
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5315ec0-8229-3da7-abbd-ab8cedf9ba5e.roa
File: d5315ec0-8229-3da7-abbd-ab8cedf9ba5e.roa (raw, json)
Hash identifier: N0sqAouil0sNYK+mews0Z3XDyPLr5i38sy8ecx3+fLM=
Subject key identifier: 68:40:61:F4:02:D6:7E:37:CC:3A:55:6E:14:0F:22:AF:A8:B3:B8:0D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584BA667C1BDB122B36110811380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5315ec0-8229-3da7-abbd-ab8cedf9ba5e.roa
Signing time: Sun 26 Oct 2025 13:00:38 +0000
ROA not before: Sun 26 Oct 2025 13:00:38 +0000
ROA not after: Sat 24 Jan 2026 14:00:38 +0000
asID: 13335
IP address blocks: 104.21.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a6:67:c1:bd:b1:22:b3:61:10:81:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 26 13:00:38 2025 GMT
Not After : Jan 24 14:00:38 2026 GMT
Subject: CN=cf932f59-0ac8-407c-96fe-ffaea74710fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ee:c5:3d:70:19:95:d0:b3:da:5e:22:28:25:
7c:ab:8b:cc:e3:9d:29:58:0f:18:df:65:89:44:fe:
23:a2:f0:1b:27:d3:0e:53:5b:9f:ca:1e:4e:86:d5:
b1:88:b8:ba:a9:43:9c:e7:5d:b5:e4:2c:d5:f1:30:
f4:03:81:e4:53:0c:4f:8c:08:2a:88:81:a1:cc:69:
31:e6:2e:52:38:c3:09:39:7c:76:c1:73:ec:4c:ea:
8b:41:f2:a1:0b:ed:29:f7:e2:42:9b:14:05:2d:97:
ae:4b:ab:6b:17:e2:22:dd:16:a7:44:e0:79:cd:d7:
f3:37:43:24:2d:33:35:60:2e:3b:5d:23:30:b0:7f:
03:39:33:e0:ea:81:4a:91:32:81:c8:38:75:87:48:
a5:d8:ca:44:0b:af:3b:e8:0f:93:94:b3:4e:83:dc:
b4:02:3f:e0:e6:7a:ac:90:b2:6d:5e:89:a4:f9:a9:
27:8b:c2:e9:f9:f7:0b:bb:34:07:41:30:d5:7b:73:
9c:67:60:fb:a7:0c:5a:0a:f6:f9:2c:a2:02:7d:d3:
08:d2:83:90:1e:c1:ef:2a:9e:19:19:1f:90:db:b4:
de:96:d8:86:1d:fd:c5:59:95:ba:7b:6b:41:2a:5e:
58:d8:f6:f4:9b:0d:d0:38:61:c3:38:ab:a3:d1:6f:
d0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:40:61:F4:02:D6:7E:37:CC:3A:55:6E:14:0F:22:AF:A8:B3:B8:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5315ec0-8229-3da7-abbd-ab8cedf9ba5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.21.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:83:8b:55:79:ef:71:2d:12:78:1b:d9:68:ed:12:39:e8:a4:
ed:50:22:f7:43:7c:2f:bf:f6:14:d5:64:53:8d:0e:5e:34:87:
f8:4a:f2:b6:b5:4e:d9:03:3e:54:1d:40:00:fd:03:68:52:6d:
87:3b:26:7d:7b:25:f3:2d:a4:91:11:c8:58:54:96:4d:d5:d6:
9f:7d:6e:8d:c6:db:eb:87:22:81:a4:24:2f:12:ab:32:a7:53:
9e:d3:85:e8:8a:d9:78:b9:ad:dd:0d:f7:e4:2e:8c:92:a7:aa:
bc:ba:f8:f5:c2:94:0b:aa:49:8f:f0:65:ad:85:f3:71:86:fe:
9b:a4:e1:2e:07:d8:3c:7b:f5:5b:ac:15:dd:53:d7:32:fc:93:
67:08:6e:ee:2c:86:82:4b:78:d9:3f:b6:1d:82:2b:f4:c3:eb:
78:7a:2e:3a:c2:1e:d2:5e:5b:b4:df:25:b1:52:c0:19:82:3a:
7e:72:c4:62:9d:2f:aa:23:c1:41:c6:7e:8b:9f:97:65:ac:6b:
d8:88:6c:74:34:0f:1b:41:3e:1e:4d:2b:9f:fd:0e:ef:95:30:
3c:18:a3:6d:4b:a5:ad:aa:38:1e:bb:68:b8:be:33:0e:7d:8a:
c5:16:1a:6c:fd:8f:35:a6:ac:bf:95:f7:52:5f:e6:79:9f:60:
29:96:11:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:36:27 2025 by rpki-client