
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d5b2e0a-0242-3601-a87a-843b34889ec3.roa
File: 3d5b2e0a-0242-3601-a87a-843b34889ec3.roa (raw, json)
Hash identifier: ELJK9ruX0AaqxhLPHuWs2bCmbdU0hyEPbIJ+wWDgVPI=
Subject key identifier: 90:41:09:22:81:CC:BA:94:14:94:55:34:52:C1:20:20:DC:1C:D4:68
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584EEA876AC0D7A6F45C8A951AAC
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d5b2e0a-0242-3601-a87a-843b34889ec3.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 13335
IP address blocks: 104.27.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:6a:c0:d7:a6:f4:5c:8a:95:1a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=d7913667-ae0f-441c-90ca-ec24bf20725c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:73:ba:dd:47:02:25:ca:b7:05:3b:2f:2d:83:
42:c0:10:7c:4f:99:14:e3:9f:ab:92:62:4a:31:96:
9f:e5:c2:41:dd:3a:77:1d:57:b0:ad:f4:46:c3:c8:
41:6f:0f:37:90:bb:fd:99:69:df:83:31:7b:b7:f9:
31:48:01:72:0c:7b:80:63:0f:9d:0b:b2:8d:6a:cb:
43:2f:1f:3f:f6:d2:fa:7b:94:ac:ae:3e:4b:dd:e6:
8b:e3:d2:93:5b:5b:5b:7a:59:9b:be:57:31:67:73:
13:1c:73:47:8e:6c:51:51:e7:33:9f:34:4b:d4:a0:
f0:b3:1d:98:d6:bf:8b:76:55:75:31:43:90:c5:a8:
ef:73:ec:90:ab:64:35:36:51:8c:29:49:42:61:6b:
03:c9:b4:64:7d:d5:a5:cc:fe:b3:82:c3:17:e2:3c:
9e:fb:16:83:35:f9:c2:16:fa:07:56:f8:44:6f:7b:
82:2d:f1:a4:c0:15:a2:9e:98:3d:52:e4:7f:7b:de:
0d:f0:42:12:d8:72:1c:84:a7:cf:45:5a:21:cf:dd:
76:7c:98:06:d6:09:fe:ed:d0:1b:bf:ca:40:01:49:
99:01:3e:13:39:41:2e:c2:33:e2:52:9d:90:b2:e1:
37:3d:97:28:b3:fb:a4:df:90:62:65:39:c1:4c:67:
1b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:41:09:22:81:CC:BA:94:14:94:55:34:52:C1:20:20:DC:1C:D4:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d5b2e0a-0242-3601-a87a-843b34889ec3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.27.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:27:8c:27:cb:97:f4:5e:c9:fe:65:e3:2f:70:13:6f:4b:d5:
ae:54:d3:40:a0:49:63:99:b8:0d:a1:f8:4a:f7:28:75:25:c4:
f1:f8:47:d1:76:74:8b:49:2b:6e:12:69:d9:42:c7:68:f3:58:
d2:f0:26:e8:be:83:a3:83:2b:5f:47:ab:0e:0b:a8:74:e0:a7:
51:65:f6:96:57:1a:b7:5a:92:05:bb:2f:97:cb:7f:04:e9:94:
af:69:0d:4f:8d:4c:76:90:e8:66:74:94:70:b4:ab:91:4d:26:
2d:74:25:1d:bd:df:a0:3a:04:2a:12:8e:b6:16:a1:34:eb:29:
43:cd:e6:4e:3a:99:41:21:f9:82:59:ed:41:cc:46:56:47:9f:
68:66:4b:21:bb:b4:5a:dc:02:a0:ba:8b:42:97:f8:c9:69:4e:
1a:d8:d9:44:de:bf:75:07:62:6f:7d:6d:89:ae:b6:0e:e2:86:
a3:ce:43:a0:9a:9a:ab:60:1e:65:a0:87:27:d7:6f:44:b2:1e:
23:fc:ae:bc:84:e1:d5:5e:a2:21:15:25:72:d2:d0:4f:e0:a8:
14:40:cb:eb:b1:b8:d1:d7:f7:4d:81:8d:38:d8:b6:82:28:de:
36:d8:ac:91:0a:e6:51:8d:19:eb:9a:09:16:7b:a0:a0:ea:a4:
8e:1f:2b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:16:56 2026 by rpki-client