
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fbb8f5c-34c3-3990-9cd8-289fd6259bfa.roa
File: 2fbb8f5c-34c3-3990-9cd8-289fd6259bfa.roa (raw, json)
Hash identifier: JKbq3SCbeIf+gWJakuUbBy0JZU1t7eHyEiXbwcNUS+w=
Subject key identifier: 40:2A:C7:A0:B0:6A:9D:37:C2:3C:14:E6:9E:AA:90:20:05:E3:B5:82
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F497CA773AFED76FD52B78110
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fbb8f5c-34c3-3990-9cd8-289fd6259bfa.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 15169
IP address blocks: 104.134.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:a7:73:af:ed:76:fd:52:b7:81:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b07b7a5b-2e67-4ad4-adc8-2004b32a9535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bc:d9:f7:cf:d5:a7:8b:69:8d:0f:a7:01:b1:
23:5d:98:c5:2d:86:f0:1a:92:8f:7b:55:41:ab:43:
27:8e:69:26:43:fb:e5:a4:64:cf:7e:3e:e4:2d:47:
8d:3f:14:b2:1a:01:e2:e7:52:1f:a8:a8:fc:a6:57:
9c:52:93:19:f5:8a:83:af:59:45:94:a8:04:78:2a:
b4:4e:e4:9a:ba:eb:f7:72:0f:18:c2:bc:ae:36:8b:
ae:44:f3:36:d8:3e:03:fb:3f:df:02:b7:3c:a6:dc:
73:9f:da:33:62:48:00:55:ef:92:2f:71:de:c4:29:
a3:a4:91:ff:8d:b2:ff:12:30:39:36:27:97:25:81:
b4:e5:32:f4:1e:22:84:d4:e9:ef:28:c1:01:f3:1f:
c7:5e:61:fd:30:55:19:f0:50:14:c1:76:1b:0b:ac:
c0:bd:98:bb:99:07:be:03:16:48:b7:ad:8d:91:6f:
d7:96:68:1c:73:1e:04:da:84:8b:fb:2c:86:70:16:
b9:72:7e:14:58:e9:8d:5b:d5:6f:55:e6:fc:91:97:
71:d2:e5:03:10:ba:7f:fe:f9:c0:82:8a:65:64:46:
5c:bf:bb:50:d9:54:d5:e1:ca:c7:9a:ed:d0:0a:50:
dd:25:79:e8:95:e5:05:17:fc:31:f0:77:66:13:65:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2A:C7:A0:B0:6A:9D:37:C2:3C:14:E6:9E:AA:90:20:05:E3:B5:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fbb8f5c-34c3-3990-9cd8-289fd6259bfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:80:96:a1:b4:e7:f3:23:f9:91:8d:b8:63:ad:a5:9a:7a:6d:
83:29:ed:be:8e:dc:14:04:9a:d3:84:52:91:c8:f6:ce:e8:af:
9f:50:85:25:4b:1b:4b:51:19:e7:2d:90:65:cc:75:b9:e9:df:
51:51:38:a3:cf:1e:5a:78:21:c1:dc:04:f4:ef:45:5f:08:29:
7d:05:b8:aa:00:73:76:47:f8:06:68:de:29:69:5f:7a:f4:28:
8d:59:99:a9:04:ba:31:c1:64:7e:1e:37:13:50:35:b6:b8:ca:
f1:20:07:96:84:da:e5:5d:d6:02:2e:ad:7f:8e:1a:e4:d1:3f:
45:d7:46:f0:5c:fa:d8:53:32:5c:91:cd:a5:4c:bd:44:ce:d3:
f2:8f:d8:fb:00:6a:ff:4d:d4:cd:ca:6b:1b:2b:98:10:1b:04:
ba:a4:47:a2:18:77:d3:dc:a1:02:e3:f2:fd:11:8c:dc:b0:36:
bb:ed:0c:59:75:df:92:71:c0:fc:9a:74:5f:b1:cb:5a:43:d3:
dd:fc:13:4b:91:1a:f3:cc:88:64:e4:ae:0a:46:76:2c:3f:b0:
fd:24:38:72:04:cd:71:a3:0c:0a:f4:6a:4a:1e:ae:88:33:c8:
d8:68:d2:76:fd:84:b0:ff:4d:17:7f:2f:7a:c4:52:d2:7e:b0:
1d:ba:00:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:51:37 2026 by rpki-client