
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a902a154-0180-3953-bd01-ecf5c4182bad.roa
File: a902a154-0180-3953-bd01-ecf5c4182bad.roa (raw, json)
Hash identifier: DNyQXiQ6nn9XBKzPjsdJ9yzTTiak5C+qpaZrnpMQzP4=
Subject key identifier: 99:8C:15:CA:89:C7:8A:99:18:F5:E7:EF:B6:96:AC:EA:7F:E8:3D:CE
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F49849DE083C4300FF1DAB880
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a902a154-0180-3953-bd01-ecf5c4182bad.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 395973
IP address blocks: 104.134.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:84:9d:e0:83:c4:30:0f:f1:da:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=91bb8590-0981-49e0-b1b7-6ce7e9aa8d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:28:b6:01:d5:aa:f6:4b:c4:d8:e3:58:74:
a8:89:42:f7:40:64:7e:d4:87:c5:1b:5a:3f:4d:7d:
d7:5e:19:3a:1c:9c:6e:83:98:3a:b3:a1:cd:55:d1:
57:fd:56:8a:17:c9:29:5d:2e:53:21:19:d5:2a:10:
4f:28:c0:21:1c:9c:a5:5c:d3:4e:d9:7b:8e:10:ec:
91:a6:30:01:7a:00:5c:55:24:51:c2:ab:72:d3:bc:
94:cf:54:04:82:eb:87:11:72:7e:33:16:7c:3b:15:
11:cd:12:4b:ac:8e:1e:30:10:e3:af:e3:5f:b0:be:
7e:cf:69:9a:8f:c2:20:b1:12:a8:c5:44:89:61:dd:
95:32:5b:d4:4b:77:ad:ec:b2:a9:25:b7:46:bd:37:
9e:b5:73:ad:29:c3:32:d1:f3:5e:f6:43:f4:4e:ce:
63:41:cf:29:88:4d:22:05:dd:2c:c3:cc:52:b5:d8:
5c:72:88:d9:4f:de:9c:27:a3:4c:9b:eb:2a:3a:b7:
80:14:83:34:59:5e:ea:99:a5:67:e8:9b:05:7e:fc:
2f:08:36:41:4e:65:96:29:30:9e:3f:cd:28:b8:a5:
ab:6d:59:e8:ce:30:5f:20:51:a8:8f:3f:77:32:c5:
97:43:41:93:dc:f1:96:51:2d:d9:1c:70:cf:f7:b5:
9c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8C:15:CA:89:C7:8A:99:18:F5:E7:EF:B6:96:AC:EA:7F:E8:3D:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a902a154-0180-3953-bd01-ecf5c4182bad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:2d:83:8f:04:6b:19:3c:df:24:df:5d:6b:ca:d8:15:08:13:
61:22:6e:38:bc:e9:58:8d:9c:9d:68:56:8a:98:66:29:9a:52:
ed:9d:29:66:21:64:30:56:e1:97:a8:1a:79:a9:dd:2e:64:a4:
8f:41:0a:1d:1e:75:39:b5:5b:30:d0:4a:b6:36:fa:2c:4a:92:
ca:97:44:e4:c1:aa:57:f4:89:79:fb:65:d7:32:40:4e:fb:ca:
bd:0e:ad:7a:27:c8:e6:67:cb:f0:2e:59:a4:65:f7:fb:d4:3f:
76:c5:73:6a:0f:7a:6f:8a:f0:5c:16:4f:1e:20:1f:c6:97:06:
19:e1:3b:2e:80:f3:7a:19:b8:05:bb:cc:29:2f:fc:e7:9a:15:
ce:88:24:ed:08:e7:1e:c1:ec:d1:29:bd:1e:0d:0b:d8:d6:2c:
2c:a4:33:a0:57:95:92:c2:47:4e:0f:66:cd:46:9a:bf:51:ca:
6a:b7:ff:7a:7f:6b:01:07:20:a3:0c:73:95:3d:91:e2:2b:d0:
90:59:40:61:1c:08:84:4a:6e:54:c1:f1:f9:01:9b:d8:fd:8e:
5b:ae:3e:fa:a3:42:78:45:47:4b:64:c9:de:6a:5b:b3:55:54:
cc:c6:0d:dd:ea:11:6b:85:e2:95:07:73:44:f4:4a:52:6d:e7:
33:8b:7f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:57:58 2026 by rpki-client