
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4add4991-07f1-3fc2-8171-b1795c3f31f0.roa
File: 4add4991-07f1-3fc2-8171-b1795c3f31f0.roa (raw, json)
Hash identifier: IbZdpkizEhYfUTHZ0G0l3VvESYJI/J6hgVS/5UIQow8=
Subject key identifier: 50:ED:D2:AB:95:DB:1F:B4:4B:FC:73:37:64:BB:1F:B1:23:31:75:22
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D1F4A7A61C30607D3B0810080
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4add4991-07f1-3fc2-8171-b1795c3f31f0.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 15169
IP address blocks: 104.134.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:7a:61:c3:06:07:d3:b0:81:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=6ac9ab10-7168-4a11-8b83-af4c40361a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:30:69:4c:ec:ba:56:1e:8f:d5:65:ea:b6:
07:4e:2a:ab:60:08:ee:51:df:f1:37:dc:4d:0f:a5:
0e:82:11:64:68:a8:73:94:b3:7e:5e:03:79:91:f7:
e9:f6:c3:95:3d:19:93:fd:6c:5e:80:5c:64:0b:5b:
47:fa:43:38:12:8b:e6:01:95:53:6b:7e:36:cf:9f:
2e:60:4e:4a:eb:23:2b:b7:f6:b5:70:9b:1c:9f:74:
10:e3:96:c9:f3:da:98:09:49:ec:c6:88:31:92:80:
8b:05:cc:91:d8:59:94:c5:06:ad:46:27:df:ca:68:
3b:84:87:32:d0:43:1d:4d:c5:22:c8:27:18:16:77:
8c:f6:4c:bd:e5:57:df:b6:d3:88:a7:54:ac:11:be:
55:d2:aa:2b:8f:ad:1a:23:67:9a:b8:a4:50:2d:63:
90:4a:ce:c1:9f:ed:2f:e2:d2:07:38:cf:b3:65:7d:
dd:e6:95:f3:e7:69:15:39:8c:f7:da:12:59:20:59:
60:1c:6b:50:45:f3:98:c9:d6:48:66:4b:54:ab:14:
10:1d:2d:ce:22:a6:22:78:50:45:0f:00:a9:58:a7:
e5:f6:40:00:65:12:b0:f6:a0:f2:21:ac:71:c3:e9:
f9:53:10:39:7e:58:29:d0:9e:c1:da:c0:6e:b2:de:
06:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:ED:D2:AB:95:DB:1F:B4:4B:FC:73:37:64:BB:1F:B1:23:31:75:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4add4991-07f1-3fc2-8171-b1795c3f31f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:7e:18:c4:ba:38:8e:18:88:db:13:86:32:a4:db:61:84:83:
10:ff:c8:49:bd:56:b4:90:d9:72:ae:e4:f7:cb:b2:91:1f:a7:
a2:b9:25:20:c2:73:38:37:cd:5a:62:be:70:63:42:7e:28:d1:
51:83:bf:fe:35:c4:25:5a:95:6d:70:1f:3a:36:3a:fd:a7:d3:
88:ed:86:dc:83:55:26:86:fd:33:03:d2:4c:45:07:ae:3a:c3:
a3:2f:df:ef:1c:18:6d:09:40:06:89:5d:7e:89:08:36:f9:06:
cc:ce:f2:db:33:ee:15:a1:bd:1c:cb:7a:bd:d6:92:8f:4f:6d:
95:87:b0:28:c0:6d:76:53:72:14:26:9a:61:9f:95:fd:88:6f:
9a:7b:e3:eb:21:f0:dd:46:44:22:f5:67:24:ba:89:2b:36:e6:
b3:bd:bd:4c:bb:2d:0f:9a:e8:6c:90:5d:2b:40:b6:c6:00:63:
de:de:26:21:16:49:ed:86:8c:5d:cc:42:61:af:0d:62:55:34:
d4:f5:53:2d:52:82:87:fb:2f:da:50:e5:e6:58:7f:1d:dc:2d:
1f:e8:bc:c1:6f:56:ad:86:a3:76:1d:90:0e:20:6e:62:ba:50:
04:5d:97:a7:6c:d2:4a:53:f8:dc:6c:bb:a2:9b:f2:51:a2:e6:
a7:b7:28:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:34:48 2026 by rpki-client