
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3396c50d-411b-3a1a-8cd0-f40dfdb53b7f.roa
File: 3396c50d-411b-3a1a-8cd0-f40dfdb53b7f.roa (raw, json)
Hash identifier: EaH5TUpFYGaefg9SPrx3HZWDxhfYUg3Wb1b954HrUto=
Subject key identifier: AF:31:46:CC:A4:CA:39:DC:F8:CF:E0:CF:B9:F8:08:63:8C:84:92:90
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D143D8DC1999F664DFB376E40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3396c50d-411b-3a1a-8cd0-f40dfdb53b7f.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 15169
IP address blocks: 104.134.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:8d:c1:99:9f:66:4d:fb:37:6e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=ceb40c60-e15b-45ff-85f7-03b5755187f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:ce:e7:20:9e:57:69:5e:e0:bd:06:ea:fc:
61:0b:a3:c8:f2:4c:a4:dc:f2:af:bf:df:b6:3f:50:
3b:79:25:21:ef:2d:e4:f3:84:13:c2:82:43:ab:37:
2d:6a:3e:48:77:7d:43:bd:e2:2f:19:01:ea:e2:ed:
ca:23:b7:4a:4c:28:01:ee:e6:b0:d7:5e:5f:48:54:
0a:7f:b4:3c:ff:49:7b:f2:60:5c:b3:33:bb:0a:f3:
fa:50:cf:8f:2c:e2:75:8c:ca:a7:e8:84:37:7c:f4:
64:07:db:88:53:45:b9:05:54:e8:97:e4:50:c8:50:
02:f3:66:54:da:63:63:57:07:73:1d:28:e1:de:f5:
b5:3c:2e:dd:e6:90:71:60:5e:c0:91:84:07:f7:75:
e4:98:24:12:40:25:59:25:86:01:c4:36:85:d1:e8:
e9:25:95:07:60:37:b5:21:d0:1b:df:52:82:46:d9:
63:68:2f:2a:44:71:c1:89:8e:ee:30:bf:a2:33:70:
a2:9c:9c:2a:cf:2f:8d:0b:b8:1b:cb:50:08:9f:9c:
4b:c4:6b:43:61:7f:ab:58:be:d3:5c:7d:eb:ce:51:
46:9b:84:85:5c:47:63:39:09:fb:80:51:0a:2e:29:
66:13:53:d8:9a:af:c5:ac:ed:5a:36:16:ba:e2:d9:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:31:46:CC:A4:CA:39:DC:F8:CF:E0:CF:B9:F8:08:63:8C:84:92:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3396c50d-411b-3a1a-8cd0-f40dfdb53b7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:e3:5a:11:9d:6e:9c:99:0f:36:8b:2a:4e:4d:7b:40:9d:e8:
a4:8b:11:9a:b6:6f:d1:1c:59:58:c7:9d:db:61:0c:14:de:ca:
fa:75:a5:93:1d:c9:7d:c9:03:e2:a6:50:cc:9a:a2:b0:aa:6c:
54:0b:89:63:9f:c3:9f:2f:a0:76:12:df:9c:a5:d4:d9:fb:30:
cf:a9:b9:c3:d6:84:3f:15:1a:7d:2c:54:0c:07:09:a2:5e:7f:
51:30:9c:98:b8:fb:23:ca:34:54:05:3d:d1:96:d8:ac:af:6b:
56:84:65:d0:45:e6:f5:d7:73:91:c8:b2:80:ab:0d:b2:fa:17:
13:05:9b:90:db:70:10:22:47:a0:81:c7:69:08:97:2b:e9:f9:
0b:d9:98:b1:3c:8b:f0:8b:09:c2:3e:8a:aa:34:49:b1:95:af:
49:9b:cb:d8:43:88:50:5c:ed:3b:ae:56:a1:10:9c:f9:86:1e:
e3:ab:c8:94:23:8b:64:b7:f3:da:59:9e:02:1e:92:58:59:17:
f5:80:25:16:51:b6:0d:38:2d:74:96:2f:9e:40:1a:5c:cf:6e:
16:ee:32:56:0f:02:1b:34:77:25:07:43:81:cd:e0:da:29:fe:
81:b8:a5:6a:d8:0f:77:84:dd:c9:c6:d5:9b:3a:17:c3:f1:d5:
6e:1a:2b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:08:34 2026 by rpki-client