
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206c5536-aa76-365f-a694-4c5fed552099.roa
File: 206c5536-aa76-365f-a694-4c5fed552099.roa (raw, json)
Hash identifier: 3QDWKbXfc7FxfzFmy+Lo6Q1Oo7xjTur9aS6wm7KbKm4=
Subject key identifier: BD:D1:01:C8:75:43:7D:14:26:F4:10:C7:9F:E4:26:A7:1E:55:F2:95
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D1F4A7CF4619D16D9DD9FE100
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206c5536-aa76-365f-a694-4c5fed552099.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 15169
IP address blocks: 104.134.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:7c:f4:61:9d:16:d9:dd:9f:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=5cb1bfbe-6a21-406a-8399-d31d73764c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:55:cb:dd:57:05:71:ea:06:b3:66:b5:82:
6b:41:38:a3:ac:3c:db:fe:eb:ec:19:6b:4e:10:bb:
2c:1c:56:31:59:3e:10:23:ae:f7:68:e6:9a:6b:ff:
76:8d:71:57:f3:e4:e3:b5:db:fd:ff:f4:5c:2f:82:
ab:76:28:97:9d:ba:80:b1:9f:16:c1:1c:f6:38:00:
ec:0d:95:13:19:da:77:9f:79:e4:00:d2:be:72:a2:
53:71:a6:ca:a8:01:45:96:91:3c:a7:62:75:3d:ef:
fd:58:66:1b:18:ce:25:f3:0b:4b:e7:d1:1a:a0:81:
6a:f1:05:b2:ff:0b:a4:2b:f3:0a:2b:3a:37:29:f0:
10:9b:6d:d5:f9:fb:e9:cf:af:d5:b3:98:1f:01:3b:
8e:9d:48:ad:30:f1:dd:6a:62:0d:e6:d3:a0:75:b4:
37:42:10:bc:98:c2:3a:2d:d0:f9:43:35:99:03:2d:
26:d2:67:12:41:60:0a:f4:4d:ef:1a:fe:25:a1:ae:
e3:8a:1f:7a:3e:70:13:b1:d5:70:dc:61:52:7f:d4:
c4:90:9f:83:46:f3:05:b4:7c:c0:6c:17:0f:76:27:
eb:14:c8:e1:22:c1:58:43:da:46:ae:e3:46:13:7e:
7e:76:13:7a:cf:17:89:07:aa:b6:b6:0f:27:b6:b2:
3a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D1:01:C8:75:43:7D:14:26:F4:10:C7:9F:E4:26:A7:1E:55:F2:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206c5536-aa76-365f-a694-4c5fed552099.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:16:6a:31:b8:ac:fa:be:85:a0:29:21:bf:fc:48:66:8c:67:
00:53:70:1c:31:aa:20:1d:a1:bc:0e:87:17:86:13:4f:95:df:
88:4c:66:70:c9:cc:7f:50:f6:6a:e6:ae:31:b3:c8:2a:8b:a0:
d0:86:c4:bc:84:75:4e:2e:eb:30:9a:4c:4e:03:d8:d0:d0:2e:
c9:62:28:7b:26:9e:5a:87:45:55:7c:a1:8c:35:ac:9c:c2:94:
60:8a:84:af:9a:6a:99:b8:18:c5:66:eb:ca:d7:2c:00:0d:70:
c1:f7:4c:91:dc:6d:6d:25:f5:bb:86:e0:07:16:29:c4:de:82:
77:89:1d:9c:f9:dd:d4:ba:7a:1d:96:0c:d7:a8:dd:53:be:9c:
57:fc:eb:d7:60:ae:e5:4b:4d:b8:e0:d8:44:aa:55:b5:45:57:
7d:b8:e9:f5:98:9d:ff:60:44:c3:fe:1b:5e:fe:d7:45:65:db:
3d:f8:11:fa:7c:35:54:2a:92:3d:45:bd:dd:1b:9c:b8:7a:86:
76:dc:b7:49:09:0e:f7:89:05:1a:f7:5a:71:fe:b7:bc:ef:f9:
bb:a5:bc:07:79:7e:a9:11:9b:f7:98:98:92:7d:19:5d:b1:51:
12:d4:74:f4:88:fa:bb:52:f8:39:eb:ef:3e:4a:f9:b6:fc:e3:
bb:ee:ad:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:20:42 2026 by rpki-client