
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3d8d8cb8-6dc9-3be4-9a54-a5ba85a4cf87.roa
File: 3d8d8cb8-6dc9-3be4-9a54-a5ba85a4cf87.roa (raw, json)
Hash identifier: 7UzfuvAVH9Pm0OWszHpSbp9amY9Pl4GJTcvGwi9f20A=
Subject key identifier: 3F:8B:45:11:84:92:F0:23:05:CF:89:34:F3:5C:62:73:F7:F4:ED:22
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D1F4A7E2C9E80AAF0E23DF3F0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3d8d8cb8-6dc9-3be4-9a54-a5ba85a4cf87.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 15169
IP address blocks: 104.134.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:7e:2c:9e:80:aa:f0:e2:3d:f3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=29e69df1-d3c4-421b-a78c-5b2f819f16af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:27:d0:1b:18:a7:e4:e4:0a:2a:c2:97:6b:b0:
58:33:2a:71:22:04:4e:62:db:9f:5b:5a:b1:85:cf:
06:97:a3:c9:33:8a:4b:9d:31:77:2e:3b:2a:4d:a4:
8a:aa:e5:0b:2c:06:50:98:bd:e0:c8:16:76:77:67:
01:d9:b8:18:5f:c6:8b:ca:42:2b:db:90:50:aa:7f:
4b:ac:95:17:4f:c4:b4:54:0c:f9:cf:20:6e:82:5b:
27:35:49:6b:4f:80:03:77:14:57:53:69:5b:46:5a:
b7:b2:c1:39:6d:a4:6d:e7:2c:84:78:c5:09:72:84:
de:23:25:72:fb:45:f3:8f:a1:26:a4:78:d3:e7:cb:
3c:af:2d:84:a4:a9:37:cc:93:0e:96:9b:f0:64:eb:
e7:28:88:c3:be:25:3e:2b:b8:5f:79:0b:70:25:b4:
3f:5d:0b:28:21:1e:f2:c0:5b:0c:81:84:1f:59:16:
66:65:a6:65:da:80:ec:8a:f5:bd:84:0a:d8:9f:97:
9c:bc:00:c6:86:30:7c:13:88:b2:d0:73:f8:7f:9b:
e1:83:53:ad:55:1f:5e:73:3b:bb:b4:a0:6b:4f:b5:
92:1b:77:66:4a:5d:8e:ee:6e:77:7e:99:b2:71:c9:
b1:5d:30:c0:6d:c2:c8:65:42:83:76:7f:f4:52:67:
c2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8B:45:11:84:92:F0:23:05:CF:89:34:F3:5C:62:73:F7:F4:ED:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3d8d8cb8-6dc9-3be4-9a54-a5ba85a4cf87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:b8:90:97:74:0d:e7:1f:38:80:a4:91:f3:e1:ad:1c:53:60:
0f:46:80:18:46:b5:78:ef:21:6d:67:9a:1e:13:06:43:ea:47:
e9:3f:b2:d4:28:8e:ac:83:e6:79:1b:9d:c6:fa:6d:2d:e7:2c:
2b:cc:41:cd:c7:4a:b8:d7:b3:b7:c4:6f:50:6d:67:fe:60:ce:
64:ff:87:5a:bd:b7:8a:d0:65:aa:cc:5c:9c:2a:7d:ff:63:cf:
17:6f:69:b8:73:57:83:d2:96:35:85:e0:0c:40:95:08:7c:8b:
83:61:5b:73:55:dd:68:29:8b:bf:3d:ea:3f:0c:92:22:50:f6:
14:00:8c:e5:66:c7:c2:f8:ab:d6:58:d8:ee:f6:2c:e5:f2:9e:
d2:ed:3c:3c:b2:16:21:ed:56:6d:d1:ff:ed:9f:0c:f2:90:7c:
b3:92:05:6f:16:17:b3:30:78:58:da:46:a7:df:12:46:e1:27:
4f:ab:76:4d:07:8b:83:93:2d:8a:3b:ac:e3:0f:17:b8:3d:04:
64:2e:d6:94:8b:b3:d0:1e:cb:c7:e9:c7:83:e4:9b:5b:d7:07:
d0:62:2e:40:7c:38:8e:36:bd:59:4f:68:a9:2c:44:8c:b0:a9:
89:9a:15:97:bb:8a:2d:c9:43:72:03:bc:79:2a:9e:00:a9:35:
aa:87:f9:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSn4snoCq8OI98/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
MjllNjlkZjEtZDNjNC00MjFiLWE3OGMtNWIyZjgxOWYxNmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ifQGxin5OQKKsKXa7BYMypxIgROYtufW1qx
hc8Gl6PJM4pLnTF3LjsqTaSKquULLAZQmL3gyBZ2d2cB2bgYX8aLykIr25BQqn9L
rJUXT8S0VAz5zyBuglsnNUlrT4ADdxRXU2lbRlq3ssE5baRt5yyEeMUJcoTeIyVy
+0Xzj6EmpHjT58s8ry2EpKk3zJMOlpvwZOvnKIjDviU+K7hfeQtwJbQ/XQsoIR7y
wFsMgYQfWRZmZaZl2oDsivW9hArYn5ecvADGhjB8E4iy0HP4f5vhg1OtVR9eczu7
tKBrT7WSG3dmSl2O7m53fpmyccmxXTDAbcLIZUKDdn/0UmfCswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD+LRRGEkvAjBc+JNPNcYnP39O0iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2Q4ZDhjYjgtNmRjOS0z
YmU0LTlhNTQtYTViYTg1YTRjZjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIbuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALG4kJd0DecfOICkkfPhrRxTYA9GgBhGtXjvIW1nmh4TBkPqR+k/stQo
jqyD5nkbncb6bS3nLCvMQc3HSrjXs7fEb1BtZ/5gzmT/h1q9t4rQZarMXJwqff9j
zxdvabhzV4PSljWF4AxAlQh8i4NhW3NV3Wgpi7896j8MkiJQ9hQAjOVmx8L4q9ZY
2O72LOXyntLtPDyyFiHtVm3R/+2fDPKQfLOSBW8WF7MweFjaRqffEkbhJ0+rdk0H
i4OTLYo7rOMPF7g9BGQu1pSLs9Aey8fpx4Pkm1vXB9BiLkB8OI42vVlPaKksRIyw
qYmaFZe7ii3JQ3IDvHkqngCpNaqH+Vc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:45 2026 by rpki-client