
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9df81f11-d317-39a4-ab1d-325da3db03ca.roa
File: 9df81f11-d317-39a4-ab1d-325da3db03ca.roa (raw, json)
Hash identifier: v4EnK8+5PkAtXk1z/vPt3XEaofkuVWjQGPsHoz9vKRo=
Subject key identifier: 5E:AA:4A:D7:FE:97:BB:2E:DC:2A:AD:E2:A2:CE:14:54:7F:D4:98:BF
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D11728573056D61138FC04180
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9df81f11-d317-39a4-ab1d-325da3db03ca.roa
Signing time: Thu 05 Mar 2026 14:00:40 +0000
ROA not before: Thu 05 Mar 2026 14:00:40 +0000
ROA not after: Wed 03 Jun 2026 13:00:40 +0000
asID: 41264
IP address blocks: 104.132.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:11:72:85:73:05:6d:61:13:8f:c0:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 5 14:00:40 2026 GMT
Not After : Jun 3 13:00:40 2026 GMT
Subject: CN=9b490dd1-266d-4862-999e-3c5e610da6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:f3:a0:45:7b:d9:21:ae:31:29:28:6a:38:
0d:9e:f1:fd:56:bb:28:fa:3c:fb:f3:19:d2:72:67:
0f:74:12:9e:86:22:e0:69:34:cb:eb:54:2d:5e:d5:
ee:a9:fa:63:9e:55:76:f5:45:e6:af:0d:c3:20:84:
de:09:18:dc:f9:44:e2:18:de:38:a7:55:d8:01:3f:
9e:4f:48:09:1b:aa:99:d8:15:73:06:bf:4b:e1:47:
c2:79:0d:2b:b4:1b:36:aa:b6:1f:98:e4:f8:11:4b:
07:2a:65:e2:a2:81:64:35:9a:8d:e0:bb:8b:e5:0c:
35:e8:37:63:21:21:22:c0:37:17:ac:af:85:87:d8:
de:e3:91:dc:62:58:1d:e9:c2:ed:ea:40:ce:fc:75:
14:40:ef:95:e2:6a:52:17:af:0c:d9:4c:f0:ed:52:
0b:d7:08:01:63:06:d3:45:33:42:19:77:f1:ad:9c:
24:51:90:ca:86:98:52:80:54:dc:df:d1:ac:82:85:
fe:a6:ed:35:d3:4c:09:db:81:e9:ca:ae:5f:e5:06:
10:a4:f5:25:d6:cf:6a:0c:e3:67:ec:cc:69:39:f7:
1e:e0:7b:fb:d9:c1:3a:c6:a3:5d:63:fc:95:db:96:
7e:83:f6:66:53:72:50:03:7a:95:8a:6a:cc:fd:8f:
25:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AA:4A:D7:FE:97:BB:2E:DC:2A:AD:E2:A2:CE:14:54:7F:D4:98:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9df81f11-d317-39a4-ab1d-325da3db03ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:4c:3e:a9:1e:f4:f2:a2:07:7d:99:72:35:6a:6b:68:d7:3c:
7c:de:f7:af:39:ca:7f:2d:fd:68:fb:50:78:67:0c:6a:29:33:
15:ff:72:44:a2:f0:50:df:da:0d:bb:c2:49:8f:a5:23:82:62:
6c:56:95:f9:da:38:4d:a3:a3:91:80:c3:da:2c:6d:57:38:e9:
bf:b4:47:47:23:4b:c4:c0:54:fa:d8:44:d3:fb:14:6a:cc:ba:
3f:77:fd:92:00:a5:49:4b:c0:2a:fc:2b:59:ad:46:ee:cf:97:
83:b9:76:f6:c9:3e:64:46:3a:28:44:82:13:d3:02:2b:60:be:
67:45:74:89:8f:77:84:3d:33:19:fe:03:ff:ed:39:f2:5f:72:
3e:f3:c2:19:01:9f:28:ea:2d:49:90:8b:6b:ea:1f:c0:6a:ad:
87:5c:26:ad:52:75:5f:9d:d8:ca:31:10:92:5b:35:d1:ef:93:
92:6b:1b:d5:db:7f:bd:73:46:55:b5:75:cb:66:32:e5:91:7f:
ff:f9:3c:e9:17:ea:74:bf:92:db:08:d9:94:25:d3:d2:b6:be:
5a:3e:03:cf:d2:7a:e5:09:48:a9:73:92:f5:82:98:91:2c:7c:
1d:0e:60:c6:86:78:ef:69:03:dc:bd:8f:97:70:9b:a8:6f:26:
b2:74:a1:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcoVzBW1hE4/AQYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk
OWI0OTBkZDEtMjY2ZC00ODYyLTk5OWUtM2M1ZTYxMGRhNmQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcbzoEV72SGuMSkoajgNnvH9Vrso+jz78xnS
cmcPdBKehiLgaTTL61QtXtXuqfpjnlV29UXmrw3DIITeCRjc+UTiGN44p1XYAT+e
T0gJG6qZ2BVzBr9L4UfCeQ0rtBs2qrYfmOT4EUsHKmXiooFkNZqN4LuL5Qw16Ddj
ISEiwDcXrK+Fh9je45HcYlgd6cLt6kDO/HUUQO+V4mpSF68M2Uzw7VIL1wgBYwbT
RTNCGXfxrZwkUZDKhphSgFTc39GsgoX+pu0100wJ24Hpyq5f5QYQpPUl1s9qDONn
7MxpOfce4Hv72cE6xqNdY/yV25Z+g/ZmU3JQA3qVimrM/Y8lKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF6qStf+l7su3Cqt4qLOFFR/1Ji/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOWRmODFmMTEtZDMxNy0z
OWE0LWFiMWQtMzI1ZGEzZGIwM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADxMPqke9PKiB32ZcjVqa2jXPHze9685yn8t/Wj7UHhnDGopMxX/ckSi
8FDf2g27wkmPpSOCYmxWlfnaOE2jo5GAw9osbVc46b+0R0cjS8TAVPrYRNP7FGrM
uj93/ZIApUlLwCr8K1mtRu7Pl4O5dvbJPmRGOihEghPTAitgvmdFdImPd4Q9Mxn+
A//tOfJfcj7zwhkBnyjqLUmQi2vqH8BqrYdcJq1SdV+d2MoxEJJbNdHvk5JrG9Xb
f71zRlW1dctmMuWRf//5POkX6nS/ktsI2ZQl09K2vlo+A8/SeuUJSKlzkvWCmJEs
fB0OYMaGeO9pA9y9j5dwm6hvJrJ0oTA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:26:02 2026 by rpki-client