
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8247a5ea-22ad-3fea-afa9-0b471461850c.roa
File: 8247a5ea-22ad-3fea-afa9-0b471461850c.roa (raw, json)
Hash identifier: Jm3B4efG9b8oAYV07dFsHKICc66DthsraqJoC/OxELo=
Subject key identifier: 00:6B:E5:63:82:69:57:80:07:78:74:29:5A:93:DB:6E:F2:5D:3C:C2
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D143DA3CA27ED81342E99B62C
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8247a5ea-22ad-3fea-afa9-0b471461850c.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 41264
IP address blocks: 104.133.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:a3:ca:27:ed:81:34:2e:99:b6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=6eca7835-e519-4271-83d2-9993a134e9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:6b:ea:0d:41:f9:93:b6:26:4f:07:17:c4:
c8:34:e9:c4:8b:1c:22:d6:f9:fe:96:bd:db:2e:7e:
3a:4d:25:05:66:89:bd:bb:d0:64:1e:29:f3:10:00:
81:7d:4f:3a:29:51:fa:da:fe:3e:81:66:b4:0f:1e:
62:a2:0f:34:dc:1e:58:80:76:08:c9:16:c5:62:b3:
5c:67:ef:56:da:15:49:1a:69:43:6f:44:83:59:68:
21:48:cc:74:78:06:a7:02:62:b9:3b:2d:55:cf:02:
6b:bc:ba:c3:96:4d:0c:8f:26:15:32:68:88:3d:ad:
46:c8:60:52:e8:09:43:ca:b6:ce:18:7a:31:01:7b:
0d:0c:e0:da:48:fd:44:2e:16:4e:c8:b2:ce:ef:4b:
84:13:fb:e3:e7:59:27:26:67:7c:33:3c:3d:d3:dc:
9c:1e:6a:a4:0a:b1:30:da:6f:f3:94:41:63:3e:0b:
ee:1e:48:0f:c8:fa:78:6d:47:96:b0:7e:6e:e6:a8:
83:82:58:cc:f0:5f:c9:dc:2a:60:49:ed:2f:55:57:
6b:d9:c9:47:62:db:7f:9d:f7:f8:25:44:d5:24:f8:
c0:48:71:c5:41:08:9e:38:1a:9c:fc:3b:ce:48:1d:
d3:af:9a:d5:9c:c6:d3:79:f6:35:35:bb:c9:c8:d9:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6B:E5:63:82:69:57:80:07:78:74:29:5A:93:DB:6E:F2:5D:3C:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8247a5ea-22ad-3fea-afa9-0b471461850c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:7f:a6:4c:aa:e8:b6:ae:59:39:2c:e4:05:b8:f7:58:70:e8:
00:5e:93:ef:b8:71:63:ee:1b:94:30:fe:b2:04:23:8b:0c:b2:
0d:ef:08:84:37:44:0c:8b:01:70:6c:ca:62:36:ae:56:7b:99:
76:14:4d:a6:c9:9b:c9:d8:21:02:36:94:28:ac:b8:13:93:dd:
fb:55:99:79:46:59:ec:f3:e2:2d:7e:64:63:00:0c:e1:f1:33:
17:66:aa:0b:22:3a:3a:f3:3f:c8:64:70:24:1c:c5:05:ff:f6:
0f:d9:45:38:1a:fc:24:59:d1:a7:2a:ce:f7:65:e3:81:1f:76:
6a:21:b1:42:e4:8f:59:cc:7b:df:bd:d0:2b:88:13:39:c6:3c:
17:59:a5:18:40:10:38:70:9e:15:6a:d6:fc:82:b9:63:5d:23:
7e:c8:68:00:b6:e4:f3:e8:af:be:ac:41:c2:90:27:7f:81:86:
2b:e6:15:ca:79:97:dc:49:ed:98:ae:f5:c8:a0:4d:9e:c9:21:
57:94:0c:4d:a9:f9:f6:25:a4:ef:c2:26:a1:40:ff:f5:15:6f:
c5:85:4d:c2:3b:81:a6:6b:47:00:3f:e0:4b:67:21:ec:67:7f:
c6:64:57:67:f0:fe:3e:98:5b:80:6e:77:f4:01:b1:e6:bb:a6:
d7:c3:4d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:23:23 2026 by rpki-client