
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/59322c2d-6f24-393a-b195-8088f231b471.roa
File: 59322c2d-6f24-393a-b195-8088f231b471.roa (raw, json)
Hash identifier: 7vFzg8vyk3G/t0Bt/KSxmDAZiOGiuZ5FRGngvb5lVIc=
Subject key identifier: 11:AE:21:9D:9C:03:61:FF:2B:83:5A:3D:50:65:79:23:DE:D2:89:55
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F4984AB7F4D066C7E04FBC140
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/59322c2d-6f24-393a-b195-8088f231b471.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 395973
IP address blocks: 104.134.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:84:ab:7f:4d:06:6c:7e:04:fb:c1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=c5687f52-c4c7-4705-bc66-fbba5aa53966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:63:b6:97:c2:ca:8f:00:6f:c3:dd:bf:23:a6:
ae:32:4e:bc:19:4f:5f:96:f0:cb:7a:15:0d:4c:f7:
06:d4:9a:03:2c:5a:aa:a1:97:b1:b0:a7:e9:b5:23:
38:c0:84:5f:81:97:1e:44:90:30:46:4b:b6:f3:82:
6a:ec:d1:9a:76:e1:44:40:48:b5:f1:13:e2:d5:b9:
28:65:6b:c7:43:b4:3f:98:d6:66:86:ce:47:07:d4:
88:75:69:fe:1e:db:8a:1e:ba:b9:65:37:20:5f:c8:
bf:85:72:25:02:dd:7f:7c:b4:d0:ee:34:83:20:3c:
c2:3b:11:a7:a3:5b:72:32:00:9c:53:74:f4:ac:0a:
0a:eb:b1:c1:12:67:ad:c0:c8:92:62:8c:f0:77:cb:
93:3c:c9:a9:fb:a9:d1:ab:2d:9e:58:aa:76:46:0b:
32:7d:4a:45:0c:92:a3:47:b5:dd:49:08:47:dd:60:
87:46:c7:ff:53:15:c4:66:a6:d1:d8:17:5d:0e:b6:
69:b4:7f:3d:b3:c5:80:e1:5f:79:67:30:e3:84:91:
d5:5b:99:6b:94:bc:d6:89:40:8a:75:5f:26:61:a6:
74:2d:8f:02:06:83:dd:87:69:df:95:30:1d:cb:0d:
cf:3e:6e:28:37:87:d3:fd:6a:6a:d7:1b:8d:ee:99:
ba:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AE:21:9D:9C:03:61:FF:2B:83:5A:3D:50:65:79:23:DE:D2:89:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/59322c2d-6f24-393a-b195-8088f231b471.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:6e:65:ab:c9:54:42:7f:20:d2:a9:1a:a8:e2:ea:ac:90:99:
ae:47:d0:e5:ba:46:a7:bb:84:4e:15:74:6e:f8:93:4e:58:b3:
f8:06:79:75:32:d9:58:3e:0c:56:c1:f1:e5:70:84:28:86:15:
3a:42:e6:cb:9a:57:a7:7f:2c:d8:ed:5f:e2:9b:ca:76:c4:1d:
94:bd:9c:39:b8:5c:9e:37:75:91:19:df:20:e7:dd:1d:79:ad:
03:1b:05:c3:43:b9:82:ff:5b:0c:ab:eb:a6:fb:f0:d1:b0:02:
84:de:e9:f9:ed:48:e4:47:81:08:10:05:73:d9:51:30:49:4b:
37:0e:9a:43:b7:a7:94:34:c9:21:3a:40:80:7d:35:db:13:d5:
c9:9d:6b:08:21:d8:a0:36:cd:e4:97:5f:b2:43:1c:e2:96:ad:
d9:3f:7d:30:51:5f:15:2d:22:81:3a:1d:3b:60:3d:dc:01:9e:
54:d4:7e:c2:42:a4:22:c2:cd:4a:7d:87:71:ec:f9:46:b6:b6:
c3:4d:56:51:be:bc:f1:fe:bb:42:1f:97:87:e2:d6:4d:86:72:
9c:68:f4:3e:e1:ea:81:73:02:f3:a2:6b:e3:75:71:d4:68:63:
7f:5e:a3:fa:cd:7f:28:18:67:2e:f4:22:cd:a8:3f:f2:42:23:
f1:12:92:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:14:11 2026 by rpki-client