
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9370e763-ebb6-3c8d-a57c-cb725d8f635e.roa
File: 9370e763-ebb6-3c8d-a57c-cb725d8f635e.roa (raw, json)
Hash identifier: z2QpXwBUl1Hpgd5JlIR5No2oDbV+NJw2a0RYGth0XH4=
Subject key identifier: 0D:7F:B9:3C:97:57:14:54:43:6E:68:9F:D3:D4:92:21:02:0F:78:01
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D35A01B105A3528D69AFCFF80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9370e763-ebb6-3c8d-a57c-cb725d8f635e.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 36383
IP address blocks: 104.135.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:a0:1b:10:5a:35:28:d6:9a:fc:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=a9c11b9a-338f-48ed-bce2-9f8509bfb771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:39:a8:a1:f6:07:dd:d8:c7:92:7d:74:a2:bc:
4c:bc:ed:24:cd:74:fe:dc:04:af:62:f1:9b:07:8b:
ab:95:cc:62:19:88:88:82:ea:cb:f1:58:12:29:29:
9f:40:b8:ff:a9:d1:73:4f:f9:d4:08:da:63:f9:e6:
27:e9:43:e7:cc:de:f2:83:20:66:b5:bc:8c:01:ec:
a8:51:a3:8d:c9:31:53:10:1e:4a:48:23:39:22:dc:
14:fd:f5:bf:61:25:0b:68:82:6f:d2:31:59:ab:bd:
06:11:6a:52:a1:37:bf:5a:2e:99:fc:f2:43:e6:14:
b3:11:e7:e4:62:8d:76:eb:da:37:b0:22:61:ba:4b:
0b:27:1e:fd:7d:30:d8:78:7a:7e:43:fc:68:a0:98:
0b:f8:ed:f8:aa:94:85:e3:59:e5:b7:16:1c:d5:cb:
95:4a:8e:43:96:5f:a5:4b:4c:a2:c7:b4:05:82:6d:
7b:12:85:56:4d:f1:1d:ad:f0:c3:45:0e:d2:a3:49:
e9:13:c1:15:21:61:9b:37:17:1a:0e:92:f3:6d:41:
7c:ab:ab:b3:c1:15:87:cf:cd:16:c9:1a:ac:09:b8:
08:64:f4:58:00:af:0b:42:d3:19:5f:ff:38:d6:10:
82:c4:66:36:a5:cb:50:3c:bb:e9:33:16:f6:b1:ef:
3e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7F:B9:3C:97:57:14:54:43:6E:68:9F:D3:D4:92:21:02:0F:78:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9370e763-ebb6-3c8d-a57c-cb725d8f635e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.135.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:88:67:89:ad:8c:e9:a3:16:6d:bb:9e:9c:c0:33:71:5d:40:
4a:b3:f9:fc:36:66:22:37:02:ab:9a:e0:d6:99:c8:d1:b8:7b:
37:99:c1:b5:01:62:c5:32:34:80:a7:c9:42:af:2c:79:93:8f:
a1:95:2a:d5:64:83:9b:ce:f7:30:5c:fe:13:42:f1:35:5d:99:
4f:23:e2:b9:c7:78:59:cb:49:f7:50:c3:98:17:04:1d:98:93:
75:2d:52:af:4f:55:d4:c0:61:5d:4d:00:e7:c4:53:38:05:e0:
37:2f:37:8f:b4:88:38:6e:1e:f2:72:18:b2:d2:72:b7:5a:44:
5c:32:0e:17:9f:05:3e:06:ae:61:e7:39:0a:ad:b6:5c:6d:62:
5a:d1:87:ac:e6:fb:ae:eb:b3:05:3c:d0:a6:1b:94:c0:3a:37:
da:e3:f3:c2:7f:2c:eb:08:e5:b4:a6:ce:f4:9c:40:ff:0f:3e:
ba:f2:ce:7d:d8:c5:35:a7:fa:0c:b2:5f:f0:2f:8c:8c:93:a4:
78:64:44:30:cb:22:b2:89:03:33:63:36:de:6a:e7:82:35:af:
fa:98:64:29:c3:f6:e5:4a:13:1b:a8:75:d2:c5:23:95:b2:96:
c0:bc:16:a0:e0:45:89:ef:9e:89:74:a2:c1:3f:d3:56:ae:0c:
36:28:03:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:19 2026 by rpki-client