
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d62a239-940a-33bf-b5b3-1eced0745d57.roa
File: 9d62a239-940a-33bf-b5b3-1eced0745d57.roa (raw, json)
Hash identifier: OINH5d5QE8Aeojpg+T5XhHRRM8EM0pYBw77ytimCdIo=
Subject key identifier: BC:F3:93:8F:7D:54:7B:FA:6E:2F:D1:D0:06:F9:94:6F:13:9A:59:45
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F497C816B9117D7247E4AD140
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d62a239-940a-33bf-b5b3-1eced0745d57.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 41264
IP address blocks: 104.133.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:81:6b:91:17:d7:24:7e:4a:d1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=a7365ddb-cd83-4262-baa7-890c25f9af75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d6:08:5a:b8:36:f3:08:66:fa:49:4b:9f:43:
2f:a6:69:8c:4a:3a:5c:94:8f:31:6b:64:41:c9:c1:
27:74:c4:cb:96:6f:0f:f4:4d:16:bd:09:73:55:d6:
65:21:a1:30:15:61:6f:c8:cd:38:02:82:6c:bf:c7:
a8:92:77:05:86:ab:7d:99:9c:5e:28:aa:d9:bc:1f:
d1:b8:6f:25:f0:1b:7a:f0:7a:24:da:d1:1a:a3:b3:
83:71:71:b3:28:4d:34:18:33:80:c3:2e:30:50:26:
19:bf:67:4a:05:9e:4b:28:b1:54:80:4e:b5:f6:ab:
56:cf:83:38:ec:d2:47:40:94:58:a1:b7:ce:80:f5:
04:48:76:bd:aa:5f:5d:0c:f5:f4:37:ba:7e:1a:50:
29:89:9f:c8:a6:9a:33:25:9b:3e:34:87:56:29:2a:
57:ac:a9:9f:db:60:ca:5d:64:b5:77:03:06:81:a3:
b5:ed:a9:39:a0:05:37:56:41:a3:a0:14:24:8f:5e:
41:01:19:86:2f:74:6c:5a:09:49:4f:ce:2e:3d:62:
33:0d:85:ea:b2:83:e2:0d:0b:ec:fa:d0:d8:0a:e9:
2f:13:51:fc:4f:76:fa:fd:35:e4:26:29:30:a8:9f:
f0:b5:47:e8:a3:c6:7b:2a:0d:47:0e:e3:96:2c:ab:
af:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F3:93:8F:7D:54:7B:FA:6E:2F:D1:D0:06:F9:94:6F:13:9A:59:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d62a239-940a-33bf-b5b3-1eced0745d57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:67:29:94:50:83:23:d1:55:ef:3c:44:b4:5f:b9:5c:59:1b:
10:c5:43:3e:f2:dd:ba:60:00:f7:3e:21:4e:f2:f2:eb:15:a9:
02:84:42:90:eb:f4:e4:95:63:44:11:d3:43:45:db:3c:a3:07:
5d:42:aa:86:32:57:51:45:cb:af:dc:e1:ec:b2:85:61:a5:d5:
e7:4f:5a:85:2f:32:23:07:88:17:7f:47:c7:d8:85:30:33:47:
de:0b:9c:cc:cb:b4:cb:72:a1:7a:4a:85:40:a5:b6:ba:9a:11:
30:3e:cb:35:9e:3d:3f:48:95:57:60:41:88:20:d6:fc:1f:06:
cc:bf:44:10:ee:8e:97:84:5f:12:d1:ee:c5:82:8f:29:77:a3:
21:42:e8:8d:79:a8:14:a3:15:fb:95:4d:e0:4b:6a:2f:ef:f4:
9d:d5:73:2f:0f:b5:9a:a6:25:bd:5d:d8:e3:ca:e4:77:2e:06:
ed:54:09:dc:ef:3c:19:d2:89:af:2c:92:57:4a:db:de:47:e2:
0d:3d:60:5f:e4:6f:2a:d0:b2:6b:8d:da:bf:95:7a:c6:54:f6:
ea:83:af:ae:f3:d7:41:15:a1:a5:35:73:ca:6c:02:ab:75:4f:
5f:4a:66:2f:81:9e:11:0c:6b:12:51:0b:e5:79:02:9f:a8:48:
9c:0b:59:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:41:04 2026 by rpki-client