
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a9ad03b2-e6a3-3f75-9571-92fbe73a4275.roa
File: a9ad03b2-e6a3-3f75-9571-92fbe73a4275.roa (raw, json)
Hash identifier: 64OJtT6M1F3uwFP4zN8lVZDseJ/E8wga/QBpkHnfR8g=
Subject key identifier: BB:F6:87:86:C9:24:03:86:74:05:F6:CC:2E:C9:F4:46:70:60:5B:09
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584DA81589CE083098373EA81700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a9ad03b2-e6a3-3f75-9571-92fbe73a4275.roa
Signing time: Tue 28 Apr 2026 13:00:30 +0000
ROA not before: Tue 28 Apr 2026 13:00:30 +0000
ROA not after: Mon 27 Jul 2026 13:00:30 +0000
asID: 36411
IP address blocks: 104.135.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a8:15:89:ce:08:30:98:37:3e:a8:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Apr 28 13:00:30 2026 GMT
Not After : Jul 27 13:00:30 2026 GMT
Subject: CN=3e42eccb-32b1-4aa9-aaa6-248e735c4bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b0:ea:0d:1d:56:04:8b:13:56:af:a5:7a:06:
7b:b1:8f:21:b2:8e:29:3e:cd:97:28:10:3d:7d:22:
54:d9:5a:34:ea:60:47:88:39:c0:9d:ab:8c:e8:b4:
1f:55:30:57:46:f2:c2:0b:0e:0b:5e:c4:96:dc:dd:
c9:de:a3:78:87:16:5a:52:42:a2:c6:10:8a:c5:24:
d7:37:5f:e5:be:39:90:8c:2f:4c:4b:63:a3:8c:be:
54:2b:f2:7f:c6:78:c7:4a:75:21:21:8a:1e:d3:80:
62:92:2b:e6:b8:13:22:5f:63:3b:05:77:5c:fb:1d:
fe:34:f8:02:95:31:c1:de:ef:09:c1:2e:02:47:d4:
5d:f2:ce:81:90:f6:d8:70:28:b3:11:10:88:54:84:
25:31:b6:7d:4f:0c:0b:1d:5f:95:0a:3a:af:5d:80:
e4:1e:05:c3:4f:3b:f0:f5:d6:7e:70:a5:be:d5:be:
62:f9:e8:1b:ad:0f:d2:83:82:3a:1e:15:65:7e:bb:
c4:89:59:08:85:10:9b:fc:7f:c4:64:5b:c6:ac:b5:
6f:dd:71:38:0a:0c:bc:ae:93:4b:1f:88:5a:c9:c6:
97:ff:bc:69:a9:9c:7b:fd:8c:90:52:d3:24:12:d0:
e0:50:27:e6:04:3e:bc:1f:76:d9:e0:20:9b:61:09:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F6:87:86:C9:24:03:86:74:05:F6:CC:2E:C9:F4:46:70:60:5B:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a9ad03b2-e6a3-3f75-9571-92fbe73a4275.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.135.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:48:4d:c8:c9:8c:6c:dd:2b:14:f4:38:be:7f:c5:8f:45:46:
61:49:53:d6:8b:b0:d5:55:38:a2:1b:3b:63:43:d9:91:7d:2e:
de:97:45:97:ac:59:f6:4f:9b:83:41:a5:6d:e9:37:4b:f2:a3:
08:ee:b9:22:5b:f9:ad:27:14:1a:7c:3a:77:7a:11:02:38:9c:
58:b0:9e:54:ec:11:7b:09:38:29:b1:dd:41:1c:e9:db:44:05:
7b:00:22:00:5c:24:f7:c9:75:00:03:79:14:03:75:50:8c:4b:
50:03:3b:5f:e5:2f:69:3b:d0:bd:a7:90:81:e2:9d:d0:ce:45:
6e:2d:26:1e:8a:1f:55:92:b7:66:fd:d3:08:d2:13:fe:d5:68:
0d:96:c7:8f:23:72:0f:77:46:22:05:ae:2e:d2:d7:c9:2f:af:
91:fa:fa:b4:27:fc:9b:66:59:27:e1:11:a7:a0:63:65:b7:0e:
7a:32:78:9d:90:59:41:29:31:68:e9:d7:a7:30:19:65:5d:7e:
2d:4a:0d:d0:ef:51:ee:4b:9d:f0:fe:3d:43:79:24:c4:e1:fb:
a2:b8:87:69:6b:de:08:3b:25:10:7b:00:08:d4:fa:c6:2f:a5:
02:fe:45:54:6c:21:83:01:52:88:8b:88:34:17:6c:2f:54:1b:
74:02:59:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:35:58 2026 by rpki-client