
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d37223d-5314-319b-9fe0-482a76573c2e.roa
File: 0d37223d-5314-319b-9fe0-482a76573c2e.roa (raw, json)
Hash identifier: dwceqrRdL+AEN0QZy6CV5MALIembnjGZnq67wGcJ860=
Subject key identifier: 3B:49:34:BC:82:4E:AB:EA:12:1D:3F:0A:1C:7B:CB:B4:AA:0B:A6:B4
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D143D92D2D9E160D0C340DE40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d37223d-5314-319b-9fe0-482a76573c2e.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 41264
IP address blocks: 104.133.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:92:d2:d9:e1:60:d0:c3:40:de:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=76956b0f-d51c-40f0-a3dd-22ad4470dea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9f:29:a7:44:89:3f:67:60:ba:9c:c6:a7:99:
0e:b1:dd:7d:f7:fe:5c:e9:ee:77:cb:e8:02:5e:11:
f6:5d:e5:f0:9a:d9:19:90:f4:ce:3a:7c:cc:3d:95:
01:01:1a:aa:72:29:99:70:ce:77:72:6a:fb:45:60:
af:8e:1c:4e:82:01:15:b4:e2:80:d4:6c:fa:c9:e7:
ac:12:73:d8:67:ee:b6:62:d0:2b:65:73:3b:7a:b4:
c1:46:73:d2:c8:a3:38:db:e8:ac:73:fc:10:ab:88:
46:3f:4b:d3:0f:06:be:26:e2:56:0f:ee:ac:ea:80:
aa:05:f0:06:aa:d8:b9:21:99:d9:68:12:b5:3c:aa:
08:fc:89:c4:f0:96:60:1a:83:64:d0:8f:5d:86:56:
16:c7:c6:93:1d:a5:24:81:96:11:4d:f7:0e:22:c2:
f5:36:13:9b:dd:dc:55:a9:f4:53:52:a9:82:2f:2a:
7b:fd:3f:f4:b4:bb:d6:75:b2:85:00:6e:3f:ed:46:
06:20:38:1e:e5:55:2f:b0:cf:ff:d5:8b:75:53:14:
1d:43:db:e4:9c:67:91:e9:1f:71:20:9e:06:bb:1f:
2a:27:b8:04:5e:19:c0:32:07:37:f0:e1:b8:c1:62:
a7:39:ff:e6:5e:59:07:98:64:0a:d9:f7:e2:55:00:
58:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:49:34:BC:82:4E:AB:EA:12:1D:3F:0A:1C:7B:CB:B4:AA:0B:A6:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d37223d-5314-319b-9fe0-482a76573c2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:4f:8d:39:42:99:93:b3:68:b6:30:d5:5d:98:f6:76:07:0a:
46:cc:1c:e7:4d:fc:75:f4:e6:b7:4f:c3:cc:06:c0:5d:76:f6:
19:e9:d9:08:20:0c:b9:68:41:b3:d4:3f:ae:e7:7a:6b:bc:e6:
f7:7e:57:62:c9:d4:39:71:31:b6:5c:e3:4d:aa:f6:c3:7b:90:
03:8e:c2:9d:d4:89:9b:b7:16:e0:fd:e4:74:4e:6b:80:01:f4:
64:7d:d0:11:5f:a9:45:30:3d:44:00:2e:dd:5c:e0:cf:d5:1d:
63:b2:46:73:0c:c7:b4:e8:00:1c:75:7d:0d:60:3f:02:d2:bd:
a9:77:07:bf:52:c6:17:19:87:f2:93:da:58:b8:80:6d:d6:77:
8d:de:53:dd:ab:ed:30:83:f6:b3:fe:c5:73:35:b3:d4:f8:b0:
20:5f:a7:34:52:fc:a0:7b:ed:a3:1d:4e:07:85:eb:12:7a:00:
de:d8:ac:81:6d:22:bc:26:42:b4:aa:eb:a5:ef:5d:49:60:52:
f2:7c:8a:5a:c2:8a:0c:c0:9d:06:78:ba:1f:90:35:55:c8:27:
41:50:5d:eb:0e:0d:f1:82:49:d0:5f:69:d3:12:72:cf:56:c0:
fb:9e:ee:f0:7e:0e:63:67:b2:1c:c8:7b:5e:7c:f5:73:f4:6c:
6e:21:75:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:36:36 2026 by rpki-client