
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/18e95c29-ac93-3569-b09c-ce4af4eb0bce.roa
File: 18e95c29-ac93-3569-b09c-ce4af4eb0bce.roa (raw, json)
Hash identifier: F/t8JH3ooAuZcjYZCpi1em9ECoUUftKRPPDMjFcg+jI=
Subject key identifier: 3F:CA:44:51:C6:F1:69:68:5E:0A:68:FA:84:61:C6:FE:44:61:C3:68
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D0EA7E93002887DF646ADE8C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/18e95c29-ac93-3569-b09c-ce4af4eb0bce.roa
Signing time: Wed 04 Mar 2026 14:00:41 +0000
ROA not before: Wed 04 Mar 2026 14:00:41 +0000
ROA not after: Tue 02 Jun 2026 13:00:41 +0000
asID: 41264
IP address blocks: 104.132.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0e:a7:e9:30:02:88:7d:f6:46:ad:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 4 14:00:41 2026 GMT
Not After : Jun 2 13:00:41 2026 GMT
Subject: CN=326116b1-6b54-4a2d-864d-ea92221cfbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:d6:e1:97:f2:f1:02:8d:72:16:88:7d:73:
47:7e:c9:38:c4:3b:a3:34:39:f4:b6:7c:63:a6:32:
a1:cf:3a:9c:c7:8a:97:c2:cf:29:41:fb:45:91:45:
16:08:00:c2:10:f5:85:7c:1e:5b:8a:1b:58:93:8c:
8f:05:93:40:61:61:c9:c8:61:f6:13:b5:b5:14:09:
04:0d:ab:00:d6:4e:13:d0:7b:75:a1:c9:7c:77:2f:
3e:9d:54:04:18:09:64:b1:b2:e6:3f:00:d0:76:9a:
a6:58:2d:b1:58:7d:e6:48:65:26:5e:d2:1c:10:ba:
77:f0:4b:9d:06:28:22:a7:75:0c:a4:52:3a:7a:f9:
c2:2c:52:9d:2f:ba:7d:3b:2b:3e:4d:69:94:4f:27:
c3:31:c6:bb:e7:67:67:e0:2a:f6:a1:4c:28:b3:91:
e9:b4:b9:a8:c7:9f:19:37:53:18:cb:17:bd:81:d0:
92:97:24:ce:e2:9a:70:21:d1:2e:45:10:0a:fc:2e:
f8:7f:8d:95:b1:71:3e:71:ca:d3:8d:fb:20:1b:ee:
bb:e6:92:86:8b:09:2c:da:28:c9:d2:54:d1:f0:79:
45:ae:0a:1f:93:08:d4:b1:c7:7c:b2:9f:72:cc:ae:
ea:d0:69:de:b6:36:98:bc:07:ac:bf:75:93:6f:13:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CA:44:51:C6:F1:69:68:5E:0A:68:FA:84:61:C6:FE:44:61:C3:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/18e95c29-ac93-3569-b09c-ce4af4eb0bce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:02:a2:d1:7e:d0:df:64:bc:91:fa:1e:4b:6d:e0:84:d5:1b:
90:30:fb:04:78:9e:97:69:b0:3b:53:db:35:32:22:be:dc:1c:
61:1f:19:19:08:df:4a:65:08:76:03:a9:67:6d:b9:63:28:5c:
da:50:5d:1c:83:ad:9f:77:5a:02:54:f1:1d:54:2c:55:e7:bc:
9f:c2:a9:53:97:70:5a:cb:53:c1:3c:ee:f7:5e:fb:e9:cf:43:
93:28:62:1f:c8:b8:cb:1f:dd:9b:e9:1b:70:54:ea:fb:ed:22:
f8:65:67:c8:9f:f1:f9:ef:0a:33:b6:11:31:a2:08:d8:3b:6b:
a7:2e:84:cc:d2:08:37:c9:9d:46:12:71:d1:84:8b:b9:01:2f:
6b:00:1a:55:b1:ca:f7:e9:1b:f1:b4:5b:73:fe:b8:58:52:31:
12:c8:89:ef:ef:53:5f:d9:0d:34:8b:2b:b9:17:9e:c0:ad:bc:
fc:12:97:65:28:32:0b:a7:36:14:89:c6:00:b4:1b:0b:ba:17:
03:8e:22:2f:5f:cf:a4:d1:15:b9:94:c5:c6:7b:aa:bf:b2:01:
fd:50:61:2b:4d:ee:4d:40:01:21:f5:2b:ca:7b:06:9e:68:14:
b2:a2:a1:5d:57:df:d4:63:41:cd:0c:b3:71:99:0a:48:75:05:
eb:39:ee:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:48 2026 by rpki-client