
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42053ed3-96a5-3abc-afe0-6a0d2616eac8.roa
File: 42053ed3-96a5-3abc-afe0-6a0d2616eac8.roa (raw, json)
Hash identifier: GZP1Bz8UC0ioUaenAzmccUzijUb4lWO3CV7iQfTYhME=
Subject key identifier: BE:A1:3F:53:13:9D:A5:21:F3:97:F4:28:F5:3F:CC:2D:B2:22:66:6A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EEA876ACCD0C68E7E78AA5A80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42053ed3-96a5-3abc-afe0-6a0d2616eac8.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 104.27.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:6a:cc:d0:c6:8e:7e:78:aa:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=05c6bac8-5b96-434c-abf1-603116cffc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:37:02:a6:02:85:65:0b:df:89:f8:3f:f7:65:
cf:12:7c:90:f2:0e:98:45:56:aa:e5:3e:8a:23:86:
2c:52:45:06:a7:2e:18:d3:6b:9d:6e:32:0e:83:b9:
29:90:07:3e:c1:6e:5c:4f:22:66:95:a5:b8:0e:ef:
79:9e:70:93:41:91:12:cd:c3:dc:1c:f2:7a:13:9d:
4c:08:43:b0:c5:85:e4:d4:20:0e:ea:ad:55:cf:42:
57:10:16:1f:2b:e9:0c:12:ca:7c:bc:51:80:f0:42:
50:37:0b:da:9b:1e:e6:c5:ec:fe:fb:2f:8c:a8:c4:
7e:d8:18:c5:27:05:6f:65:75:d3:c7:f7:53:57:4e:
22:8f:97:b5:e0:e0:96:47:ce:02:7c:16:49:75:71:
12:b8:09:8f:86:fd:b1:10:cd:2a:e2:ef:26:79:3e:
9d:83:90:d6:23:61:2f:a2:17:7c:dc:d7:39:a6:81:
df:d7:1c:42:7a:84:fc:bf:b3:85:28:e1:18:86:21:
39:69:b6:d0:83:d5:d8:cf:16:bb:9b:95:26:a6:6e:
cc:52:1d:b1:ff:ef:0d:25:98:be:5f:dc:cf:60:9f:
99:bb:73:34:02:39:b9:53:24:51:dc:3b:85:6c:0b:
7d:1a:8e:0e:1b:e2:ba:dc:c1:7a:6c:9b:b1:e8:63:
12:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A1:3F:53:13:9D:A5:21:F3:97:F4:28:F5:3F:CC:2D:B2:22:66:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42053ed3-96a5-3abc-afe0-6a0d2616eac8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.27.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:9e:67:e2:e9:95:e8:7a:f4:76:a5:71:5b:05:4a:7f:b0:3c:
f4:c1:25:16:ec:38:bc:bc:90:71:07:0c:c8:70:19:f8:2d:d0:
c3:c9:f8:55:27:34:1f:71:12:f7:85:9a:a3:d1:39:06:c4:3d:
b2:7f:e2:36:3f:61:a6:75:e5:ae:7e:14:e6:df:56:05:32:1f:
07:de:f4:50:0b:d7:4b:36:c2:28:0e:d5:05:4b:ca:ee:96:18:
59:6e:43:4b:e2:8d:79:5c:99:2f:15:66:64:84:a6:c9:80:d5:
7c:96:34:72:9b:7c:3b:4a:b3:26:b5:29:c4:2b:aa:ca:e3:66:
d9:90:33:00:06:f8:b6:06:e3:bf:7d:07:cf:3b:3b:2d:95:86:
52:84:51:54:e3:cd:74:91:cb:4c:50:54:18:78:ec:5c:fb:71:
d6:0b:30:a0:ec:52:c5:8b:fc:34:64:a4:5c:af:56:e8:c9:2d:
34:af:d8:5d:3c:89:3f:28:b1:4d:e5:f5:1b:20:28:f6:23:32:
e5:0c:1e:56:99:9b:60:95:b3:35:6c:21:85:43:d9:18:d0:a5:
d9:d0:6e:1f:1f:84:4d:a8:6c:eb:04:52:9d:20:7b:25:39:3a:
ac:3d:89:01:95:12:82:b9:5b:9b:28:6c:8e:63:12:68:fc:97:
01:75:cb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:58:16 2026 by rpki-client