
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4aa658f5-2331-39df-b727-3a3852595351.roa
File: 4aa658f5-2331-39df-b727-3a3852595351.roa (raw, json)
Hash identifier: Xmb5oPBuhj0JdpW9lN+79M+HIR9nrhvuHJzFe/eBvh4=
Subject key identifier: C5:EB:F9:29:73:48:18:F4:BF:85:D2:79:EE:97:6F:58:8A:8A:8C:FE
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D1F4A61668DFE60C802AD3120
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4aa658f5-2331-39df-b727-3a3852595351.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 36411
IP address blocks: 104.134.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:61:66:8d:fe:60:c8:02:ad:31:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=67d4675d-8ca5-4db2-83b3-0e0afcde17cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:ca:a3:71:80:76:7a:30:6d:72:4b:2d:fe:
8a:bd:be:54:eb:c4:4d:93:6c:b0:18:9c:46:07:ce:
c6:2c:0b:5e:87:13:30:61:14:0d:6b:59:c3:77:55:
a2:5c:32:d2:f8:72:80:22:f8:1c:c5:a0:fa:74:67:
9b:1e:be:4a:5b:7f:36:37:c9:8b:69:02:89:ed:77:
b8:ce:97:c6:24:5e:03:72:0a:f5:5e:10:d4:a7:2b:
fb:1f:b2:2b:92:9e:60:26:67:dd:21:04:e0:d4:5b:
5b:1c:19:bc:8f:34:74:b4:27:86:94:ac:9b:32:c7:
16:3e:a8:1e:e8:09:b0:30:00:14:6e:3e:fd:a2:ca:
22:66:2c:78:2a:42:69:c8:01:20:84:72:c0:5b:12:
63:d3:87:e1:05:11:5c:a7:56:8d:da:e1:6c:53:c4:
d8:10:ce:3f:b1:57:8d:56:f0:29:95:e8:4a:1c:26:
81:c2:3b:da:bd:00:1a:82:b7:80:5b:72:b2:54:dc:
f6:57:d6:fb:d3:38:54:66:55:8f:42:9a:24:c6:65:
f0:c4:d2:9b:37:d4:3b:27:c8:3f:41:ac:c0:0b:ed:
29:25:f4:a3:cd:49:ae:ae:27:26:ba:e6:22:73:ae:
67:7f:3f:9a:a2:4a:a4:68:94:15:3e:6b:05:20:dd:
af:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EB:F9:29:73:48:18:F4:BF:85:D2:79:EE:97:6F:58:8A:8A:8C:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4aa658f5-2331-39df-b727-3a3852595351.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:a2:32:d7:bc:5d:33:ad:55:a3:9b:a7:0c:e6:3f:3e:a7:d5:
6b:26:81:10:52:f4:d6:a2:ed:ab:1f:2d:ae:28:b0:41:f5:0b:
d4:90:c6:1d:ef:34:26:1a:a4:8f:17:39:70:af:8d:02:5e:25:
4e:b6:34:54:07:85:fc:93:fa:4f:50:f5:a5:b6:06:d4:e5:41:
d0:54:7d:c8:d1:b7:78:6c:67:9d:d3:54:bf:46:a5:e3:00:d0:
7a:b4:55:47:b8:67:05:e0:b9:1d:18:ec:88:fd:8f:53:c2:ed:
7e:5d:7c:33:70:f7:e6:d2:e4:36:bb:71:8c:33:66:b5:ce:59:
e1:01:3a:c1:36:29:df:c3:0d:75:89:6b:d7:46:e7:db:53:3a:
ab:d1:13:06:50:ae:a9:89:17:ab:14:7c:90:77:20:6f:06:f6:
aa:2d:04:46:e2:ef:67:c5:92:2e:7a:08:c5:4e:fc:53:25:14:
8d:64:2b:f9:e9:9f:e0:7d:42:16:19:00:e5:19:eb:dc:e8:39:
33:27:a1:56:8d:e7:0e:e7:f8:7e:85:68:db:6c:68:cb:1d:69:
0c:78:67:53:79:cd:27:59:73:a8:05:18:66:f3:b2:76:6d:de:
d4:33:cf:f8:f5:d6:a2:24:73:0f:fa:f7:1c:4a:5c:09:d6:ac:
8f:d1:b9:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSmFmjf5gyAKtMSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
NjdkNDY3NWQtOGNhNS00ZGIyLTgzYjMtMGUwYWZjZGUxN2NiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzITKo3GAdnowbXJLLf6Kvb5U68RNk2ywGJxG
B87GLAtehxMwYRQNa1nDd1WiXDLS+HKAIvgcxaD6dGebHr5KW382N8mLaQKJ7Xe4
zpfGJF4Dcgr1XhDUpyv7H7Irkp5gJmfdIQTg1FtbHBm8jzR0tCeGlKybMscWPqge
6AmwMAAUbj79osoiZix4KkJpyAEghHLAWxJj04fhBRFcp1aN2uFsU8TYEM4/sVeN
VvAplehKHCaBwjvavQAagreAW3KyVNz2V9b70zhUZlWPQpokxmXwxNKbN9Q7J8g/
QazAC+0pJfSjzUmuricmuuYic65nfz+aokqkaJQVPmsFIN2v+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMXr+SlzSBj0v4XSee6Xb1iKioz+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNGFhNjU4ZjUtMjMzMS0z
OWRmLWI3MjctM2EzODUyNTk1MzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIZIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHiiMte8XTOtVaObpwzmPz6n1WsmgRBS9Nai7asfLa4osEH1C9SQxh3v
NCYapI8XOXCvjQJeJU62NFQHhfyT+k9Q9aW2BtTlQdBUfcjRt3hsZ53TVL9GpeMA
0Hq0VUe4ZwXguR0Y7Ij9j1PC7X5dfDNw9+bS5Da7cYwzZrXOWeEBOsE2Kd/DDXWJ
a9dG59tTOqvREwZQrqmJF6sUfJB3IG8G9qotBEbi72fFki56CMVO/FMlFI1kK/np
n+B9QhYZAOUZ69zoOTMnoVaN5w7n+H6FaNtsaMsdaQx4Z1N5zSdZc6gFGGbzsnZt
3tQzz/j11qIkcw/69xxKXAnWrI/RuUE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:42:51 2026 by rpki-client