
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88e9fd55-47e4-358a-863a-d86afd17b3b0.roa
File: 88e9fd55-47e4-358a-863a-d86afd17b3b0.roa (raw, json)
Hash identifier: DeLX9yRpxB74xx/2u1WOdPxrsdTeBDwPAtZ0yZuu0Go=
Subject key identifier: EA:8E:BB:1C:28:CC:BB:61:54:95:8D:D3:4C:44:60:BF:05:27:9F:2C
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D143D89EFB1CB4F8C784F6A80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88e9fd55-47e4-358a-863a-d86afd17b3b0.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 41264
IP address blocks: 104.133.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:89:ef:b1:cb:4f:8c:78:4f:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=1301bbe8-70db-484e-ab54-2985a7c703bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:41:89:68:9d:68:f5:2b:59:72:d2:8f:8e:cb:
1f:73:d2:0d:79:2e:02:a4:1b:94:9b:24:8d:e1:ec:
fb:a7:b4:57:f2:8a:34:1f:f6:af:80:79:48:c1:a1:
bd:6e:6e:c7:ae:c3:af:36:16:67:64:b9:dc:bb:d8:
a0:6c:7f:d2:e7:8e:04:99:50:9f:3b:9a:6e:9a:80:
bc:b8:fe:29:39:0e:46:fe:42:fb:22:11:41:be:42:
95:74:89:57:fe:e2:49:91:c2:f9:67:fe:8d:64:59:
f1:88:46:c3:c2:50:28:10:85:c5:99:1b:bc:ed:0a:
dc:1d:d1:7c:93:73:44:47:2a:f3:9a:2a:ea:5a:96:
7d:98:30:ca:ec:46:2c:8e:09:e7:74:1c:4b:0d:39:
72:5b:e3:c6:69:dd:54:8a:34:0f:9c:e6:4a:f4:0d:
43:b8:9d:4c:55:cc:39:82:b8:58:08:4d:c9:46:31:
13:22:79:3b:b3:7b:ae:b0:07:16:bf:9b:ce:15:fa:
ca:93:d0:4f:93:8e:7e:50:be:f0:26:24:45:cf:98:
eb:7d:3b:72:0d:71:2d:f3:3a:9f:1e:4f:cf:27:f5:
43:d1:7b:ab:00:92:44:ed:99:5f:f8:19:a2:60:de:
7b:6a:fc:b8:c1:bf:72:4c:cf:e7:05:95:e2:5c:7a:
d9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8E:BB:1C:28:CC:BB:61:54:95:8D:D3:4C:44:60:BF:05:27:9F:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88e9fd55-47e4-358a-863a-d86afd17b3b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:93:d3:96:da:bf:e5:48:43:f2:aa:ed:98:66:5a:95:d3:4c:
5d:35:11:42:7f:8c:fd:1d:c9:67:02:3a:11:2c:b1:a6:77:94:
63:90:a4:d5:1c:61:e1:31:ee:1c:94:a0:46:63:3e:dd:62:c2:
de:52:52:b8:7f:7c:cf:c7:92:8c:4a:fa:49:d8:e7:b3:af:e6:
e7:50:c7:23:00:f5:ec:98:6b:f6:72:e5:0d:2e:12:02:21:22:
cf:e8:c4:cf:1d:93:40:76:8e:3f:12:ce:5e:d6:23:17:fb:69:
50:c0:7d:2d:db:53:33:80:e7:dc:6a:69:b7:9c:fa:16:4a:bd:
ac:32:ee:11:a6:2b:82:c4:ed:83:04:7a:b2:7c:6d:7b:d4:36:
10:85:7e:57:f8:89:3a:a3:5c:26:0f:a9:8d:32:bc:16:27:c6:
13:7b:76:27:a3:4a:4d:d7:b0:25:a4:f8:c3:8a:e5:ef:e5:41:
f9:d3:b4:8b:f2:5b:8d:61:d0:39:5c:53:9a:db:65:7d:03:70:
cb:73:ee:d7:53:39:24:2a:8b:de:81:ea:99:4d:46:e2:d8:f8:
b4:b4:61:f2:ca:b6:38:4f:d2:6a:55:15:ab:c2:7f:b5:4b:4c:
d7:71:70:4a:b1:74:61:73:a6:c6:29:dc:38:a5:50:81:ed:24:
87:3c:b9:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYnvsctPjHhPaoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
MTMwMWJiZTgtNzBkYi00ODRlLWFiNTQtMjk4NWE3YzcwM2JkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkGJaJ1o9StZctKPjssfc9INeS4CpBuUmySN
4ez7p7RX8oo0H/avgHlIwaG9bm7HrsOvNhZnZLncu9igbH/S544EmVCfO5pumoC8
uP4pOQ5G/kL7IhFBvkKVdIlX/uJJkcL5Z/6NZFnxiEbDwlAoEIXFmRu87QrcHdF8
k3NERyrzmirqWpZ9mDDK7EYsjgnndBxLDTlyW+PGad1UijQPnOZK9A1DuJ1MVcw5
grhYCE3JRjETInk7s3uusAcWv5vOFfrKk9BPk45+UL7wJiRFz5jrfTtyDXEt8zqf
Hk/PJ/VD0XurAJJE7Zlf+BmiYN57avy4wb9yTM/nBZXiXHrZrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOqOuxwozLthVJWN00xEYL8FJ58sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODhlOWZkNTUtNDdlNC0z
NThhLTg2M2EtZDg2YWZkMTdiM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKOT05bav+VIQ/Kq7ZhmWpXTTF01EUJ/jP0dyWcCOhEssaZ3lGOQpNUc
YeEx7hyUoEZjPt1iwt5SUrh/fM/HkoxK+knY57Ov5udQxyMA9eyYa/Zy5Q0uEgIh
Is/oxM8dk0B2jj8Szl7WIxf7aVDAfS3bUzOA59xqabec+hZKvawy7hGmK4LE7YME
erJ8bXvUNhCFflf4iTqjXCYPqY0yvBYnxhN7diejSk3XsCWk+MOK5e/lQfnTtIvy
W41h0DlcU5rbZX0DcMtz7tdTOSQqi96B6plNRuLY+LS0YfLKtjhP0mpVFavCf7VL
TNdxcEqxdGFzpsYp3DilUIHtJIc8uc8=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:57 2026 by rpki-client