
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2252507a-7163-3c83-9df1-074354ab6134.roa
File: 2252507a-7163-3c83-9df1-074354ab6134.roa (raw, json)
Hash identifier: LwUpAT5J+fYpKNH4BeR5/9Ynwr1pqkuBlRwv0xVxpTI=
Subject key identifier: E6:11:8F:B9:D7:F1:62:FB:C0:0D:70:4C:B5:2B:F1:67:E7:A6:C7:DE
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D1F4A7BA108D60AFD8070BBC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2252507a-7163-3c83-9df1-074354ab6134.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 15169
IP address blocks: 104.134.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:7b:a1:08:d6:0a:fd:80:70:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=9bb46fe0-b20f-4354-b2b8-b3afd0f95090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:8b:ee:88:05:41:3c:61:a8:c4:eb:e9:c5:
82:35:71:7e:70:25:75:cd:f0:79:08:84:34:e8:10:
f6:66:d6:db:dc:db:4f:70:b8:49:10:96:4c:42:c8:
e2:42:68:75:1f:1e:bd:53:c0:79:b2:ab:bf:c8:05:
5b:97:02:36:3e:84:cc:d4:a8:14:ca:81:27:3a:b1:
22:da:bc:33:b0:40:a5:2e:60:50:b0:5d:13:70:b5:
96:fd:0b:fb:6a:4d:c2:9a:42:72:86:a3:07:b7:1a:
51:d0:ad:32:ab:7e:1e:7c:38:ef:35:ec:42:06:92:
a8:c0:fc:e8:10:d9:f3:52:e3:13:60:ee:b4:07:36:
df:e0:02:d1:3b:4a:8f:50:2f:af:73:e9:b2:5a:7e:
49:3e:5c:d8:1b:57:1f:5c:99:24:5a:d3:d1:7b:7e:
bf:94:75:e8:71:1b:fd:ec:ef:bf:33:97:91:48:18:
71:0d:74:8b:a4:fc:67:96:d4:ca:bb:ce:a6:96:8e:
fa:ed:b7:5f:ee:e4:ff:7a:25:45:94:be:a8:df:c3:
3f:1e:aa:ed:8a:b5:5a:3c:cd:65:29:9b:63:8e:3e:
9a:d0:8e:35:07:35:86:86:dc:4f:35:20:a6:15:63:
c7:6e:d6:18:05:08:76:5a:2a:f4:13:61:72:c3:af:
f3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:11:8F:B9:D7:F1:62:FB:C0:0D:70:4C:B5:2B:F1:67:E7:A6:C7:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2252507a-7163-3c83-9df1-074354ab6134.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:fa:08:f3:24:4e:35:e3:cb:41:b6:de:a5:d2:74:c9:1b:4e:
c8:91:7d:28:9b:26:1c:98:ff:58:9b:4a:22:e3:81:07:34:0b:
09:46:94:a1:06:ff:68:ff:a2:8e:58:a5:f6:a6:fa:d2:0b:08:
8a:93:b5:ba:1c:76:03:c8:ab:b6:63:83:4a:6b:bd:25:34:6a:
8f:b9:72:46:a9:83:d2:38:b5:dc:d4:36:1a:79:00:e1:65:b2:
32:8b:10:53:ac:f0:04:7a:ef:56:bc:80:9e:a1:11:d5:cd:00:
ef:55:61:c2:33:6d:c5:27:6e:bc:c8:6e:d9:f3:e7:30:1e:c4:
a2:35:b4:20:42:18:70:94:97:ee:65:71:23:d2:0b:53:27:94:
84:c4:6f:a8:b1:35:a5:cc:96:ee:04:50:19:ca:dc:a2:3c:da:
b0:e9:ac:d0:0b:71:34:a8:ad:48:ef:bf:fe:e1:7f:16:7f:ea:
14:a2:6d:a2:37:2d:1a:af:5e:42:61:c0:17:20:ad:a8:f3:86:
79:e5:5c:bc:34:03:09:3c:c0:3f:b4:82:29:b1:30:9c:c7:3b:
d0:fd:59:b2:e7:34:f8:16:30:42:b4:99:e5:83:bc:90:08:a7:
e7:6f:8f:ea:32:5f:45:1e:e4:af:43:65:c5:11:18:d9:a5:98:
66:e6:13:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:25:56 2026 by rpki-client