
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cbad9e4-7cee-3578-be6e-49111dc320fa.roa
File: 3cbad9e4-7cee-3578-be6e-49111dc320fa.roa (raw, json)
Hash identifier: LgbLfuvfnaE0+kaKJS+qfEaaXyIU7buw2DgywYOVqo8=
Subject key identifier: 2D:5B:4D:4D:65:10:72:F2:6B:B6:6B:DB:EA:A4:00:87:16:A1:FE:4E
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D11727FCB106D445101EBE700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cbad9e4-7cee-3578-be6e-49111dc320fa.roa
Signing time: Thu 05 Mar 2026 14:00:40 +0000
ROA not before: Thu 05 Mar 2026 14:00:40 +0000
ROA not after: Wed 03 Jun 2026 13:00:40 +0000
asID: 41264
IP address blocks: 104.132.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:11:72:7f:cb:10:6d:44:51:01:eb:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 5 14:00:40 2026 GMT
Not After : Jun 3 13:00:40 2026 GMT
Subject: CN=54cbcf39-cc88-4c73-9690-981dfdfa05bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:06:f4:75:92:44:10:03:04:c3:9e:44:4b:
c7:fa:1a:05:77:f6:35:0d:e9:00:0d:44:c2:d7:ea:
2d:ed:d1:09:30:0e:a6:d9:81:35:f1:79:da:54:b2:
df:aa:58:77:95:7f:7c:f4:db:14:aa:ae:69:e5:9c:
2e:a2:6a:03:a3:79:15:22:26:82:cc:bc:94:d4:33:
c5:3c:37:0b:26:e4:82:a4:d4:e2:d5:71:64:29:f2:
97:6a:7f:09:2b:e8:8e:9d:f7:b1:fe:71:8e:0b:99:
fc:7b:a8:91:0b:2d:32:05:4d:f6:24:0a:21:48:50:
80:bb:ce:ac:21:12:5f:85:8c:0e:0e:ae:c2:d9:ad:
0a:a8:7e:eb:57:e5:6b:d0:52:31:e1:4b:90:ed:dd:
c4:5f:26:30:de:ed:e4:0a:4b:6a:97:88:6a:24:47:
b9:d6:23:40:9c:f9:fb:2f:9e:f8:57:2c:86:77:9d:
ed:3d:c1:56:b2:ea:31:c1:49:ae:5d:79:de:d7:3e:
00:2f:80:ea:14:74:01:a3:87:40:f7:1f:50:20:6e:
f4:c4:62:42:bf:8b:9c:4a:7d:28:8c:33:bd:54:09:
25:df:d4:dc:d8:41:8d:0b:9b:c6:16:b6:be:b5:a2:
7d:d7:1e:c5:34:65:33:b4:e7:06:b3:d0:69:21:ca:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5B:4D:4D:65:10:72:F2:6B:B6:6B:DB:EA:A4:00:87:16:A1:FE:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cbad9e4-7cee-3578-be6e-49111dc320fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:61:76:cd:a6:a8:f7:e5:60:24:64:27:0e:ad:de:14:26:a2:
6d:e6:9d:f9:c3:17:e9:e6:1b:2f:cf:20:6b:af:96:ce:2b:b7:
98:5f:c6:2b:00:00:49:fc:ce:43:cb:31:49:e3:34:49:94:49:
c0:24:19:50:68:84:b9:a4:d6:39:b4:79:51:29:95:75:ee:91:
c3:7b:b3:8e:99:27:5c:34:01:42:9f:b4:ac:ab:4c:69:f2:6b:
37:2e:37:6c:f6:d1:8d:8d:7d:91:f6:61:51:87:62:2f:75:7a:
b2:6d:9e:f9:b6:95:ff:9f:94:5b:a4:5f:e2:b0:1f:fc:12:76:
c5:5b:fb:48:e3:a1:10:c4:2d:94:d2:f5:4a:1d:0e:bf:5b:51:
93:45:ba:0b:c5:86:93:9a:a4:29:e8:ff:c4:9d:ec:b3:ac:f7:
8b:1c:c1:50:9f:ac:86:16:76:21:26:56:94:69:de:4a:b2:ac:
4e:b1:82:43:f2:87:6f:dc:ed:72:54:e1:3a:93:f0:e6:28:7f:
17:b5:38:1b:c9:8f:16:1b:94:74:43:89:10:1a:f1:95:79:70:
77:c4:d7:51:57:1b:d9:a1:39:9a:50:d4:61:59:c1:c2:6e:f3:
be:82:5a:f0:b8:0d:ce:3b:8d:90:40:0a:08:d0:18:66:e6:e3:
d3:6e:2a:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Rcn/LEG1EUQHr5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk
NTRjYmNmMzktY2M4OC00YzczLTk2OTAtOTgxZGZkZmEwNWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGQG9HWSRBADBMOeREvH+hoFd/Y1DekADUTC
1+ot7dEJMA6m2YE18XnaVLLfqlh3lX989NsUqq5p5ZwuomoDo3kVIiaCzLyU1DPF
PDcLJuSCpNTi1XFkKfKXan8JK+iOnfex/nGOC5n8e6iRCy0yBU32JAohSFCAu86s
IRJfhYwODq7C2a0KqH7rV+Vr0FIx4UuQ7d3EXyYw3u3kCktql4hqJEe51iNAnPn7
L574VyyGd53tPcFWsuoxwUmuXXne1z4AL4DqFHQBo4dA9x9QIG70xGJCv4ucSn0o
jDO9VAkl39Tc2EGNC5vGFra+taJ91x7FNGUztOcGs9BpIcozhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC1bTU1lEHLya7Zr2+qkAIcWof5OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2NiYWQ5ZTQtN2NlZS0z
NTc4LWJlNmUtNDkxMTFkYzMyMGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZhds2mqPflYCRkJw6t3hQmom3mnfnDF+nmGy/PIGuvls4rt5hfxisA
AEn8zkPLMUnjNEmUScAkGVBohLmk1jm0eVEplXXukcN7s46ZJ1w0AUKftKyrTGny
azcuN2z20Y2NfZH2YVGHYi91erJtnvm2lf+flFukX+KwH/wSdsVb+0jjoRDELZTS
9UodDr9bUZNFugvFhpOapCno/8Sd7LOs94scwVCfrIYWdiEmVpRp3kqyrE6xgkPy
h2/c7XJU4TqT8OYofxe1OBvJjxYblHRDiRAa8ZV5cHfE11FXG9mhOZpQ1GFZwcJu
876CWvC4Dc47jZBACgjQGGbm49NuKss=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:21 2026 by rpki-client