
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a980c0a9-4716-35b0-a698-3c9141bde590.roa
File: a980c0a9-4716-35b0-a698-3c9141bde590.roa (raw, json)
Hash identifier: uycNaLa223OvPw0rSOto0aPX/fgOIA0SqDW2G0cr+oc=
Subject key identifier: 1C:0D:9C:B6:3E:69:B7:37:9A:EA:2A:38:0F:40:0D:1B:D3:C6:07:8E
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F4984B72AD63A6864DE5F8D00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a980c0a9-4716-35b0-a698-3c9141bde590.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 395973
IP address blocks: 104.134.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:84:b7:2a:d6:3a:68:64:de:5f:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b0cf4977-ac3a-4fbc-89c8-268c25fd464a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:db:ca:4b:e5:c2:66:92:cd:c7:c2:05:2d:
8a:38:3b:c4:c4:35:ca:67:62:32:47:9d:70:1b:6c:
9e:f8:77:95:56:77:11:73:ba:a4:ba:cf:89:0d:74:
ed:4d:5a:38:45:22:de:dd:07:cc:0d:59:fb:56:05:
3e:ae:93:f7:15:cb:ab:36:00:30:f9:0c:9f:8a:5c:
67:c2:5f:ad:07:82:36:98:c9:2c:96:50:22:0b:e6:
32:23:a2:ce:2d:9c:d6:04:55:35:f7:b8:7e:44:55:
6b:71:79:15:8e:5a:91:36:d5:73:0e:f8:66:52:2a:
63:96:29:d7:99:f8:f4:e4:f0:9d:df:23:2d:ce:be:
81:5c:a8:86:b5:67:b6:53:61:42:94:56:89:7d:ec:
e9:4c:24:a6:85:51:3b:25:13:95:d0:2d:13:cf:52:
01:22:d4:37:5f:fe:a3:f6:a6:4a:0b:12:6f:a1:d2:
86:e7:29:0a:75:69:4c:de:cd:70:dc:9a:03:0c:92:
c0:eb:c5:3e:57:2b:a0:01:ee:7b:0e:b0:b1:24:b6:
9b:de:8e:56:1c:fe:ff:da:2a:b4:5f:d5:42:a5:19:
d5:8f:d1:33:00:4f:f9:fe:71:eb:8e:71:60:63:0f:
18:dd:da:35:ae:81:70:7e:f8:94:48:f2:9d:7d:d3:
31:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0D:9C:B6:3E:69:B7:37:9A:EA:2A:38:0F:40:0D:1B:D3:C6:07:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a980c0a9-4716-35b0-a698-3c9141bde590.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:52:ac:b4:a9:30:f9:4c:04:06:62:a3:b6:c1:88:50:5a:e9:
b1:14:57:a3:21:2a:6b:17:d2:a7:72:97:37:ff:a3:54:c5:ef:
e8:fd:29:0c:ac:f3:1e:9b:12:a3:d7:85:d2:22:0c:37:a7:9a:
e0:3c:e3:36:17:7e:9c:b4:6b:94:74:82:83:8b:7e:7e:06:ea:
88:24:b9:12:41:af:e4:7b:4e:f2:ba:da:4d:25:02:b8:e8:0f:
31:15:14:f0:e8:c4:a5:58:de:97:ad:0e:c3:db:31:1d:49:fc:
df:bc:e0:19:f0:22:24:08:85:34:09:5f:36:88:c3:a4:30:64:
53:27:35:3f:d2:73:fc:8f:5f:c7:f9:36:fb:0c:3b:8c:f4:3c:
d1:5c:a4:ba:38:71:61:1a:52:62:17:90:d3:1e:b4:2e:37:b1:
49:4a:71:42:e9:d9:b0:d8:3f:3e:49:7d:b3:f2:5e:7c:7b:79:
3d:9f:09:a7:23:7b:46:c0:80:39:d8:76:b9:e0:d8:0a:d5:64:
60:57:bc:75:d4:ef:1b:61:77:07:30:dd:ac:9b:e3:9a:b8:10:
3c:67:56:bc:6f:d7:9e:65:b2:61:2e:b9:a6:b4:c1:df:47:4c:
c6:55:a4:43:e6:8f:5d:1f:15:14:74:6c:7c:b2:55:5c:09:93:
e9:67:4d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:14:14 2026 by rpki-client