
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b666c2f2-ac32-3f55-83e0-109befd67db5.roa
File: b666c2f2-ac32-3f55-83e0-109befd67db5.roa (raw, json)
Hash identifier: VSb9ZJIFAeEQ9as1TTyxmix0fL9FN44xUz1S+5zl9h4=
Subject key identifier: 39:0D:40:14:7E:E8:7A:C3:B0:F0:58:10:C2:95:ED:30:87:5E:4F:36
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F497C7151F924DEF249FC8B40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b666c2f2-ac32-3f55-83e0-109befd67db5.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 41264
IP address blocks: 104.132.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:71:51:f9:24:de:f2:49:fc:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=fdbfed09-4d52-4cb9-bb23-7b652d9dd8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:d7:c9:cf:fc:80:81:27:21:05:e9:96:e7:
ba:1c:47:74:db:c4:8a:93:a7:67:f2:e9:fc:76:e7:
99:eb:c2:13:b5:5c:9c:6e:12:ea:25:ff:2b:92:e8:
5f:4b:0e:e9:20:95:87:b5:ce:3a:32:a7:be:00:6c:
b7:36:21:84:1d:0a:2c:2d:34:35:4d:2d:a9:fd:9d:
19:00:37:0c:31:66:91:d2:ba:b2:44:87:60:d2:b6:
f8:39:c6:3c:e3:92:5c:d4:f7:d5:50:ed:27:5b:45:
06:2d:d3:f6:ce:4c:c1:72:af:72:44:66:0d:f8:e1:
6f:51:85:54:c0:7d:08:31:20:72:1d:0e:6e:1a:b4:
71:38:2a:ce:58:3e:f1:9e:10:a5:77:02:5e:d1:c0:
f8:d2:7b:78:d6:8f:7b:26:30:8c:fc:78:07:21:5e:
f2:db:7a:fa:db:a2:06:8b:e9:49:02:a3:bf:6f:75:
80:73:e9:17:9b:3e:ba:ae:51:98:0c:1c:be:de:74:
93:f1:8b:61:cb:19:44:bd:fe:72:4b:98:5f:b6:bb:
d2:97:37:28:e4:03:98:3d:75:2d:91:77:9c:39:06:
4e:6e:e8:f3:66:26:2a:9e:72:56:b7:de:59:4e:3f:
37:e7:1d:01:df:ab:33:56:ca:be:da:5b:fe:20:bb:
33:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0D:40:14:7E:E8:7A:C3:B0:F0:58:10:C2:95:ED:30:87:5E:4F:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b666c2f2-ac32-3f55-83e0-109befd67db5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:51:b6:00:50:df:bc:a8:68:ae:e0:c0:c1:5d:75:2c:1a:61:
74:64:4e:14:ca:ce:c3:8d:a1:86:95:24:80:0a:4b:8d:cb:1f:
21:9e:e6:e7:61:e6:0f:06:77:04:a9:ea:aa:66:ce:5e:02:ef:
dd:78:65:4f:fc:38:fa:7b:9d:91:00:f6:a8:35:0a:53:3e:54:
7c:37:75:07:cf:a3:7a:b3:d1:3d:ca:41:f7:7e:23:cf:76:a6:
20:42:4b:47:af:ff:67:fe:1a:fa:52:e2:6e:06:ae:6e:e0:da:
e5:f4:84:6a:33:7f:7a:64:04:88:1c:4b:c7:6b:7c:ed:f4:d2:
16:93:e2:92:59:c1:a2:b7:bf:b3:b4:bb:5a:43:ae:96:b4:48:
a0:36:01:c2:ec:cd:d2:63:f9:c0:96:17:62:a7:f6:0c:40:4f:
55:66:88:99:7e:3f:0c:9f:d7:69:5a:7a:a9:da:69:40:94:33:
2d:31:8a:9d:61:78:04:12:67:cf:37:59:0b:14:87:da:b0:71:
96:f7:8c:19:7c:bf:48:bb:98:14:c6:cd:14:d7:3a:0b:f6:8e:
4e:c4:f3:b9:10:dc:b2:48:e4:0b:c6:06:ac:91:21:17:57:c2:
0c:5a:52:11:bd:da:5e:12:63:07:2f:23:c7:62:8d:49:d2:bb:
76:af:95:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:29:45 2026 by rpki-client