
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/543dded8-773c-37ac-918d-3d2bf1c75c74.roa
File: 543dded8-773c-37ac-918d-3d2bf1c75c74.roa (raw, json)
Hash identifier: ZGzm7xjx9v61zry9LmNMoWAA8MibFBNYxXKl9cbpfZw=
Subject key identifier: 98:D7:9B:FD:86:40:03:23:E0:A2:D3:24:16:7F:56:CC:6F:DB:BD:BA
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D143DA294A2F61B858B9E2740
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/543dded8-773c-37ac-918d-3d2bf1c75c74.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 41264
IP address blocks: 104.133.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:a2:94:a2:f6:1b:85:8b:9e:27:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=e70aa273-f806-4d4e-a8fa-9f3355db4569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:72:97:cc:c2:d4:3e:db:3b:f3:aa:a5:f7:f7:
0c:af:be:65:8d:45:ca:92:9d:7c:55:ae:04:a2:3f:
14:49:9c:90:af:d1:92:99:4b:18:cb:cb:b4:dd:3c:
77:47:05:1d:ee:c9:73:a7:d5:ad:14:42:e4:91:87:
7e:bc:56:e7:e6:57:95:7d:e0:a1:c0:11:bb:5a:0b:
e6:e1:e8:83:46:bd:f6:49:42:2d:f2:a2:4a:e0:de:
71:d2:26:f8:84:6d:9c:df:ff:44:4a:d3:76:2c:e3:
32:a3:d9:86:09:31:6b:9a:16:ce:7d:22:11:68:91:
bb:5d:70:1c:2c:a0:71:3f:1b:44:0d:53:09:d6:a2:
b4:c1:bf:32:f7:f0:d0:36:98:fb:c5:03:6a:f1:77:
7f:fc:66:97:76:82:69:e3:2c:b4:e4:13:99:9a:40:
02:88:c8:24:d2:97:f5:49:fb:34:d9:4a:ab:4f:9d:
c0:04:fc:6c:4f:40:0d:bf:f9:58:88:48:95:8c:82:
b9:fa:97:b4:e8:e2:a3:90:5f:50:2e:c2:a3:eb:98:
ab:b1:dd:65:fc:fd:44:32:5e:8b:4d:52:c1:70:28:
5a:7e:22:97:6e:e8:c6:ff:11:e6:5e:ea:72:3c:bc:
b8:58:00:7c:2a:77:0a:aa:3e:d4:92:51:3a:6d:e7:
d6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D7:9B:FD:86:40:03:23:E0:A2:D3:24:16:7F:56:CC:6F:DB:BD:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/543dded8-773c-37ac-918d-3d2bf1c75c74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:b3:0b:1e:94:2f:64:db:2d:ab:9c:38:73:24:9b:81:4a:fa:
92:5c:be:ad:26:84:57:04:70:47:40:1d:bd:20:67:cd:7f:0b:
82:d3:27:fa:a3:ca:3f:f3:b6:ae:73:e4:e8:13:2d:53:ea:f4:
36:7e:1b:8a:ad:37:a6:c4:12:c5:a3:35:16:b8:db:93:61:ef:
68:4c:58:a3:5b:1a:85:94:89:b0:2c:23:d3:ed:6a:89:21:5c:
65:5c:ad:07:9b:ee:ec:95:56:a0:1e:18:8d:92:dd:a5:7f:a6:
ea:6d:ff:b3:9c:99:82:d5:ad:8b:15:d8:d1:1f:02:4b:1f:d4:
b6:dd:64:2e:d3:5b:e5:d0:bc:05:b0:29:66:9c:77:c2:d0:db:
11:5d:4d:7c:84:b5:08:e1:ac:80:86:a0:98:2b:69:d8:19:ae:
b8:ed:2b:4a:a6:fa:1c:e6:49:f5:dd:ba:06:ac:71:02:79:3b:
3b:80:b8:10:6e:aa:94:78:1a:16:e5:18:1d:b5:7f:2e:c7:f1:
c3:18:fc:92:11:5d:32:69:fd:b3:10:68:ae:6d:21:ea:4a:59:
bc:78:3a:49:4d:95:16:26:3d:1d:c6:7f:2b:22:e7:ce:4f:e3:
c1:80:54:af:45:4c:69:56:58:a7:5a:bb:5f:f3:44:17:1f:0a:
28:fb:d9:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPaKUovYbhYueJ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
ZTcwYWEyNzMtZjgwNi00ZDRlLWE4ZmEtOWYzMzU1ZGI0NTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnKXzMLUPts786ql9/cMr75ljUXKkp18Va4E
oj8USZyQr9GSmUsYy8u03Tx3RwUd7slzp9WtFELkkYd+vFbn5leVfeChwBG7Wgvm
4eiDRr32SUIt8qJK4N5x0ib4hG2c3/9EStN2LOMyo9mGCTFrmhbOfSIRaJG7XXAc
LKBxPxtEDVMJ1qK0wb8y9/DQNpj7xQNq8Xd//GaXdoJp4yy05BOZmkACiMgk0pf1
Sfs02UqrT53ABPxsT0ANv/lYiEiVjIK5+pe06OKjkF9QLsKj65irsd1l/P1EMl6L
TVLBcChafiKXbujG/xHmXupyPLy4WAB8KncKqj7UklE6befWUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJjXm/2GQAMj4KLTJBZ/Vsxv2726MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTQzZGRlZDgtNzczYy0z
N2FjLTkxOGQtM2QyYmYxYzc1Yzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD6zCx6UL2TbLaucOHMkm4FK+pJcvq0mhFcEcEdAHb0gZ81/C4LTJ/qj
yj/ztq5z5OgTLVPq9DZ+G4qtN6bEEsWjNRa425Nh72hMWKNbGoWUibAsI9Ptaokh
XGVcrQeb7uyVVqAeGI2S3aV/pupt/7OcmYLVrYsV2NEfAksf1LbdZC7TW+XQvAWw
KWacd8LQ2xFdTXyEtQjhrICGoJgradgZrrjtK0qm+hzmSfXdugascQJ5OzuAuBBu
qpR4GhblGB21fy7H8cMY/JIRXTJp/bMQaK5tIepKWbx4OklNlRYmPR3Gfysi585P
48GAVK9FTGlWWKdau1/zRBcfCij72UA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:17:47 2026 by rpki-client