
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42c12548-573e-318e-87a2-6e11bf3c9261.roa
File: 42c12548-573e-318e-87a2-6e11bf3c9261.roa (raw, json)
Hash identifier: NlunRr1C9Rxld4k7qinb0UnP2kPE6Iw76E/wnAqn9xs=
Subject key identifier: 7C:0A:26:A0:19:C1:AD:E3:9C:E2:09:C5:49:5E:5D:B8:91:18:5E:87
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D0EA7CD74277ABBA5165B6580
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42c12548-573e-318e-87a2-6e11bf3c9261.roa
Signing time: Wed 04 Mar 2026 14:00:41 +0000
ROA not before: Wed 04 Mar 2026 14:00:41 +0000
ROA not after: Tue 02 Jun 2026 13:00:41 +0000
asID: 41264
IP address blocks: 104.132.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0e:a7:cd:74:27:7a:bb:a5:16:5b:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 4 14:00:41 2026 GMT
Not After : Jun 2 13:00:41 2026 GMT
Subject: CN=a7182741-1798-4212-ac1d-33e0b18a556a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ed:23:0c:97:53:76:99:fe:8e:df:34:36:92:
1c:87:4b:fb:6a:99:8b:d5:d3:a7:30:5e:54:42:51:
13:0e:d5:46:75:0e:21:de:00:c9:86:6e:d2:a5:88:
46:bb:4f:50:7b:c0:d3:bb:8b:5f:ee:2c:77:e0:33:
73:d3:20:b8:8a:51:c2:46:5c:2b:5c:51:aa:6c:00:
bc:b9:af:61:fb:99:0f:bf:2a:7d:ef:1b:87:40:e3:
73:70:95:f0:cd:04:5c:62:a2:27:5c:a8:3b:83:27:
ab:ba:c1:d5:0a:32:14:cf:fc:9e:87:e0:17:de:3d:
8d:be:7d:03:78:37:cf:eb:f3:88:af:b1:fd:8b:38:
f3:b7:c6:d7:9d:ae:0b:ea:96:b5:d1:6d:26:fb:a9:
73:e2:fe:41:60:14:91:16:8a:4d:35:48:8f:70:2a:
4f:9f:cc:e9:1b:7b:b2:80:f3:17:8c:0e:a8:f2:24:
d6:a0:c9:1a:e6:1d:a1:e7:a2:7a:04:87:78:8f:ad:
ab:34:1c:14:d4:9b:6a:bd:c6:e9:26:55:38:11:7d:
cf:a6:3c:a5:7b:b1:51:1a:c5:1e:0d:99:60:be:19:
ac:66:f7:8f:8c:d6:ca:6c:75:61:00:15:d2:f1:f2:
87:9c:bb:bf:0e:af:ee:11:f2:0c:da:39:84:e8:11:
a0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0A:26:A0:19:C1:AD:E3:9C:E2:09:C5:49:5E:5D:B8:91:18:5E:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42c12548-573e-318e-87a2-6e11bf3c9261.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:c1:04:82:96:a9:a0:86:98:56:33:6d:33:9b:99:3d:85:bb:
ab:3e:af:61:ba:40:e4:00:4a:88:a6:f1:f2:17:43:15:f2:0f:
d5:f0:c1:c9:df:d7:35:82:52:a7:f8:06:90:4a:49:03:2f:59:
a5:15:5e:d9:09:0e:e3:14:60:dc:96:b6:cc:2e:56:9d:52:57:
6b:17:06:85:e8:2a:93:7a:2e:52:ac:b5:af:29:e5:91:d4:98:
2d:12:fd:cb:94:a9:50:69:f4:20:b4:b6:3c:63:13:4e:c1:66:
d9:b7:dd:12:fa:06:b2:f9:bb:2b:75:0a:36:8f:6d:7e:bf:98:
93:d9:ca:a4:86:53:0c:0d:b8:9d:04:10:5f:1d:22:c4:25:28:
73:97:0d:e1:4a:c2:93:8a:64:ff:e4:cc:01:c9:ff:ee:5b:a1:
33:53:89:04:db:39:25:e6:e0:9f:ea:e1:bd:db:b2:a5:87:d2:
4e:09:b2:a6:f7:cb:14:7e:85:41:50:9f:55:42:38:9d:b3:1a:
9a:ae:37:44:cb:de:ce:6e:67:48:d8:46:4d:c9:1e:e9:df:bf:
1f:cc:25:ee:77:20:33:48:c7:38:5e:e6:28:fb:29:3e:a2:6e:
86:7d:fe:e7:d9:75:ef:db:44:df:c2:e5:ba:1b:f3:58:31:49:
37:5e:f3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:27:02 2026 by rpki-client