
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8247a5ea-22ad-3fea-afa9-0b471461850c.roa
File: 8247a5ea-22ad-3fea-afa9-0b471461850c.roa (raw, json)
Hash identifier: WtzIUpBuOQEXSmwmBfply6KP6piMGuz6Y8F0Z5pOGJQ=
Subject key identifier: DB:7E:0D:76:C1:BE:4E:1B:BC:A5:A4:59:10:BE:95:BC:2A:A8:87:C8
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F4984A61BAA8D0B43EC789280
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8247a5ea-22ad-3fea-afa9-0b471461850c.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 41264
IP address blocks: 104.133.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:84:a6:1b:aa:8d:0b:43:ec:78:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=e55dafb9-232a-44b1-8c6e-8f90ce4d87f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:80:29:7c:d0:03:a5:02:61:ed:8f:b5:b3:62:
39:16:dc:eb:69:28:aa:09:d5:dd:7f:a7:ec:f5:ce:
2f:68:2f:8f:61:a1:2d:dd:46:43:81:32:33:83:e5:
82:fa:69:ef:de:b6:77:87:da:0c:71:81:fb:a6:6b:
53:0c:2a:61:73:61:96:2b:21:d6:4e:8a:e0:fa:ed:
19:14:75:ea:c3:34:81:c8:9d:cb:bf:36:51:8d:e8:
b7:76:e6:f0:f2:3f:a8:75:0e:72:c5:ac:1d:6f:a9:
8f:28:80:16:fe:18:b0:30:56:e3:93:27:be:1b:55:
49:b9:2a:2f:a6:9a:9f:95:32:10:54:a1:57:ff:68:
9a:22:16:f0:4c:5d:f9:0b:f6:25:ac:02:91:70:71:
22:40:fb:5a:4c:89:9c:23:a9:6d:f2:14:01:e0:2c:
d4:ce:00:e7:9a:fe:03:81:c5:a6:2a:fe:54:50:1f:
de:b6:f3:df:71:e0:75:d7:c1:20:47:57:ab:90:2f:
03:56:1e:11:09:97:02:5c:8e:8d:e2:56:c5:fa:47:
71:7c:61:c9:75:7d:6a:73:a1:62:23:b0:5c:c4:c1:
18:9f:8e:82:e3:00:29:69:df:ef:fb:15:38:92:48:
d5:a0:77:40:24:d0:c4:35:45:95:d1:3b:40:ed:01:
32:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7E:0D:76:C1:BE:4E:1B:BC:A5:A4:59:10:BE:95:BC:2A:A8:87:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8247a5ea-22ad-3fea-afa9-0b471461850c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:92:41:00:c2:0f:21:0a:8e:64:a2:08:a8:9a:b7:39:d7:88:
37:0e:6f:8a:c4:9c:62:2d:ef:49:7b:28:db:02:1b:b6:13:37:
8b:62:ae:8c:77:aa:4b:5e:f8:d6:85:74:4f:ce:f8:1d:20:49:
e5:1a:6f:34:82:cc:80:a2:a3:20:f8:f1:d7:9e:03:15:ef:c1:
33:53:35:89:7c:96:b6:84:d9:69:88:05:d7:cc:5f:6e:cc:75:
cd:8b:b5:0a:37:bc:6b:d7:15:07:3f:3d:20:f9:b5:fa:b6:e7:
af:5a:9c:0a:00:ea:36:da:9a:9f:e4:78:d6:8a:d9:ca:98:d3:
6d:ca:84:93:af:34:23:18:5a:6d:e9:f4:93:a9:e6:26:e3:27:
9c:dc:80:12:9d:8d:3e:39:0c:6d:16:6c:90:c1:95:87:e8:b4:
61:60:63:ac:c8:4d:1b:1a:2a:2b:ef:8b:e1:e6:df:3c:32:a4:
e7:9a:ca:43:55:f0:61:d2:0a:b0:f5:e1:3b:8f:4f:13:fe:89:
8e:5c:fc:2a:27:0a:bf:4a:72:3e:9c:4b:b7:fb:65:ab:e5:0b:
fc:a1:f4:3e:8b:fb:d0:e5:46:d7:0b:6f:f0:58:fa:ac:22:2f:
9a:ba:ae:20:b8:6d:87:4e:7e:28:ba:90:bc:d5:69:b7:27:bd:
4e:c8:1c:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhKYbqo0LQ+x4koAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZTU1ZGFmYjktMjMyYS00NGIxLThjNmUtOGY5MGNlNGQ4N2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYApfNADpQJh7Y+1s2I5FtzraSiqCdXdf6fs
9c4vaC+PYaEt3UZDgTIzg+WC+mnv3rZ3h9oMcYH7pmtTDCphc2GWKyHWTorg+u0Z
FHXqwzSByJ3LvzZRjei3dubw8j+odQ5yxawdb6mPKIAW/hiwMFbjkye+G1VJuSov
ppqflTIQVKFX/2iaIhbwTF35C/YlrAKRcHEiQPtaTImcI6lt8hQB4CzUzgDnmv4D
gcWmKv5UUB/etvPfceB118EgR1erkC8DVh4RCZcCXI6N4lbF+kdxfGHJdX1qc6Fi
I7BcxMEYn46C4wApad/v+xU4kkjVoHdAJNDENUWV0TtA7QEy4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNt+DXbBvk4bvKWkWRC+lbwqqIfIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODI0N2E1ZWEtMjJhZC0z
ZmVhLWFmYTktMGI0NzE0NjE4NTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIX5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADSSQQDCDyEKjmSiCKiatznXiDcOb4rEnGIt70l7KNsCG7YTN4tirox3
qkte+NaFdE/O+B0gSeUabzSCzICioyD48deeAxXvwTNTNYl8lraE2WmIBdfMX27M
dc2LtQo3vGvXFQc/PSD5tfq2569anAoA6jbamp/keNaK2cqY023KhJOvNCMYWm3p
9JOp5ibjJ5zcgBKdjT45DG0WbJDBlYfotGFgY6zITRsaKivvi+Hm3zwypOeaykNV
8GHSCrD14TuPTxP+iY5c/ConCr9Kcj6cS7f7ZavlC/yh9D6L+9DlRtcLb/BY+qwi
L5q6riC4bYdOfii6kLzVabcnvU7IHN4=
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:49:00 2026 by rpki-client