
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d018fc2-d8c3-3bef-8922-860a17e13999.roa
File: 9d018fc2-d8c3-3bef-8922-860a17e13999.roa (raw, json)
Hash identifier: u52Ie/UqHKWrCf9afaRJNP0PI3C5/xxq8q+OvwI4x94=
Subject key identifier: 98:E6:CB:31:33:93:41:10:0A:76:52:18:73:2D:1B:A2:03:C6:90:42
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F49848DB50C529E696E9D8C00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d018fc2-d8c3-3bef-8922-860a17e13999.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 41264
IP address blocks: 104.132.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:84:8d:b5:0c:52:9e:69:6e:9d:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=ccf64567-0630-4418-969d-c08849a038ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:bf:36:84:b2:2e:a9:f6:d2:bf:7d:85:5e:
83:a7:57:5c:f5:1f:3e:36:ad:bb:6d:12:8c:2f:cc:
bc:5f:f8:1d:61:91:51:37:94:e6:f0:2f:34:ff:18:
a3:da:a9:35:39:a9:1c:df:d7:44:99:8e:eb:1d:14:
dc:0d:2a:8a:2f:b3:6e:91:10:9d:e3:e0:b1:a7:aa:
89:93:50:6f:ed:0c:55:84:32:17:16:5f:24:8c:db:
93:83:cc:3b:c2:b2:ed:ae:29:95:9b:19:75:74:a6:
65:b4:23:de:48:c2:91:ee:1b:2e:28:3c:62:20:64:
47:23:cc:3e:4d:d0:c1:af:ea:7e:c9:e8:9a:98:b6:
ba:a1:c1:7a:08:c8:af:d7:3b:6b:0a:20:79:f8:1e:
82:5d:84:c1:42:ac:62:57:7a:dc:fe:02:3d:01:2c:
e1:aa:65:d2:77:07:b7:04:43:be:b5:3e:a2:13:a2:
a0:24:26:9f:52:9a:6a:da:d8:41:6c:24:e5:f7:92:
eb:e5:b0:43:39:1a:44:30:e9:ae:58:a9:11:ed:f2:
ec:20:de:65:ca:03:24:a5:7f:1c:79:22:da:df:f6:
be:f3:c1:a1:c9:48:f2:18:1e:13:fc:5c:31:38:dc:
ed:52:ce:f2:5b:8a:91:ee:31:5b:92:14:0c:02:cd:
a6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E6:CB:31:33:93:41:10:0A:76:52:18:73:2D:1B:A2:03:C6:90:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d018fc2-d8c3-3bef-8922-860a17e13999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:5c:be:f9:5e:fb:f2:23:53:2a:3d:ac:a1:1f:d9:f6:9f:4c:
3b:e5:c9:96:e2:63:8d:99:61:5a:da:35:c9:21:bd:36:3f:60:
35:71:b1:fa:8a:23:8d:e8:dd:a5:41:45:06:5a:fd:da:22:dc:
cf:46:a7:ff:a1:e4:a7:85:4a:db:29:00:ec:36:7f:78:a2:d4:
a9:cd:b3:68:10:c3:3d:79:d5:65:c1:94:4f:1b:99:dc:10:7e:
da:f0:0f:f7:3d:f9:7f:47:b0:55:34:9b:54:61:fb:74:3d:d1:
b0:12:f5:c0:59:69:5f:53:05:03:18:b8:81:4d:5f:56:e4:4a:
a6:72:9a:fe:00:ba:5f:1d:6e:5c:e1:1a:cd:2a:ff:63:16:d6:
c6:97:eb:0a:e7:17:bb:78:de:00:7a:e5:12:6f:2d:c1:fc:6c:
ea:fc:31:40:27:37:12:9d:91:c8:f9:42:98:6d:4c:27:33:fb:
31:39:73:54:3a:ba:eb:f5:dd:f8:e5:bf:ed:9b:59:f9:2b:1e:
0a:6f:ed:fa:90:37:7a:94:2d:0b:72:d6:ce:68:d1:36:cd:33:
6e:e5:0f:14:fc:81:33:c5:a9:5d:ad:f4:06:2c:b6:74:a1:78:
c8:af:07:7b:74:41:83:67:c6:48:5f:68:c4:a8:bf:72:f7:c6:
5c:f9:09:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:36:50 2026 by rpki-client