
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/380434ad-dfee-33ab-8cdf-f630d7c6ea44.roa
File: 380434ad-dfee-33ab-8cdf-f630d7c6ea44.roa (raw, json)
Hash identifier: qo6tmHtyHvxSluDKzB2d6gu8V9PImx4JdVcfF5Gxt8M=
Subject key identifier: 5F:09:96:CC:C5:A0:C1:FE:C5:63:A2:F6:8B:04:62:39:DB:02:5E:82
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BA667B56B2A8243483A38F980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/380434ad-dfee-33ab-8cdf-f630d7c6ea44.roa
Signing time: Sun 26 Oct 2025 13:00:38 +0000
ROA not before: Sun 26 Oct 2025 13:00:38 +0000
ROA not after: Sat 24 Jan 2026 14:00:38 +0000
asID: 13335
IP address blocks: 104.19.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a6:67:b5:6b:2a:82:43:48:3a:38:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 26 13:00:38 2025 GMT
Not After : Jan 24 14:00:38 2026 GMT
Subject: CN=28503db8-abfb-43bd-9fa5-10858ed6b75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:a3:67:39:39:eb:77:4f:ed:1e:55:a8:58:
bb:c2:e3:c0:67:87:8d:37:df:c9:2a:80:b8:5f:19:
9f:06:5c:e0:59:40:1e:9a:ae:67:55:51:38:6f:2c:
5c:58:ab:c6:eb:82:10:cf:ab:23:32:ca:5d:d7:77:
bf:7b:13:06:23:ff:8f:f0:6b:f3:3a:75:1b:81:c2:
47:a3:72:cd:48:d7:e6:bd:c0:08:d0:a3:10:c4:6a:
02:4b:78:da:69:ed:de:0c:8e:47:bf:6b:45:28:d9:
e7:04:b6:ef:dd:9f:cf:7c:3f:62:90:42:b5:77:7a:
1d:08:0f:7d:3d:82:36:42:d9:0f:7b:8d:c2:a8:d4:
30:91:de:9d:a2:f9:b2:ee:9e:be:31:15:b0:b5:7c:
46:95:89:dc:ac:ee:96:e4:b6:47:bd:be:8c:58:8a:
35:2b:67:e9:b5:10:e4:ed:d3:7f:5f:1a:9c:fa:8a:
b3:54:e6:74:12:f7:06:5e:fc:3b:02:b7:4a:02:78:
ab:9b:1c:ac:11:f0:f8:aa:fc:09:c6:7d:de:8a:94:
c3:f2:d2:0b:3d:b2:71:78:26:b3:f8:42:9d:5d:46:
a4:2f:54:51:c5:ef:64:46:99:3e:59:92:44:7b:ce:
1f:a8:fc:52:10:5e:a9:b8:69:ce:80:25:2b:a9:31:
0b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:09:96:CC:C5:A0:C1:FE:C5:63:A2:F6:8B:04:62:39:DB:02:5E:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/380434ad-dfee-33ab-8cdf-f630d7c6ea44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.19.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:e9:98:5f:d1:ac:56:68:be:ad:d5:d7:60:37:52:32:d9:ec:
8a:16:7e:46:aa:53:bd:90:b5:50:1f:33:94:3d:ae:c3:09:03:
f9:1b:03:5b:76:df:0d:8a:54:e1:c6:92:92:19:c9:eb:18:a2:
a4:9e:d7:e3:74:29:1d:c0:2e:bf:18:ff:22:8f:db:3c:a1:6d:
33:6d:5b:e0:d2:38:a6:af:15:76:cb:47:57:8c:8c:a2:d8:c6:
e6:91:35:59:52:d5:e0:47:a7:75:69:b8:a7:95:39:7c:47:f2:
c7:16:77:e1:70:c7:94:e3:00:ad:d1:2f:48:0c:91:aa:3b:bf:
b3:a7:d3:57:79:c9:81:ef:88:f9:a3:18:1c:6e:16:6c:3e:c5:
64:4d:fd:54:de:06:62:e8:25:39:52:12:10:96:4e:35:b6:d8:
c5:48:2d:28:88:89:85:4b:ba:df:90:aa:6a:c7:6f:16:48:c9:
f2:19:24:53:a7:d1:f9:f7:27:80:b3:2c:f9:d6:0f:a8:f1:ea:
0c:e2:61:9b:b0:58:65:54:ba:f0:eb:d4:76:2c:7b:a2:62:13:
61:bc:92:64:37:52:b9:e9:71:f8:80:00:6c:84:b4:f3:44:d3:
9f:89:15:86:08:ca:2a:59:d1:4b:60:02:50:3c:67:b0:e1:11:
e5:a8:ce:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:37:11 2025 by rpki-client