
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/752cc9bf-1f19-3b84-98be-45790d2ac109.roa
File: 752cc9bf-1f19-3b84-98be-45790d2ac109.roa (raw, json)
Hash identifier: s7w1dDh0Cte/eLtXwVIcJEB5INF+WkG5jB2krbAHnKo=
Subject key identifier: C6:25:E7:DA:ED:A4:2F:74:10:79:A1:58:C4:7B:02:1A:9B:D7:E7:F4
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D143DA0745E1C8A5F7F798FC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/752cc9bf-1f19-3b84-98be-45790d2ac109.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 395973
IP address blocks: 104.134.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:a0:74:5e:1c:8a:5f:7f:79:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=d000ee80-f563-41fa-a3d3-138b171f399c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a8:4c:85:b8:4b:e4:71:1d:26:dc:3e:7d:7e:
ca:d3:87:12:d1:a4:15:41:7b:7e:0a:d6:9f:29:80:
43:ba:c0:c8:e5:da:c5:38:fc:17:25:90:cc:df:c4:
6e:39:c7:f3:d6:84:c8:0e:4f:c9:26:3c:9f:b6:f5:
33:ea:89:cf:21:67:fe:cc:b0:6f:17:93:d0:06:1d:
4a:00:82:ff:a5:24:eb:9b:9e:0c:eb:3d:07:17:3c:
af:06:6d:83:9f:c4:ed:c9:39:7b:10:fd:4e:e8:7b:
14:3c:a7:32:a5:e4:40:62:7d:f4:b5:d5:cc:10:7e:
ef:9e:4e:e8:ca:1e:ba:97:b1:b8:41:24:b5:0b:11:
dc:d8:b0:42:3b:11:58:a1:d8:bb:a6:32:c3:a6:3f:
4a:c7:63:a9:a8:9f:a2:a2:16:56:c3:79:a6:12:14:
3c:98:90:a5:c7:3a:5d:5d:89:d3:bf:f2:12:96:3f:
ed:ae:9a:b7:42:67:31:18:41:17:a3:95:83:e1:eb:
e0:91:7a:1c:00:00:1e:92:96:98:2b:60:0b:1b:4b:
c1:f0:d4:ce:3c:49:d8:d4:de:82:8d:99:60:60:0f:
6e:5b:31:15:05:56:b9:55:ed:fb:2c:7a:25:4c:31:
9e:7f:ff:7a:23:24:11:71:08:28:b0:f5:bf:15:58:
e0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:25:E7:DA:ED:A4:2F:74:10:79:A1:58:C4:7B:02:1A:9B:D7:E7:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/752cc9bf-1f19-3b84-98be-45790d2ac109.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:61:c1:a6:2a:14:3b:a6:93:61:02:aa:ef:31:9a:f3:72:9e:
8a:8b:96:5f:dc:28:c0:61:e7:5d:da:c4:e1:61:b4:f8:8c:07:
a0:0e:6f:9b:5c:73:40:16:1f:2c:4a:ee:79:da:01:3d:fb:df:
30:22:e9:d8:86:fa:17:1d:bb:08:d4:d1:fa:00:61:67:3a:cd:
37:be:4b:9c:4a:c0:9d:5e:1b:c4:3c:bd:92:e3:51:01:4b:d1:
80:1f:85:c4:70:66:5d:d0:b6:d8:e0:3e:64:e8:c7:a4:80:14:
73:5f:6c:e5:6f:e5:dd:17:3d:fe:ff:bd:ea:4b:5c:8b:67:c5:
21:d9:d8:94:94:16:24:4b:2d:55:c2:02:45:10:5c:80:3e:cb:
b4:fb:84:8c:1b:d5:09:6b:8c:fb:6d:24:d2:ae:a6:b5:aa:ad:
f3:0b:23:a3:2f:9e:44:67:b5:6b:34:f4:be:42:55:30:02:fa:
38:4f:49:bc:ba:a1:19:e9:e7:62:71:7c:4d:a4:49:90:86:83:
23:03:4b:00:19:4e:5c:06:fa:58:98:d0:16:2f:18:af:62:e2:
e7:1a:74:83:0e:ec:72:24:67:17:1e:8f:e5:c7:12:ee:74:fe:
e7:df:a2:2c:c0:fd:a0:ab:b1:61:09:f0:bc:93:78:e2:97:95:
c1:bd:1a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:00:08 2026 by rpki-client