
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1e59867-4b4b-3695-8339-a58015ae1912.roa
File: b1e59867-4b4b-3695-8339-a58015ae1912.roa (raw, json)
Hash identifier: XM1OxTy7OjdeKpgaGPbMHL8K4KNjmGHbB1ev8rc9tPE=
Subject key identifier: 63:0A:25:20:77:F8:53:9E:92:0D:E5:AF:97:92:16:2F:33:A9:5C:C9
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F497C5D09B5B7F09F16AB5488
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1e59867-4b4b-3695-8339-a58015ae1912.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 41264
IP address blocks: 104.132.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:5d:09:b5:b7:f0:9f:16:ab:54:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=1d189cda-1afb-4b9b-94e8-650fa771401e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:2a:74:f5:08:6a:42:32:93:c3:78:38:e2:
eb:d4:10:69:4d:20:66:95:04:28:3e:ff:b0:31:cc:
29:35:ac:ad:4f:e4:70:40:b7:aa:da:12:4f:0c:26:
6b:83:52:d6:93:f8:01:1f:7b:d6:d6:c7:86:30:07:
bf:d4:99:07:e8:58:cb:e5:25:32:15:f6:d0:77:af:
b2:04:a0:72:b2:b0:31:5b:4e:1a:d9:80:41:8c:ea:
6f:11:5f:ce:1d:7a:24:a0:b9:38:cc:e0:96:67:d0:
91:58:63:87:26:5f:2d:26:de:d0:97:ec:d5:06:21:
ba:3c:d8:2a:c6:c7:47:64:95:06:18:51:7b:1f:b9:
0a:1c:a3:77:ca:47:3a:b4:5d:d6:d4:dc:46:f1:25:
a9:df:1d:47:ae:4d:12:bc:91:f6:60:35:c9:a9:56:
c1:53:cc:bd:f5:29:46:2e:da:4a:2a:9e:74:24:f5:
82:1f:09:bf:6f:e4:3c:0c:a2:45:39:f0:b6:8e:26:
d4:db:da:c8:aa:29:96:7e:34:19:ed:b6:8e:bb:1f:
05:08:3a:4d:fe:42:8f:22:d9:e1:66:c8:fe:4b:8a:
50:8f:aa:69:f5:2c:44:54:73:67:cd:5a:3a:b3:7c:
db:0a:12:ee:36:42:68:fd:0d:e6:af:fe:aa:53:1a:
b5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0A:25:20:77:F8:53:9E:92:0D:E5:AF:97:92:16:2F:33:A9:5C:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1e59867-4b4b-3695-8339-a58015ae1912.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:55:4f:39:07:d7:f1:bb:c2:51:38:ab:02:e9:d8:ad:60:66:
76:4a:1b:9c:12:2f:e4:33:b6:6a:c7:6a:40:98:9e:5c:04:63:
32:c1:69:35:11:84:0e:91:61:98:37:c5:2f:2a:a8:69:fb:4b:
52:7c:04:f6:52:03:e4:e8:8a:c0:13:e3:af:a2:d0:ce:2f:09:
f4:87:d9:4e:59:bb:8d:b8:ba:c5:ed:97:17:ef:56:93:40:ce:
f4:7e:8e:cf:e3:ac:a5:e1:c9:01:58:8e:a6:1f:55:8c:80:de:
8c:cf:6f:bc:71:db:95:43:16:4d:db:e3:b6:ac:6c:2b:d9:61:
4e:4b:63:f8:e2:e2:74:e5:e4:f8:e9:16:25:bc:ec:92:b9:d8:
72:6c:79:0c:fb:4c:f3:81:14:bf:58:89:18:8e:f4:e6:4a:de:
e2:2d:95:d9:15:a7:48:67:b2:9e:f3:a1:06:60:9e:01:2d:6e:
ae:42:ae:72:2f:47:40:85:cb:ff:59:b3:a2:56:81:92:df:a0:
42:86:07:c5:8e:c1:bb:a7:f8:06:7a:05:19:ab:7d:cc:d8:02:
03:a9:74:c0:35:b6:3b:e9:89:0c:07:85:39:40:54:38:bf:36:
1e:d1:13:dd:5b:0e:55:2e:58:5f:d9:21:15:20:ec:45:21:ec:
fb:99:c7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:25:41 2026 by rpki-client