:57:79:5b:ba:1f:69:dd:3d:ef:
fd:c7:42:b9:f8:7b:39:02:4b:09:aa:29:48:9e:03:
67:8b:9a:45:1f:e5:df:2f:72:12:66:79:42:9c:59:
28:06:f8:7c:00:78:59:37:bb:8a:4d:9b:08:ec:e5:
4d:13:a3:7b:dc:ea:08:7c:b8:30:06:f9:7d:16:1a:
18:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4B:12:25:2B:11:6D:E4:D9:6F:94:E0:76:5E:E7:B0:53:B2:F7:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
X509v3 Authority Key Identifier:
keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.200.216.0/24
104.200.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:1e:7e:9d:a0:f8:62:44:d0:8e:5f:1a:3e:1f:09:5b:ad:5c:
7b:79:f1:c5:a2:e1:00:91:65:4d:5e:bd:ee:a8:9e:8f:d3:2a:
5f:59:f8:f2:42:4e:3a:af:db:c6:63:fa:6a:a1:3e:96:cc:39:
12:d5:d3:85:3a:ea:aa:bc:3e:a7:3e:4a:18:d1:cf:12:93:6b:
bc:87:5c:49:af:ee:ba:64:01:9b:bf:2e:75:97:9e:90:12:d4:
68:d6:68:6c:43:80:84:32:d1:e3:ac:d8:76:2d:2a:e8:f4:e0:
de:f5:11:e1:f0:56:2e:ee:15:00:30:4c:94:fd:c8:f8:9b:31:
c5:3a:5c:36:02:4a:7c:39:00:89:18:ec:94:ca:47:84:0f:cc:
a0:3f:de:92:c4:98:b5:b5:83:56:b8:99:98:3f:58:45:c4:8a:
83:50:55:b2:34:b5:f1:55:ad:34:61:b9:99:3d:70:89:de:f8:
00:fc:b9:b1:95:57:3f:dd:29:74:55:ea:7a:0a:2e:19:8b:98:
ec:12:ee:57:ce:4d:a0:12:1f:2c:24:03:66:e6:15:bc:12:f3:
b0:38:ef:90:35:ac:58:52:f4:94:5c:db:74:4e:55:06:24:21:
5e:66:18:a7:3c:e7:3f:1d:c9:1e:a1:d9:7b:05:ad:76:8b:6b:
46:84:92:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 19:33:41 2026 by rpki-client