
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65b8801e-6db7-32d0-872e-7b10ec685909.roa
File: 65b8801e-6db7-32d0-872e-7b10ec685909.roa (raw, json)
Hash identifier: QdeCCoHXREo5+NprkvNxSFgDjXzEs08cMI5U8LfpU+I=
Subject key identifier: A3:14:16:55:A8:AD:AC:EE:E0:EB:E7:C2:77:08:AC:07:BB:9D:FA:6D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EEA877D1D6A08F64C69659720
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65b8801e-6db7-32d0-872e-7b10ec685909.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 104.27.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:7d:1d:6a:08:f6:4c:69:65:97:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=e5ac68dc-7d75-4f35-abab-d57e620ec0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:0a:1f:79:24:ab:c4:67:ac:07:91:52:1a:
b1:e5:1a:c1:e6:f8:3a:13:6f:9e:14:33:6c:b9:e8:
23:19:dd:c4:3a:7d:e0:b4:f1:5c:0c:66:ab:d1:68:
0c:f1:c9:e2:af:38:04:fe:5e:58:6b:2e:91:89:67:
b7:ab:2e:48:71:30:d3:8b:be:da:ee:9b:93:7e:7d:
25:33:6e:49:20:8b:4b:86:4c:aa:10:2a:48:c2:54:
76:e5:45:f6:76:62:0e:49:59:e4:92:22:53:70:33:
31:f6:f8:da:3c:a0:4f:e8:3b:c9:2c:f7:97:87:fc:
c7:c5:21:c4:5a:b8:b4:06:4a:da:95:3e:6c:65:6e:
2f:a5:42:fc:2a:59:97:ee:98:57:cd:10:3c:05:15:
98:bb:b8:f3:d2:07:d5:86:c5:57:c5:7c:fb:94:8d:
15:a4:6b:f7:e2:98:8e:b8:e6:ef:40:5b:f1:06:e0:
6e:8c:eb:fa:c7:74:05:c0:b3:c7:06:e7:9b:d1:d0:
9f:b0:79:9e:c5:fb:83:32:91:5e:5c:b3:e8:6c:e0:
c2:6f:c5:27:6a:6c:1d:c1:82:6a:81:c2:c0:a3:29:
8d:74:14:5d:f9:95:06:8f:6c:b2:4f:d2:9b:29:5c:
99:b6:50:c1:08:2b:58:0d:64:6f:80:1d:0a:8d:33:
72:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:14:16:55:A8:AD:AC:EE:E0:EB:E7:C2:77:08:AC:07:BB:9D:FA:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65b8801e-6db7-32d0-872e-7b10ec685909.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.27.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:28:6a:95:80:75:c3:67:f0:1c:24:c0:d3:38:2d:74:42:ec:
27:de:a6:3f:8f:9c:e9:72:da:0a:10:e0:7a:9c:ea:f1:38:95:
db:97:43:43:75:b4:ae:25:b0:ca:21:c4:e3:c7:51:99:8b:b0:
fd:f5:75:03:f7:c9:e8:a5:d6:40:fb:79:e4:dd:69:c1:16:4b:
7a:48:0e:ff:91:d7:91:13:bd:85:bf:69:f1:d5:ad:07:3d:c9:
17:59:22:9a:24:7d:b4:8b:8c:96:9f:62:58:97:a5:06:5a:e3:
89:21:a2:fe:54:67:b8:c7:04:3e:57:16:0e:45:c2:60:e8:80:
cc:20:4f:90:3d:dc:6b:83:9c:d6:f5:95:b9:0a:7d:c4:86:8f:
b3:8d:4a:35:4f:23:1f:87:82:b4:f7:52:59:5d:1f:73:27:c9:
8d:7a:8d:ad:1f:70:2f:a2:6e:dd:49:54:1c:70:9c:27:7a:d1:
e9:47:e5:0b:4b:81:6b:dc:ec:96:75:8f:6d:2e:23:2c:a8:1e:
21:2d:c2:d5:4c:1b:64:9e:f0:24:c4:e1:ae:2f:f3:39:4a:39:
f1:1e:3f:60:0b:79:61:4b:1b:98:80:ed:d7:4b:cb:62:f5:bd:
47:a2:1e:53:42:3c:df:6b:f6:7a:6e:05:f0:87:0f:32:5a:19:
8f:e3:d1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:04:47 2026 by rpki-client