
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a54e9e6-ca31-331d-a452-eb5ecd727c0c.roa
File: 1a54e9e6-ca31-331d-a452-eb5ecd727c0c.roa (raw, json)
Hash identifier: pWkQRBIPdH5BXF6AhKpcdrIhx46PGpUK2sKP1kfw6+s=
Subject key identifier: 59:04:B3:67:76:D3:3F:14:8F:73:45:C1:B0:3C:8D:E6:5B:70:48:24
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F497C6DC19FFAB6DB2224F780
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a54e9e6-ca31-331d-a452-eb5ecd727c0c.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 41264
IP address blocks: 104.133.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:6d:c1:9f:fa:b6:db:22:24:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=7d3b5cd1-7a15-4e70-9e38-9a36abb6963e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:54:58:9b:6f:6b:22:82:67:af:8d:a0:bd:d3:
04:b6:75:26:58:cc:74:eb:fc:62:5f:68:d8:b8:ca:
22:cb:71:ec:91:35:04:cf:5f:bb:a1:60:fb:9a:83:
79:16:ec:45:16:99:d9:16:27:c0:f4:00:18:14:86:
a3:ab:51:7c:69:63:a5:6d:68:86:25:42:15:b3:72:
3d:13:8c:1c:52:00:1d:f0:2f:e0:66:14:3a:df:ed:
50:91:1e:b3:12:9c:d3:17:10:af:f6:01:13:d4:4e:
64:4c:c0:4a:f0:66:41:dc:e1:d2:a9:0b:53:cb:36:
f2:7a:8b:28:54:7c:af:06:c7:94:ee:1d:a4:7a:64:
95:9a:3a:17:81:b6:01:17:92:9f:c4:d0:19:17:6b:
77:b6:23:2f:20:73:96:8e:fe:fd:40:a9:a3:86:9f:
ba:21:c2:48:77:e6:35:7a:04:01:52:be:d2:42:00:
a2:35:26:80:60:6a:b1:e0:d6:fc:84:ba:93:e2:4a:
7c:2c:35:8a:df:fc:91:e7:80:e6:fa:2a:b1:76:dc:
7d:0e:d8:4c:ad:70:e6:aa:29:03:ad:01:14:35:d4:
4e:2a:cd:87:a3:cc:4a:75:b2:76:82:be:52:ad:49:
d4:5c:7c:07:2c:77:60:c9:bf:69:67:de:b0:d9:85:
cd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:04:B3:67:76:D3:3F:14:8F:73:45:C1:B0:3C:8D:E6:5B:70:48:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a54e9e6-ca31-331d-a452-eb5ecd727c0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:c2:6b:00:1d:de:92:29:68:7e:56:fe:b2:d8:11:8b:4a:40:
8a:57:c2:8a:c9:3c:a7:66:9a:70:0a:99:d7:f3:85:29:10:d5:
3c:c8:4b:88:2d:46:71:a5:a7:f8:26:64:f0:8d:08:1d:5a:f7:
fc:31:72:fc:ab:11:49:64:eb:e7:ff:8e:30:10:d0:dd:88:08:
68:67:f2:75:06:d3:c5:87:78:e6:21:36:4a:ed:d6:bb:34:3b:
53:58:4f:f9:31:0c:17:47:6f:72:92:e3:a9:bd:15:d0:8c:76:
cf:87:a0:e5:74:b5:ff:f3:49:4c:89:44:c9:7e:9d:dd:76:22:
cc:d9:09:a8:4b:ab:22:12:46:2f:b8:ab:f7:75:52:ff:68:56:
d2:24:cc:7d:72:ef:e4:8d:d3:bf:98:86:d3:70:fa:ce:1d:85:
92:27:a2:67:0d:80:1e:d9:0e:a6:2a:18:64:51:f2:09:0d:22:
97:a2:1f:81:71:96:69:aa:9b:ef:1b:5d:76:24:b4:71:d8:d9:
9d:68:1f:ab:63:3b:7a:4d:ac:82:90:26:ea:76:46:31:dd:9a:
80:3e:ae:c1:91:c4:a8:84:da:8e:98:2f:eb:e3:4d:80:72:92:
b9:f7:26:99:fb:1b:1e:52:9d:f9:c3:b9:b0:03:7d:5b:0b:89:
4c:da:bc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:53:32 2026 by rpki-client