
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4422969b-409a-3c25-9720-750c1c1377c2.roa
File: 4422969b-409a-3c25-9720-750c1c1377c2.roa (raw, json)
Hash identifier: E3ot/t7DkcYvvY6DjaVy7uVZcGfVKNnkcEFiewXTHVM=
Subject key identifier: 0E:32:84:5A:7C:B2:BC:5E:CA:F3:F1:92:30:D2:35:62:08:33:2D:F4
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584E2AD44D5F14DF8C5ED0AB1900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4422969b-409a-3c25-9720-750c1c1377c2.roa
Signing time: Sun 14 Jun 2026 09:00:11 +0000
ROA not before: Sun 14 Jun 2026 09:00:11 +0000
ROA not after: Sat 12 Sep 2026 09:00:11 +0000
asID: 395973
IP address blocks: 104.134.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2a:d4:4d:5f:14:df:8c:5e:d0:ab:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jun 14 09:00:11 2026 GMT
Not After : Sep 12 09:00:11 2026 GMT
Subject: CN=12a6cf91-0308-44cc-87af-c94dee0d937d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d9:8a:e4:dc:13:3a:31:7d:a4:d2:63:a3:42:
35:02:26:b0:0f:3c:63:5f:42:37:43:17:d3:97:1f:
d1:f8:91:a8:fb:eb:3d:aa:5f:1f:24:67:ae:7f:81:
b5:08:72:f9:7e:a9:70:48:0c:be:02:28:d0:e7:1f:
a7:72:fc:e4:39:71:40:ca:ed:e2:36:f7:2c:78:88:
c1:df:fb:8d:24:c7:51:a5:3c:e3:19:4f:6d:5e:85:
de:3a:41:ce:6b:9a:ba:7a:75:11:68:a9:c4:67:cf:
99:88:40:5e:cc:66:43:38:7a:a8:7d:62:5d:73:17:
30:6a:4d:bf:f2:c6:06:54:6f:6e:2f:b4:62:e5:d8:
d9:cd:cc:7a:8f:a1:c0:3f:fe:0f:dd:d6:90:83:5f:
8c:81:85:dc:1b:7c:1d:51:81:3f:c3:08:e6:76:bc:
92:32:f8:39:c4:d8:1c:80:67:b9:ff:f4:af:64:12:
d6:46:87:44:57:21:2f:1a:c1:e6:d7:c3:30:3b:19:
6e:0d:68:e9:ce:bb:d6:7d:8f:13:ac:7d:c7:f7:7d:
32:a9:94:38:c7:e1:2a:82:bd:e2:1b:7a:68:83:9a:
35:51:0f:ab:0f:2f:be:fb:6a:ca:fe:44:36:de:bc:
35:fa:d6:8d:30:c5:80:f9:f4:94:d9:8d:40:53:27:
9b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:32:84:5A:7C:B2:BC:5E:CA:F3:F1:92:30:D2:35:62:08:33:2D:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4422969b-409a-3c25-9720-750c1c1377c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:3f:07:65:c5:e8:ec:0e:08:e8:bf:4a:4a:51:d6:76:fc:f7:
2b:e4:87:39:35:9e:96:dd:26:24:87:48:14:55:45:39:ac:fe:
85:47:00:fc:1e:51:0d:12:9c:ac:71:fd:2c:92:29:bb:90:7e:
f0:31:c4:43:95:1e:24:13:df:c4:58:a1:cc:33:ca:be:ce:f4:
ae:a4:96:14:89:0e:47:ed:05:81:05:e2:8c:cd:6b:68:35:dd:
09:2c:68:a6:9d:34:2f:ee:fb:f9:1f:63:1e:1b:0d:66:c0:07:
d8:ef:7b:63:64:d1:19:d8:a0:79:17:fd:c6:53:c7:64:2b:5b:
f0:44:15:ba:cd:01:a4:b4:d0:1f:c9:a0:2e:51:54:ba:ab:d9:
d8:98:ea:3e:3d:50:c1:c1:40:16:cf:bc:ce:40:08:65:02:43:
c0:a7:0b:26:de:c9:c5:41:78:8b:be:71:22:3c:6f:f2:f2:73:
21:98:80:04:4a:5f:46:86:dd:a1:5c:56:17:11:87:15:b8:6a:
c4:0f:56:c1:60:89:b2:be:73:4b:05:10:0c:57:df:f6:f6:cc:
18:79:6f:bc:c1:51:be:15:df:88:17:c1:13:29:0c:6b:b2:a1:
21:b3:01:00:db:04:3c:63:af:d0:bd:db:90:2e:78:a8:b6:83:
a4:5c:ed:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:09:39 2026 by rpki-client