
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a90c852-9a33-3690-94fc-d837c371c753.roa
File: 2a90c852-9a33-3690-94fc-d837c371c753.roa (raw, json)
Hash identifier: 2TQ2w/gekY7F6aHmsGcXmbShE44Z4VluKumPW/MbfuA=
Subject key identifier: 90:FF:3C:86:1F:54:5A:29:AA:80:1A:F4:64:E4:A5:5F:DB:E8:0E:0D
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F498498D175FC4E27C32D8580
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a90c852-9a33-3690-94fc-d837c371c753.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 395973
IP address blocks: 104.134.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:84:98:d1:75:fc:4e:27:c3:2d:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=d64ec24d-9c7f-4b0d-ad8f-5eb4ae57948e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:26:dc:93:46:94:86:38:51:ea:19:7a:4b:
0a:28:4b:bc:79:f2:55:0e:bd:37:34:e4:35:9f:cd:
d5:27:45:8c:d9:7b:c5:31:a3:6c:a9:46:7a:9c:bc:
32:f6:88:56:5a:ac:d1:bb:ce:84:f1:09:f9:b9:bc:
9e:78:ab:cf:96:3e:f7:6f:30:d6:ee:c7:e7:a4:91:
ae:c1:62:61:1a:cd:f4:44:26:d3:66:7d:fb:6b:30:
ab:78:6d:0c:e0:f7:bd:cb:74:af:a5:c1:18:40:61:
bb:4c:cf:b8:58:16:c4:51:25:a5:07:b5:bf:d3:18:
ad:82:b1:74:7a:cf:c4:94:b0:9c:90:9f:e8:a7:ee:
0e:5d:21:03:33:01:02:54:8c:5b:3c:96:d5:6c:a6:
69:ef:54:da:5d:41:a0:62:a6:22:06:90:26:51:5d:
2b:b4:b4:b4:ad:a7:51:44:63:8b:cd:b6:a0:b7:cd:
ea:0f:11:4a:11:d2:4d:89:81:93:b0:c5:d4:0b:1d:
7f:eb:be:0d:67:ae:16:9a:4c:21:07:7f:d7:51:f5:
5d:0a:9b:7c:53:52:d7:76:07:73:1c:12:11:20:d9:
cc:70:52:6a:31:9e:38:60:57:6a:e7:64:0f:5e:30:
4f:18:dd:48:46:5c:2d:02:2d:10:32:c3:29:c5:5a:
eb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FF:3C:86:1F:54:5A:29:AA:80:1A:F4:64:E4:A5:5F:DB:E8:0E:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a90c852-9a33-3690-94fc-d837c371c753.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.180.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:42:53:37:bb:b2:a7:23:0c:fb:30:ba:ea:89:53:06:e8:ba:
99:75:49:e8:ce:20:92:bf:43:d3:92:a4:a3:d0:42:73:29:31:
d0:d6:a8:f0:41:30:92:e4:2e:71:1c:7f:c3:2e:f2:08:c5:2f:
ca:37:f3:70:ec:a6:29:31:d0:97:5d:79:64:ca:3d:14:cb:43:
de:e5:df:f4:a7:a8:05:73:92:72:ed:84:9a:cd:b3:76:7b:20:
45:96:ff:7b:c8:42:65:f5:45:0c:11:9e:ef:8f:47:da:6b:df:
45:48:3e:33:70:a3:cb:55:b5:ed:f4:18:73:fd:1b:b0:54:8b:
2c:1a:39:4e:85:93:fa:2b:28:f1:a9:7c:c4:36:ee:4f:f9:43:
d4:86:ba:e3:95:86:49:e7:a8:54:28:48:fa:3b:f6:65:2e:23:
e1:f1:1d:aa:cf:fe:c4:50:33:52:14:e2:bb:e7:fd:7f:13:f2:
7b:8f:46:a1:1c:5a:82:75:70:ed:e1:5c:82:ad:d3:f7:5f:c1:
a5:6c:e4:e8:6a:ec:8d:39:1a:1f:af:88:31:3c:71:08:2c:b7:
52:80:8b:c5:a1:2b:63:73:71:7c:1e:8b:75:7b:02:bf:eb:a3:
87:57:31:c6:34:7e:e5:22:2a:2e:e2:55:9a:ba:8e:34:0f:c0:
4c:73:33:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:44:01 2026 by rpki-client