
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9658de1-abe2-3472-8d8e-a80e77b50ad4.roa
File: c9658de1-abe2-3472-8d8e-a80e77b50ad4.roa (raw, json)
Hash identifier: 3oqJCEUV1KUo6Nrp37n/S+Dzcs1pesvTv2iyHPHzOZk=
Subject key identifier: A6:59:07:9B:8B:B6:5A:BB:A9:1A:1D:2C:F8:6C:61:58:96:9A:66:9F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BA667B4EB3A3A01FA42FAD530
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9658de1-abe2-3472-8d8e-a80e77b50ad4.roa
Signing time: Sun 26 Oct 2025 13:00:38 +0000
ROA not before: Sun 26 Oct 2025 13:00:38 +0000
ROA not after: Sat 24 Jan 2026 14:00:38 +0000
asID: 13335
IP address blocks: 104.18.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a6:67:b4:eb:3a:3a:01:fa:42:fa:d5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 26 13:00:38 2025 GMT
Not After : Jan 24 14:00:38 2026 GMT
Subject: CN=5ac54c76-33e1-4967-b242-cb3ed8596349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:89:27:d4:f0:b6:e8:97:48:86:00:86:88:
c1:53:02:cb:fe:25:be:31:87:c7:6e:58:1b:d1:a0:
c2:e6:c0:73:2a:16:b4:7f:0d:da:02:bb:cb:4d:e3:
00:de:fa:e4:b1:bf:48:bc:06:fd:ad:d5:8f:ee:a4:
60:bb:d8:7d:fa:68:a6:b0:1b:5a:d1:b6:6e:c1:04:
21:43:34:15:55:84:8a:5a:65:1a:6a:3c:15:c3:55:
0c:9b:2c:8b:a5:9a:b8:68:72:29:de:4b:39:3f:73:
e9:48:fb:ba:e6:30:f9:a9:4e:3a:6b:82:a8:2a:b7:
6b:bd:a8:5d:a6:74:40:3d:8a:c0:6c:93:49:96:53:
ef:19:23:e1:ba:69:49:9e:97:52:de:67:97:65:b4:
71:f2:00:ae:e9:16:8c:9c:41:02:31:30:92:0f:91:
d0:4b:56:49:4a:3c:f2:03:07:8b:83:73:13:a0:0a:
11:4e:95:5f:9a:6a:bd:96:4b:25:17:87:67:6f:1c:
72:40:89:0f:17:d0:af:6c:0f:08:93:62:9d:ce:95:
20:ab:1c:46:49:ed:35:be:81:bf:20:bf:2a:17:60:
90:bb:d1:d5:16:67:f1:a9:c5:78:fe:46:d9:fd:00:
5e:c2:c9:44:e6:a2:64:f1:17:22:3a:2e:1b:53:72:
85:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:59:07:9B:8B:B6:5A:BB:A9:1A:1D:2C:F8:6C:61:58:96:9A:66:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9658de1-abe2-3472-8d8e-a80e77b50ad4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.18.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:4a:63:37:ab:b1:28:51:fc:e3:38:ff:f6:e7:c0:31:9a:ba:
23:5b:41:d3:9b:13:a3:d5:38:35:d4:7f:7b:c9:a4:73:f1:60:
18:16:86:9e:c5:a9:93:cf:35:71:b5:6e:99:9c:7f:33:22:b6:
54:6c:bb:02:3e:eb:1d:c6:cf:a1:0e:47:09:48:c9:b1:63:fd:
e0:60:84:7d:de:e2:9a:49:ae:0d:4d:22:96:88:8f:60:a0:78:
0a:16:38:1c:dc:a8:1c:dc:42:3e:75:c6:ab:ea:75:0c:85:e7:
3f:8b:c8:05:0e:d8:a7:74:81:94:c5:11:b2:4f:41:ce:fa:1d:
6b:17:d5:7b:61:40:dd:d0:95:5a:0c:d8:85:5a:04:27:a7:2c:
99:f0:85:2b:4d:d3:f1:76:68:88:32:46:0f:08:16:4c:68:85:
c8:8e:5d:a3:37:13:d4:be:20:ed:45:66:1b:db:f1:c3:73:61:
a7:25:cf:6e:c3:0e:5c:20:10:49:c9:dc:1f:75:8f:34:54:d1:
6f:8a:c5:51:24:7c:56:37:42:13:a3:b3:64:f6:ca:6b:0f:1e:
14:90:00:3a:81:9c:a3:06:c4:4a:45:3d:f2:7e:47:72:1b:2c:
ad:0d:6b:11:12:fc:c6:dc:25:bc:60:c5:85:c2:71:db:65:d8:
a7:8d:48:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:30:39 2025 by rpki-client