
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05715eb2-016d-3904-806c-d7e7025f704d.roa
File: 05715eb2-016d-3904-806c-d7e7025f704d.roa (raw, json)
Hash identifier: 5OiOto2LhtkF5hHT1i5axv/pp+n5BeaYX2kiaegOKrE=
Subject key identifier: E2:4A:B7:63:C9:54:C7:D4:21:D3:98:C1:15:AF:E6:A0:8B:55:7E:03
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BA667C271196F2A7712A43680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05715eb2-016d-3904-806c-d7e7025f704d.roa
Signing time: Sun 26 Oct 2025 13:00:38 +0000
ROA not before: Sun 26 Oct 2025 13:00:38 +0000
ROA not after: Sat 24 Jan 2026 14:00:38 +0000
asID: 13335
IP address blocks: 104.23.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a6:67:c2:71:19:6f:2a:77:12:a4:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 26 13:00:38 2025 GMT
Not After : Jan 24 14:00:38 2026 GMT
Subject: CN=b20d2c35-c033-4b57-8408-612cc3128a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5a:61:56:ef:36:1c:a9:ea:f4:78:68:1b:4f:
49:80:97:b7:ee:6d:96:e5:d0:86:a8:1e:e7:46:ff:
6a:e7:1a:0e:b5:17:40:4f:b3:28:41:99:de:66:c3:
f7:ec:0c:10:5a:c3:5c:13:be:3e:db:83:85:10:20:
51:8b:2d:8c:04:81:ab:0f:af:bd:2b:ec:15:8a:f5:
c6:2d:93:19:f4:96:f3:19:94:af:1a:56:55:45:3a:
1d:ce:76:54:b2:25:c1:e5:3b:63:8b:dc:13:db:06:
c1:62:be:a2:79:bd:7d:ca:93:47:be:ec:f1:fd:a5:
af:b4:29:17:46:70:7a:b7:34:24:a8:d8:9b:60:44:
12:c3:00:d7:45:1f:ff:23:03:f2:26:b4:5e:5b:2a:
de:1b:cc:32:8c:5f:2a:af:8b:78:07:7f:ac:39:ef:
fe:a5:f1:dd:d3:fc:68:31:ac:99:37:8c:bc:89:85:
ae:a7:9d:e8:3c:27:11:ea:19:cd:66:39:e8:28:99:
b0:65:bd:c0:5c:f7:fe:93:9b:00:2c:2d:f0:f3:fd:
08:21:e7:81:9f:b8:c5:b8:4f:c0:50:b8:20:6e:06:
06:ed:f9:15:1a:69:43:1f:ea:2a:e1:39:d3:30:99:
41:e6:aa:b8:05:3e:d9:91:d1:41:e9:ad:54:81:f7:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4A:B7:63:C9:54:C7:D4:21:D3:98:C1:15:AF:E6:A0:8B:55:7E:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05715eb2-016d-3904-806c-d7e7025f704d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.23.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:2b:4b:55:76:8a:da:9e:6e:8c:67:95:ff:93:de:ff:2c:92:
ca:6a:4f:14:14:44:a2:ee:82:b2:62:62:e0:57:da:fd:d6:98:
44:79:6f:19:2b:50:4e:38:71:fc:45:a6:2f:39:6d:71:8f:43:
81:a5:69:56:c8:5f:85:db:b3:28:2e:a4:b1:76:fc:ac:b3:57:
2a:58:2d:fe:3e:d4:1e:88:86:40:b5:7c:b7:83:89:80:5d:17:
43:33:23:15:8e:05:59:e3:f3:75:e8:b6:6e:c3:13:1b:eb:7f:
04:18:9e:14:35:e0:42:5a:9c:e7:61:d2:f4:82:17:6d:14:10:
e8:48:60:07:5d:1a:33:95:9d:af:1e:4d:60:10:ff:4e:9d:da:
0c:6a:a4:b8:b1:bf:a8:68:ab:cf:76:b8:97:e1:54:6c:f3:ed:
bb:0a:c6:91:bf:f5:cb:14:d7:91:c0:13:bd:cb:d6:27:e6:1f:
95:04:10:cc:0c:5e:d0:7d:9c:3a:b3:2a:58:cb:ed:16:0d:2e:
d5:ea:98:2d:38:b4:f0:8e:98:d5:fb:2a:c4:59:a6:b6:a6:40:
2c:73:f1:a7:59:e5:77:69:43:43:f5:77:d9:c5:f5:a9:d7:f4:
6d:c0:03:3d:cb:13:2e:cb:08:80:d0:1f:9f:ac:7e:6b:54:d1:
cc:5e:13:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 10:03:07 2025 by rpki-client