
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41a42974-c911-39db-a56f-b1d69a819cf5.roa
File: 41a42974-c911-39db-a56f-b1d69a819cf5.roa (raw, json)
Hash identifier: +7wjN0XY2UsYqcZe3f8Nccozq4yHaMgb5Krz+gCe0CA=
Subject key identifier: 23:DC:09:87:08:E0:11:54:C9:39:A5:DA:2B:9F:E2:75:86:A9:28:0E
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D143D8F4BB9BE7DEF0C116180
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41a42974-c911-39db-a56f-b1d69a819cf5.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 41264
IP address blocks: 104.133.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:8f:4b:b9:be:7d:ef:0c:11:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=92a8b734-a657-48c3-88f2-ca4622fa836e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:f7:be:0b:a1:78:1f:e1:07:2e:ad:c3:3e:
92:06:62:b3:8a:47:ae:09:d5:53:6c:48:89:85:81:
37:8a:b4:53:99:99:41:c8:6b:2d:b8:5e:5a:0f:79:
b7:2c:1f:f5:4b:3d:95:3d:af:40:0a:b4:af:24:e9:
d3:c7:5d:0b:eb:59:b2:be:b2:da:5d:3b:fd:a3:32:
2d:56:d6:8f:6c:21:f0:d9:b0:5c:f3:ca:a0:e5:99:
88:b7:a9:59:2a:31:15:6a:44:ca:89:2d:fe:da:32:
fb:0e:4a:3c:60:a1:d3:ff:d5:39:30:24:8c:ba:ba:
a4:07:0b:40:7d:75:bf:f2:59:00:f3:13:37:e3:4f:
5a:fa:0a:84:9e:19:ec:b4:da:cd:c7:f7:eb:63:56:
74:dd:f9:38:48:98:91:ac:3a:1f:18:91:25:35:82:
5d:9e:be:ef:ea:d1:3d:98:ef:28:d3:69:4b:87:6f:
c3:eb:b1:f7:68:27:e3:f1:1e:d9:41:e4:c7:4a:bb:
f8:1b:c4:28:a3:43:ed:35:66:de:bb:ad:a2:22:cf:
68:3f:f2:47:0f:74:cb:1e:78:47:e2:00:15:cf:78:
ce:24:c2:83:3d:00:60:fd:9b:e4:56:36:eb:46:b1:
4d:be:0d:44:97:b4:d6:2f:34:bd:bd:0e:1f:af:2e:
e6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DC:09:87:08:E0:11:54:C9:39:A5:DA:2B:9F:E2:75:86:A9:28:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41a42974-c911-39db-a56f-b1d69a819cf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:55:b7:f0:98:4e:a2:36:6c:5e:a1:7c:5b:02:3c:c2:93:50:
6b:45:a5:fa:a0:0c:bf:82:1c:45:a2:d9:26:55:c7:d7:8c:2f:
cf:93:39:ba:96:c1:e1:5a:68:b3:80:3e:0f:2c:fa:80:e6:10:
cd:19:eb:db:31:be:18:96:8f:38:76:c1:e6:f3:99:07:1f:4e:
7b:fc:a2:10:92:2a:5b:5a:aa:68:cc:29:37:a9:19:e0:17:04:
69:73:ee:86:1e:c2:af:a7:7d:af:1f:91:ef:30:91:c5:63:64:
fe:12:c0:cd:ae:1e:6f:22:02:86:57:e1:d1:3c:e5:8c:ab:65:
b8:f8:0a:1d:a5:55:d1:b0:77:72:a4:36:39:a4:d6:65:c5:46:
fc:74:57:5b:98:3b:14:a4:fa:88:03:7b:fa:83:29:e0:ce:fd:
63:a0:f0:76:3f:86:f0:05:ef:ed:be:34:91:1b:e5:df:ee:12:
3f:40:f0:34:c9:02:4c:3a:33:ff:d7:72:f5:b9:f1:e7:ea:fe:
fd:18:eb:98:3a:c5:4f:7b:07:c6:2e:2d:7b:b6:1b:74:50:05:
d3:f6:86:b5:e0:60:a9:d1:a2:bf:d4:df:22:95:7a:47:7b:23:
2b:96:a5:ef:88:bb:20:f7:55:72:c6:3a:b8:4f:88:26:fc:e6:
6c:8f:54:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:35:43 2026 by rpki-client