
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2aa84d8f-a7c9-3a4c-b307-bc242af58dcc.roa
File: 2aa84d8f-a7c9-3a4c-b307-bc242af58dcc.roa (raw, json)
Hash identifier: UMMuQd35UGcNVoJooWCA2ErXcC8m034PlNlxy06CFWI=
Subject key identifier: A0:6E:CE:8C:27:D8:B8:EB:02:02:2B:23:DC:94:3E:0D:92:FC:B9:50
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D143D8992F4E19936C95C1AE0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2aa84d8f-a7c9-3a4c-b307-bc242af58dcc.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 15169
IP address blocks: 104.134.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:89:92:f4:e1:99:36:c9:5c:1a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=29bb5383-3ddf-43f5-852d-8a56df385460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:37:63:ce:0a:37:8d:57:b9:f1:72:01:ff:e0:
82:65:a6:3c:8e:9a:1f:28:5e:f1:cd:df:ea:ad:f6:
ad:62:e8:24:d5:bf:84:cf:8b:ae:28:b9:ad:36:36:
48:e9:89:62:ce:3e:56:d8:e1:46:4b:a7:1c:9d:60:
35:1b:d4:1a:0f:f7:5c:c1:83:4b:08:97:b6:e1:56:
e5:60:ef:df:f3:b7:c4:b0:ba:a5:35:32:2a:b4:73:
27:6b:bc:57:68:0f:5c:b3:a6:01:95:1f:c5:5c:c4:
74:08:ea:35:95:52:fa:b4:a5:fa:5e:c6:e3:9c:89:
e0:8b:f4:5c:9d:4e:a5:98:3e:f7:bf:36:4f:14:ed:
77:96:22:88:43:af:01:4f:e0:69:ea:43:11:0d:89:
36:fe:0b:2e:1c:ad:8f:87:11:f2:09:3b:7c:73:59:
41:32:38:32:26:cc:b8:c9:20:c6:1c:a6:56:8c:e7:
dd:6b:ba:dd:a6:fa:25:e2:30:26:b9:4e:22:a3:ed:
aa:2a:e4:69:d5:e9:4b:c6:d3:8c:49:bd:5f:91:d2:
1a:83:fa:a1:13:e3:90:5c:62:e4:e4:e5:87:39:05:
73:98:07:1a:6b:07:31:c4:00:1d:10:88:2c:de:8d:
1c:9f:5b:bd:7d:5b:26:2f:a2:40:da:06:e8:02:f9:
bc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6E:CE:8C:27:D8:B8:EB:02:02:2B:23:DC:94:3E:0D:92:FC:B9:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2aa84d8f-a7c9-3a4c-b307-bc242af58dcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:84:f3:6c:97:76:7d:99:e8:17:5b:5e:3d:e0:35:48:c3:7d:
e3:08:16:46:a8:93:fa:05:1b:33:15:a2:c7:02:af:55:b5:4f:
ef:b0:45:cb:47:e2:8a:5f:d7:78:ab:1e:df:b5:f3:ce:1f:ee:
be:d1:8f:b2:f3:d6:65:5e:39:1f:dd:ea:40:34:68:fa:3b:8f:
6b:a1:d3:ba:5a:84:5c:c1:e7:76:19:41:f6:b3:6f:4f:2f:18:
10:2d:7c:35:a2:f3:ab:27:43:ee:26:90:01:f5:15:b6:3a:6e:
ca:05:0a:43:e5:69:39:91:21:6e:f8:50:38:bb:29:f1:b6:1e:
96:1c:5c:78:6f:09:4a:da:a4:e4:1f:ac:9f:56:0e:83:49:db:
54:1d:1c:2d:a2:69:cb:9e:7a:56:cb:d2:ac:9c:c3:ca:8d:0f:
02:8a:82:0b:6d:12:f3:3c:49:ad:1a:2d:95:c6:34:2e:73:18:
5e:06:b4:94:2e:25:d9:43:79:91:ea:8b:64:36:62:72:00:a6:
cf:84:d1:bd:b4:5b:e8:41:f3:b9:15:85:70:bf:98:15:f8:18:
b0:61:cf:60:00:d9:c0:74:ca:b9:2c:85:92:0a:a8:35:9d:cc:
5e:5d:87:64:fb:60:43:39:5a:20:f4:57:53:7d:ec:63:a9:49:
e1:ef:df:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:25 2026 by rpki-client