
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35989c9a-d14e-3e3b-a4c8-7a591055ec2b.roa
File: 35989c9a-d14e-3e3b-a4c8-7a591055ec2b.roa (raw, json)
Hash identifier: gT37u9+JmtEc3tVNCINnGKxMegV62k7kZdXZWGAWy5U=
Subject key identifier: 26:BC:B0:6A:71:15:B4:7B:30:0E:DB:3B:48:6E:19:5C:7D:82:01:E7
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F497C81EE32F4FDABE66CA100
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35989c9a-d14e-3e3b-a4c8-7a591055ec2b.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 41264
IP address blocks: 104.133.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:81:ee:32:f4:fd:ab:e6:6c:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=e2089c3a-6e7c-496b-8aa6-de1167049e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:36:61:4a:f7:2d:b8:21:f1:e7:c2:a3:7a:05:
1b:f2:ce:a4:9b:d4:6e:6e:67:e6:d9:c4:6c:78:b4:
f8:5b:71:2a:64:da:aa:09:f0:89:6c:c1:16:f8:16:
17:60:61:fd:0d:fc:f9:9a:63:98:ab:7d:af:aa:cb:
df:5e:37:8f:ab:82:b9:e9:24:ef:a8:87:3f:bf:98:
ce:01:bb:46:8c:ba:8a:05:3a:d5:6b:12:2c:05:37:
07:89:8f:12:30:5b:94:9d:a4:f7:9d:14:7f:73:9c:
c8:db:a0:99:3a:fa:77:ef:85:23:1d:d6:13:c8:d7:
20:4f:e7:15:72:de:09:e7:33:86:58:62:03:d1:4c:
cf:44:f7:6f:3c:1d:04:9d:ef:c5:2e:aa:41:1b:5d:
3a:89:d6:12:c2:7a:fc:10:d4:82:45:69:ac:24:fa:
c0:da:57:91:cd:31:03:fc:88:27:9c:cb:aa:a0:62:
80:b2:1a:96:a8:84:07:6e:05:77:3b:cb:1b:ab:f3:
2b:c1:7b:58:33:24:ec:68:dc:85:ab:e3:e3:31:a3:
2b:e9:b2:76:10:32:9d:3b:c3:50:a1:f3:9d:88:59:
67:77:17:42:62:21:9d:f0:47:c9:2a:58:1e:66:00:
6d:62:ef:a1:01:76:37:5a:d5:21:d0:eb:3c:2e:67:
ca:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BC:B0:6A:71:15:B4:7B:30:0E:DB:3B:48:6E:19:5C:7D:82:01:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35989c9a-d14e-3e3b-a4c8-7a591055ec2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:92:74:80:0f:aa:f9:69:32:00:ae:32:32:cf:b9:f3:33:6c:
9a:36:20:a5:a8:9f:8f:c5:b0:11:05:3d:be:0d:7d:c6:80:b5:
41:c9:9f:e7:01:0b:cb:59:5d:a1:40:90:1e:20:90:76:b3:6d:
ef:13:1a:27:92:cf:76:fd:cf:7c:aa:13:da:59:ff:50:aa:87:
84:81:63:66:73:7f:d8:e2:c9:f4:e1:e5:80:ef:fd:b9:cf:a2:
9c:9c:fd:18:f0:b2:aa:da:38:b9:e8:fc:d4:7a:9b:de:4b:f3:
41:c9:5a:ee:b3:dd:cc:30:3a:ac:99:ec:96:78:75:1b:7e:45:
47:dd:0c:5a:c5:8a:31:98:5c:fd:fb:ac:c2:16:fe:5a:8f:87:
19:e6:72:93:52:81:6f:57:3f:b3:d5:4d:e5:e8:dd:9f:7a:f5:
b2:54:72:f8:6d:a3:04:59:22:88:61:40:66:10:37:65:b7:9e:
6f:31:bc:23:4d:5d:12:9f:b3:aa:45:51:69:f7:d2:c2:6c:39:
fd:01:87:f8:98:47:ae:a4:69:be:73:fc:c2:85:92:e7:2f:61:
11:d5:6d:92:14:e1:2c:0a:21:97:15:df:0b:3d:8c:03:b0:55:
b9:25:73:4c:a2:d6:7c:1e:06:cb:17:97:78:5a:54:a6:01:e4:
12:d2:c0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:02:58 2026 by rpki-client