
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42de54a4-cf3e-372e-aea0-e2fee530fd57.roa
File: 42de54a4-cf3e-372e-aea0-e2fee530fd57.roa (raw, json)
Hash identifier: lIgU918mwJleGuLeaTSoolGjpVA5ATABIxRmZj9GJwY=
Subject key identifier: 9F:A1:D5:B3:4A:FC:B7:60:6C:D2:F6:6B:E8:63:48:72:D6:73:4C:74
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F497C7CB33AE591114628E200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42de54a4-cf3e-372e-aea0-e2fee530fd57.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 41264
IP address blocks: 104.133.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:7c:b3:3a:e5:91:11:46:28:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=6acab68f-3717-4b82-b387-56ca3022bbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6d:0c:37:a5:bc:8b:8b:27:0d:48:14:cd:76:
18:68:ca:16:ad:b7:4b:38:98:57:82:4e:19:4c:45:
f0:8b:34:09:f1:6e:6e:04:ff:e7:72:67:e3:dc:90:
b9:90:63:a9:c6:8b:3b:aa:47:ac:d8:ca:b4:99:e5:
5f:df:be:5b:9c:00:b7:0a:ca:45:20:78:5a:54:d8:
67:ce:81:35:0e:96:d3:b4:29:4a:ee:22:70:b2:5d:
1c:10:28:86:a2:1e:35:d2:d8:82:dd:8b:26:2d:fd:
13:c9:b1:ae:5c:09:88:bc:e1:95:03:be:5f:a4:85:
a4:0f:bc:62:ed:67:5c:15:7d:f8:5b:63:26:b5:ce:
46:df:d6:9e:0b:32:33:29:6d:c3:7a:06:72:45:3e:
b9:16:d3:0b:ec:df:c4:64:05:29:6d:bb:8a:69:d6:
03:58:be:bd:94:ec:03:17:1f:92:7f:a9:55:a3:14:
0b:c8:e8:be:65:5c:7c:10:2e:1d:0f:f0:bb:66:b2:
00:02:ec:ed:43:31:10:72:96:99:9f:02:ec:1c:dd:
3d:ae:59:6e:3e:ac:c4:37:13:e9:10:6a:2c:f4:0f:
f2:f0:b9:24:9e:79:76:c7:b9:5f:64:a7:40:c6:94:
e1:7f:f1:b2:36:85:47:85:37:06:6f:c7:b0:81:b9:
2d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A1:D5:B3:4A:FC:B7:60:6C:D2:F6:6B:E8:63:48:72:D6:73:4C:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42de54a4-cf3e-372e-aea0-e2fee530fd57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:b7:82:a0:6c:a4:e8:15:0e:72:46:87:0e:d8:b1:ca:e9:4d:
f2:70:2f:07:d2:b0:0d:3f:bb:ba:11:6a:3f:aa:4a:86:2a:be:
a8:8e:31:c5:0e:85:77:05:a9:51:cf:62:96:6f:98:28:93:85:
38:ef:be:91:4e:2a:6d:80:ae:11:3f:85:9f:73:cb:57:cb:6b:
c0:98:72:19:6a:24:95:7a:9e:36:e0:e6:0b:57:d8:0a:dd:75:
5d:38:3d:83:39:35:b7:73:16:26:94:3e:94:7b:85:59:48:a1:
04:86:c0:3c:f2:a0:bd:37:e8:21:a5:0f:e1:73:33:65:59:5e:
ce:5a:68:a2:da:ce:48:66:60:c1:e1:31:c5:4f:ff:92:b3:fc:
25:3f:75:30:81:b1:18:0d:21:32:6d:18:c9:a5:39:54:55:43:
0f:b9:0d:a5:8e:34:3b:d1:19:89:ce:47:35:a1:8f:ad:7d:d1:
d2:ae:1b:e2:1d:16:22:a6:a1:c4:73:0e:1f:52:1b:61:c6:5b:
62:1f:6e:14:29:02:9e:78:4d:34:b6:e8:28:66:be:d3:66:02:
fa:26:f7:c6:a1:5f:6a:5f:8a:b4:97:0f:b7:a8:23:eb:ee:7c:
e5:6c:01:b8:ed:67:38:56:cc:db:03:b5:8b:7a:2d:64:b5:2a:
ae:40:5a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:04:28 2026 by rpki-client