
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/448e5339-25f5-3339-84a4-1e29679e812e.roa
File: 448e5339-25f5-3339-84a4-1e29679e812e.roa (raw, json)
Hash identifier: Vro5xPyUL10gJ+GzXrhY+09/6fwD5xw69FpaQvTrPw8=
Subject key identifier: 3A:FE:15:28:6C:49:26:7D:A7:D6:3E:B9:D3:D0:A3:B8:6D:08:80:03
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F497C938001979A3A2C4244B0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/448e5339-25f5-3339-84a4-1e29679e812e.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 395973
IP address blocks: 104.134.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:93:80:01:97:9a:3a:2c:42:44:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=6acb7615-0ba6-408f-980f-8356fcfe903e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:75:20:a8:6d:09:5d:bc:0d:ef:94:7d:61:
2b:2a:de:f9:98:d7:ba:e8:5e:51:30:2b:19:5c:55:
bc:9e:58:be:72:2d:81:11:5c:31:84:cb:99:a9:0d:
2d:28:e9:fb:86:a0:85:97:41:49:e5:a0:ae:51:d9:
5a:3e:d0:56:50:ac:c1:56:8c:36:08:bb:d3:25:fe:
09:a3:75:fe:6e:f1:ad:46:d6:d7:71:2d:e7:28:63:
94:12:13:41:8e:a6:ca:7c:5e:4b:f2:c3:7b:5e:a8:
48:3e:e6:f4:81:eb:14:c9:39:29:f2:4b:72:be:a4:
0a:fa:7f:b4:c9:76:be:97:74:e7:f0:87:a1:db:8f:
57:16:d5:19:4c:1e:06:f8:ba:48:d7:a6:19:fe:e5:
cf:6a:2b:87:78:ef:d1:79:ad:74:e8:6f:52:f1:1b:
75:22:83:b6:60:4a:6d:e0:14:21:aa:a2:60:85:e4:
a6:f0:67:5a:22:9b:9c:e6:41:a0:30:61:5f:99:29:
22:75:f7:6c:5a:50:80:93:08:90:7d:ae:a9:b0:4a:
2e:44:18:d1:6d:3e:af:41:12:ba:5e:ad:c3:d6:46:
d6:39:5a:b6:00:15:4c:75:fb:e7:57:d7:5e:3f:a1:
0d:54:23:5a:6e:16:d3:d4:db:cd:0e:de:e0:54:7c:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FE:15:28:6C:49:26:7D:A7:D6:3E:B9:D3:D0:A3:B8:6D:08:80:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/448e5339-25f5-3339-84a4-1e29679e812e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:75:26:3e:55:98:f8:74:7d:6d:c5:87:c7:5b:81:24:09:8c:
20:d2:4c:b0:dc:be:a6:f6:d9:d1:ac:6b:e1:50:71:d7:b7:63:
20:a0:0f:5b:69:d3:d9:fc:09:71:20:ef:d1:52:04:1f:4c:85:
2c:88:d0:09:7f:95:58:8b:9e:2a:d4:7a:d8:40:95:81:ee:8c:
19:26:34:b6:58:89:23:89:95:bc:08:bc:2c:84:7e:b3:4d:57:
78:b3:52:5d:dd:b6:e6:6c:fd:62:97:b1:e0:2c:33:fa:14:27:
0b:5d:c6:fa:cf:19:d3:52:f6:df:bb:c1:3d:68:e3:fa:60:7e:
89:0f:08:35:02:87:25:79:d8:cf:ec:46:48:1c:71:3e:4b:ee:
57:78:f5:60:c5:3b:a8:d6:ca:df:d0:f7:65:fb:48:e3:dd:01:
8e:46:ff:87:fe:99:14:1b:6d:d3:55:bc:50:ad:33:18:d2:1f:
1a:44:3c:91:91:f7:39:e8:98:bf:2e:51:93:b6:04:03:e3:96:
d9:46:9a:64:81:13:c8:54:05:40:2a:ff:ad:30:5c:3a:06:94:
4b:23:c8:75:d3:56:32:ad:a7:3a:58:36:d8:a2:ad:34:92:e1:
3e:8e:4e:79:db:8a:02:00:90:76:42:b3:99:6d:29:df:db:d0:
ce:b2:7f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:22:43 2026 by rpki-client