
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8242b901-13b8-31fc-b0af-a3b05bee017f.roa
File: 8242b901-13b8-31fc-b0af-a3b05bee017f.roa (raw, json)
Hash identifier: 9O3mApevJi2D44hKvTQRTZcuYKIxJs2W4nEHkUzi/iY=
Subject key identifier: CE:99:45:48:9F:4C:43:D3:93:A8:58:AF:B4:99:D3:6D:79:89:19:92
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F497C9C5C325A3E6E4F7A2080
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8242b901-13b8-31fc-b0af-a3b05bee017f.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 395973
IP address blocks: 104.134.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:9c:5c:32:5a:3e:6e:4f:7a:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=1dcf9310-c06a-4a76-98a7-513b94da42ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:51:67:7b:91:00:af:37:5c:39:45:d0:42:59:
70:94:59:f9:4d:72:ac:7f:66:fc:00:10:07:8f:57:
8d:2e:bb:bf:95:3f:6c:6b:62:43:43:7a:4f:32:f6:
7d:a9:0b:00:24:ca:ae:62:f1:59:2d:e0:b8:5b:65:
ff:2f:7c:82:a2:f5:41:47:f5:18:00:25:71:18:cd:
4c:a8:8f:83:53:c2:5c:70:03:1e:1a:62:8e:aa:75:
01:51:76:f1:b3:75:8b:9a:63:12:f9:87:9b:99:f4:
70:d5:64:94:ed:74:ed:d9:4f:13:93:a0:8b:93:46:
f2:ac:52:28:93:a4:42:64:36:bf:a5:e3:4a:b4:04:
5f:d7:04:f9:1c:b8:aa:28:ac:e7:a2:aa:63:8a:8d:
85:c7:a2:1d:46:d2:f2:32:53:8c:96:6c:ef:91:31:
7a:41:25:31:d4:2b:97:3f:48:5b:77:85:9c:2a:1a:
52:c5:47:30:a7:7d:92:70:8d:ad:47:ab:6e:ea:1f:
98:e0:e9:0a:a8:cf:42:fe:ae:17:9d:9c:51:e4:e1:
dd:fe:e2:e7:8b:d2:3f:8f:84:31:66:0a:81:60:ba:
ed:19:97:54:96:4c:cc:90:68:c5:b2:de:3c:49:06:
61:37:3f:2a:8f:3f:9f:51:e0:18:4f:35:51:a2:e0:
80:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:99:45:48:9F:4C:43:D3:93:A8:58:AF:B4:99:D3:6D:79:89:19:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8242b901-13b8-31fc-b0af-a3b05bee017f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:48:1b:24:b5:b6:cc:b6:c3:2c:a9:d5:a2:29:75:49:9c:df:
e7:c0:a7:82:6f:18:f1:01:3d:3e:2e:3b:16:c8:40:5f:61:e5:
d6:fb:d0:03:89:0d:c2:6b:48:d1:ce:72:f9:be:cd:f4:fa:5d:
3d:a1:c8:63:08:f2:6c:21:0e:c0:0b:41:29:5e:d5:03:95:3c:
4e:72:f6:a3:e7:cb:5d:57:1d:9a:4e:05:f9:6c:50:d1:50:63:
33:5c:01:93:c3:27:eb:e6:71:ae:0e:df:77:8f:3d:1d:13:ff:
27:f9:6b:13:c8:3b:06:a0:d4:2b:52:92:08:ef:ac:7e:ee:a1:
69:0a:b5:23:a4:16:0e:93:28:88:4d:97:fe:c0:cf:e5:b3:83:
f8:f8:d0:30:e8:c4:4c:76:8f:d5:44:dd:ba:17:0a:25:29:38:
b9:e9:4a:6b:62:33:0a:6a:69:1c:e5:b0:78:fe:03:28:5e:98:
e6:dc:83:29:1b:dc:16:ac:6d:b5:56:73:6a:61:b3:1a:2a:0e:
f3:90:32:d5:dc:ae:bd:44:8f:45:96:a8:17:c6:75:e3:06:59:
4a:93:f8:4a:ea:ef:11:dc:65:c8:7c:08:f8:98:c8:ab:8d:44:
8b:59:1d:0d:03:55:ef:47:e2:77:48:f4:94:2e:6f:17:e7:83:
83:12:1d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:48:55 2026 by rpki-client