
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/957fafb9-7a96-3588-af99-2b73749889b4.roa
File: 957fafb9-7a96-3588-af99-2b73749889b4.roa (raw, json)
Hash identifier: RyfzwDPG0ECPGZ5G/rbTIzTn+ANLgIGd52WBfX3xEa4=
Subject key identifier: E9:4E:65:1B:61:D4:37:EF:3B:46:87:EE:D4:FE:59:89:74:D5:FA:38
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D1F4A5488C8AD91644F483080
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/957fafb9-7a96-3588-af99-2b73749889b4.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 15169
IP address blocks: 104.134.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:54:88:c8:ad:91:64:4f:48:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=6eb53968-9479-4fff-8b76-f4b9ed6655e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:44:9b:b7:2c:78:0b:6b:5e:6a:6b:99:de:2e:
02:ae:ce:b5:20:67:bc:5a:d9:f6:99:8e:b4:97:8a:
c1:5c:8f:16:cd:05:ca:38:e1:f5:4a:78:fc:33:f2:
59:bd:40:9a:a9:9b:88:0f:71:9d:34:6a:32:87:07:
d7:4d:94:de:ef:06:cd:7e:ff:eb:aa:8d:9e:4c:1e:
86:0a:8c:34:eb:f9:31:f4:99:85:ee:15:0f:86:1a:
c9:ef:94:5c:b5:ed:01:5c:26:b0:8d:93:2d:d6:99:
92:b6:6f:27:9f:b7:83:6b:ed:c5:6c:6e:2c:25:5a:
19:58:2d:60:69:c4:a5:3b:95:70:87:5d:da:d5:5e:
39:a9:d7:34:13:4b:be:8f:03:0e:b9:18:f4:f6:80:
01:d6:02:3e:dc:f1:fb:57:21:f2:26:cb:88:e5:e0:
16:f6:e2:d0:aa:e6:d6:43:ee:3d:b0:5c:a7:03:37:
07:7d:49:01:25:bc:25:87:7e:27:2c:58:8f:39:8d:
39:dd:ed:06:b1:8e:02:aa:24:be:20:99:89:32:ab:
0a:e7:b9:ff:fc:d1:01:db:9c:32:e8:83:52:3f:74:
75:b9:7a:5d:68:ed:96:cc:71:9d:e1:4f:18:77:9a:
54:33:c6:79:18:0a:b2:c6:ae:0d:3f:06:d5:18:89:
d2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4E:65:1B:61:D4:37:EF:3B:46:87:EE:D4:FE:59:89:74:D5:FA:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/957fafb9-7a96-3588-af99-2b73749889b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:31:5c:07:bc:2d:62:e8:c9:55:2d:c6:e0:66:13:ec:81:33:
46:12:02:aa:c2:46:34:dc:44:f3:79:2d:1f:5f:07:72:d0:4f:
50:d6:6c:64:c2:ae:38:e4:c7:e8:cc:d5:18:be:2c:2b:c9:76:
5c:6a:23:67:3d:92:90:a7:76:db:b7:92:85:ba:29:41:d5:3e:
cb:9e:0a:71:19:89:fd:df:9a:e3:13:7b:f3:b9:e5:e7:cd:08:
4e:b7:f4:89:e5:af:dc:1b:e7:e6:fe:ed:a6:48:76:d0:08:01:
df:43:9e:fe:62:a2:ec:74:db:6c:42:35:a4:fb:4e:51:1a:da:
51:b6:c5:70:5e:43:17:59:8b:1b:f8:84:86:19:3c:0a:0a:93:
ca:08:3e:48:8a:d7:ba:3a:d0:02:6f:17:11:21:49:e6:d6:80:
3e:7e:b9:55:07:d5:dc:46:18:26:4b:5b:66:80:be:cd:62:c3:
b9:6a:13:64:9d:79:77:f4:64:f8:70:30:53:32:7c:7f:d5:b2:
60:cd:08:ff:f6:c0:17:4d:50:7c:32:da:b7:29:97:8e:16:22:
86:b7:23:10:8a:d9:d7:51:d1:80:d6:ab:1b:4d:82:2c:ca:9d:
1c:34:03:b1:03:6d:91:17:7d:c5:5d:01:2a:95:62:f1:71:4c:
45:0a:b4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:02:23 2026 by rpki-client