
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61ea1429-2237-3dee-95fe-89a342c89790.roa
File: 61ea1429-2237-3dee-95fe-89a342c89790.roa (raw, json)
Hash identifier: xdMVkQg9gtnZXGkwijxi0ebFLbanYJ60VLCxigZvIE0=
Subject key identifier: 4F:CB:25:D2:21:00:0B:69:30:24:91:92:DB:B3:32:6C:E2:F8:FB:7D
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D1F4A5C66AF06F94F7CD8D000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61ea1429-2237-3dee-95fe-89a342c89790.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 15169
IP address blocks: 104.134.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:5c:66:af:06:f9:4f:7c:d8:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=0c823aca-88fe-4b0b-93dd-815e0c30928d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:f9:a7:80:1c:e8:5b:08:cf:68:29:ac:08:
d5:60:c9:e5:11:86:1c:fe:76:12:d1:a3:3a:6e:ff:
13:e4:d4:42:c1:2c:0b:b2:95:a1:53:f9:db:ea:d1:
ff:3e:e5:81:f3:c3:3a:93:a1:4d:32:57:6e:9b:0b:
aa:72:43:e2:ae:7d:d7:55:5f:7a:af:76:0e:42:42:
72:55:62:2b:13:29:e5:72:4d:b3:d1:2e:4a:f1:c7:
79:85:e2:41:a5:76:c5:94:cc:6e:d2:16:ad:3c:87:
f0:a7:90:e2:1a:25:a6:00:6b:33:dd:ee:7a:74:59:
cb:75:55:55:c4:a4:28:93:1f:30:82:aa:b1:e5:b9:
d9:bc:2d:a0:3a:4b:61:33:8b:ba:14:51:fa:46:3a:
05:ad:51:31:49:9e:8a:01:2c:b0:93:42:2a:56:96:
a7:d3:dd:4b:54:db:7a:fa:f2:b1:77:c1:be:6f:53:
9e:46:fa:2f:b4:57:4a:d5:33:52:cf:59:23:d3:b0:
91:a7:dc:5b:9a:3b:c7:34:78:06:12:c4:68:84:00:
3b:94:3c:87:b8:39:c5:f5:47:e5:68:14:9f:30:2b:
33:df:b4:e2:10:bc:6d:6b:4e:77:3f:9f:8a:be:9d:
74:aa:f8:06:80:34:4d:34:0a:eb:a9:c6:5f:68:42:
96:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CB:25:D2:21:00:0B:69:30:24:91:92:DB:B3:32:6C:E2:F8:FB:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61ea1429-2237-3dee-95fe-89a342c89790.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:d5:41:7d:1a:72:68:6b:f8:1c:60:57:b8:1d:74:54:28:4c:
78:9f:9a:87:e7:b9:e9:97:18:a3:dc:ab:87:97:f8:35:71:e7:
7e:a1:dd:83:6f:46:e4:1f:cd:bb:bf:99:d8:ff:1f:d8:4c:48:
46:8f:b2:7a:00:09:c5:dd:2a:a2:e0:3c:41:61:0b:e9:93:32:
41:9f:5b:60:00:b8:c5:12:c2:14:1d:dd:93:6d:1a:29:76:5d:
15:3d:eb:32:db:c4:a5:a6:d6:d4:51:3f:d9:cc:4d:68:06:eb:
73:65:aa:7a:59:11:f3:dd:4d:17:4b:be:e0:0c:51:c3:a1:8a:
5b:4a:c4:42:06:44:4f:11:a4:0d:11:08:d5:eb:9a:c0:c5:b9:
ca:fb:bb:57:bb:de:a1:40:78:71:e4:87:cf:54:3b:c5:08:6a:
82:2e:86:0d:58:cd:a7:20:f6:99:06:00:14:de:c2:af:a7:ff:
f2:1d:f9:f2:a9:42:e7:5d:6d:a8:3d:34:43:39:d2:f1:8b:6b:
6e:ef:cf:a6:14:c5:8b:c9:8f:12:0e:9c:c3:96:ef:98:1f:e4:
e9:ef:96:9a:ff:f3:2a:f8:fe:c4:77:9d:bd:cb:d2:81:77:97:
cf:21:65:76:7a:0b:57:04:a4:ea:4a:5f:e8:8c:7e:7f:0a:e2:
a3:95:92:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:47 2026 by rpki-client