
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/31cb2788-4474-3889-9f7f-b65f7a61f692.roa
File: 31cb2788-4474-3889-9f7f-b65f7a61f692.roa (raw, json)
Hash identifier: jos+KRvB2CsH9eNSwZHaH4TOISBQDdm869lHi/nfeqQ=
Subject key identifier: D6:9E:F2:92:1D:B8:5B:75:56:82:D8:60:31:27:F4:50:F7:A9:FB:FF
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D143D9FECDB26E96C5F997980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/31cb2788-4474-3889-9f7f-b65f7a61f692.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 41264
IP address blocks: 104.133.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:9f:ec:db:26:e9:6c:5f:99:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=7f724306-5cbc-454d-9b83-891f309f3f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8f:1b:85:66:f9:f0:bf:d0:e6:ee:f3:5c:12:
be:a2:f9:31:b1:cc:6a:9e:1e:4e:6e:05:2d:31:b8:
02:e7:5c:9f:36:0b:b6:85:f8:a1:ce:d7:47:e7:7c:
1b:b8:ee:f4:c4:2a:9a:4b:d6:8c:e2:6a:b4:02:6f:
77:60:d3:e4:3b:5d:a0:66:18:64:75:97:5b:1f:c3:
cd:9d:ea:7e:76:21:aa:26:a7:c2:98:d2:71:08:36:
c4:68:35:82:6c:d1:cf:a9:b8:9a:30:6b:33:dc:d1:
c3:c5:55:fc:c9:43:0e:70:85:2b:8a:03:40:10:70:
47:d1:b1:ca:53:2d:a0:b4:7b:b2:ed:83:ab:b4:fd:
f3:17:2e:54:6b:c0:92:4f:e7:29:b0:70:db:19:b4:
d3:a0:4e:7c:9f:d5:55:f7:94:e2:c4:05:99:c4:aa:
51:21:9d:3b:14:81:48:9b:06:fa:7f:7f:c4:54:27:
fc:4d:39:c0:87:4e:2f:91:03:b6:f2:96:3f:42:44:
9b:70:36:0c:01:09:31:83:66:94:e9:06:fa:10:4c:
5b:7b:8d:ca:fa:73:e1:23:63:92:87:b1:07:a7:09:
a6:cc:c3:21:7a:c8:01:6a:80:ba:fe:fa:cf:8e:64:
c0:fb:f3:20:2a:c8:04:4b:b0:79:26:18:6b:03:a3:
33:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9E:F2:92:1D:B8:5B:75:56:82:D8:60:31:27:F4:50:F7:A9:FB:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/31cb2788-4474-3889-9f7f-b65f7a61f692.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:1a:44:6a:9f:fc:81:60:56:5c:a1:d5:f2:cb:b9:06:f2:5c:
b3:24:bd:4a:d2:4b:87:d7:0d:42:be:0c:8a:b9:bc:70:40:cf:
2f:0f:e7:53:cf:fb:2c:bc:96:dd:26:4e:e7:82:3e:ec:8a:82:
cd:4d:7a:24:b5:50:94:b3:72:7e:17:b7:8f:ec:9a:bd:26:af:
b8:b8:ed:e9:53:1a:7e:8f:9e:20:48:1b:cc:fa:ed:08:c5:d6:
b6:4f:c0:4e:07:36:cf:ff:a3:99:ef:eb:36:e2:02:7f:ea:77:
05:06:27:5b:a5:76:91:1f:b6:74:aa:68:c3:e5:c5:80:d5:12:
fd:7f:d0:68:0e:ec:e7:8a:ba:4c:ad:6e:07:bb:b2:18:be:cb:
2d:f0:66:2d:c2:e2:2e:ba:51:43:14:8e:c9:5c:28:46:67:6b:
a5:03:77:3d:44:52:f6:59:cd:ce:31:70:47:28:04:e4:fc:55:
09:0c:ed:19:ea:c6:9a:e5:b2:e0:14:5e:ab:a9:9e:3d:26:96:
c6:ef:79:85:bd:65:e3:ae:e7:9c:77:6f:88:84:a0:de:08:6a:
7b:f1:48:4e:35:99:5b:d7:1e:65:b4:84:34:1a:c2:30:63:55:
ca:27:25:ed:1c:ea:61:ed:2c:69:9b:ea:50:3c:30:6c:84:3b:
54:16:8b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:43:33 2026 by rpki-client