
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9653ff01-b7b6-3277-b216-90c106ebb5bd.roa
File: 9653ff01-b7b6-3277-b216-90c106ebb5bd.roa (raw, json)
Hash identifier: 3X/3T/YnDEdqFvAbjMvmsqAo+IMVryX8y8d9N6lLkJ0=
Subject key identifier: 8C:C4:91:2B:23:F8:A2:2C:81:43:22:F1:3E:CC:4F:C3:51:C6:43:E9
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D0EA7D136E97261432DE2CA00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9653ff01-b7b6-3277-b216-90c106ebb5bd.roa
Signing time: Wed 04 Mar 2026 14:00:41 +0000
ROA not before: Wed 04 Mar 2026 14:00:41 +0000
ROA not after: Tue 02 Jun 2026 13:00:41 +0000
asID: 41264
IP address blocks: 104.132.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0e:a7:d1:36:e9:72:61:43:2d:e2:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 4 14:00:41 2026 GMT
Not After : Jun 2 13:00:41 2026 GMT
Subject: CN=d6efdd13-58de-4bfb-aa17-0308dd1edf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:31:a7:b6:7d:73:fb:70:f3:88:19:77:04:
3c:d2:32:6f:72:4e:f4:0c:a9:67:3f:e9:c5:f8:37:
02:e1:4d:3e:53:ab:87:a5:99:4b:10:94:d9:f7:96:
21:34:91:a0:e4:6e:fd:a0:30:d5:55:9b:68:a2:ee:
21:3f:86:84:92:95:f5:4a:8f:d3:f5:a7:b8:22:d5:
46:c3:34:15:1b:2b:7a:17:2e:d6:9a:c0:39:d2:a8:
2f:c9:35:bc:c5:92:38:e8:61:90:aa:46:6d:90:b2:
4f:43:96:51:54:35:46:58:b1:cc:35:6a:b7:29:28:
f4:a0:8f:92:48:04:a1:24:52:7c:0a:1b:47:f3:f0:
4c:ca:78:a2:b8:73:25:5e:80:ea:f1:7a:89:7a:f5:
21:02:1c:52:6b:96:db:6c:b1:76:f9:5b:f4:15:3f:
2b:59:81:96:10:56:37:f6:4a:9a:70:93:8f:d7:cb:
b9:ec:7b:95:24:a2:3f:03:5f:cc:c9:3c:a6:c6:ff:
9e:cc:90:79:d3:93:1a:b2:b0:dd:45:fc:86:27:3a:
8a:35:cf:d8:25:8a:53:4f:cc:69:14:19:31:fd:6e:
8d:1e:b5:2b:9c:f5:75:6c:c0:8e:c3:3b:a9:db:ad:
c7:57:53:6b:43:41:a8:c0:33:b1:c8:5b:36:e8:7c:
30:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C4:91:2B:23:F8:A2:2C:81:43:22:F1:3E:CC:4F:C3:51:C6:43:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9653ff01-b7b6-3277-b216-90c106ebb5bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:ef:b2:94:db:c9:d9:36:44:03:52:2c:7f:61:4a:23:f6:b6:
ed:0b:99:85:67:2b:4c:b6:72:63:18:a5:8c:a7:2a:51:51:2c:
35:f5:e4:fd:d9:df:9a:26:89:b6:14:f6:7a:6e:04:dc:d9:d5:
e4:00:2d:12:81:81:46:68:e3:49:c7:19:11:80:20:5e:31:c9:
b1:97:69:82:7f:fd:93:75:43:ce:9b:22:76:c2:49:a5:73:18:
5d:0d:9c:18:9b:6a:a3:52:66:d8:77:9f:82:c5:03:8f:fb:7c:
10:8d:53:55:ed:ac:03:f5:c2:c9:f1:50:9b:fc:3c:a8:26:03:
31:f6:5f:4b:f0:76:04:0e:2b:61:a8:20:2f:46:ed:cf:ad:59:
9d:c6:73:1b:53:91:39:ba:2e:0f:25:22:61:c6:f9:a6:b6:b4:
d7:fe:89:47:83:57:d2:3b:2e:e9:93:95:12:68:5f:1a:4c:8d:
b1:91:a9:b5:dd:c2:7d:a6:08:dc:ed:ba:e0:91:07:ca:c1:ce:
35:dc:ce:c1:10:b4:33:65:5d:ef:6c:e8:b9:91:0c:5c:dd:46:
0a:31:93:49:d0:6c:02:0b:8f:cc:22:c1:8d:b2:c3:23:4c:08:
a5:c2:14:22:58:52:c4:22:1c:58:9a:46:c1:75:cc:bf:ad:0d:
41:51:41:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:51 2026 by rpki-client