
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba84198b-638f-37a4-9c37-d994b793bec9.roa
File: ba84198b-638f-37a4-9c37-d994b793bec9.roa (raw, json)
Hash identifier: VH+nYTUfTjbqEpehza85nwZwNTKPXViGQEIa4sy2NMY=
Subject key identifier: 4D:4E:FC:69:47:F3:39:8E:21:DE:C5:32:C5:F3:51:A4:38:2A:0F:56
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D1172926935CE4BEEB576A740
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba84198b-638f-37a4-9c37-d994b793bec9.roa
Signing time: Thu 05 Mar 2026 14:00:40 +0000
ROA not before: Thu 05 Mar 2026 14:00:40 +0000
ROA not after: Wed 03 Jun 2026 13:00:40 +0000
asID: 41264
IP address blocks: 104.132.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:11:72:92:69:35:ce:4b:ee:b5:76:a7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 5 14:00:40 2026 GMT
Not After : Jun 3 13:00:40 2026 GMT
Subject: CN=fbd7c394-dc68-47ed-ae8a-48f93db42886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:bc:cf:cf:40:f1:7b:8b:2c:fb:93:94:64:
a7:f5:b7:09:24:e6:46:0b:c1:dc:fe:57:7f:ae:20:
57:de:70:a7:ae:6b:ab:55:6b:58:51:07:79:f2:04:
a8:b9:39:89:d6:15:12:f9:96:73:e2:f9:1f:94:c3:
2b:89:34:20:22:26:77:84:39:68:e7:ec:bc:81:f8:
1b:79:9d:36:49:14:8c:df:54:e2:7e:7c:57:c6:07:
85:18:15:00:9f:36:66:6a:cf:b6:62:d0:b5:f7:6b:
74:9c:a0:32:63:11:c8:53:92:43:e8:aa:95:23:2e:
b0:02:09:94:0e:9e:7a:58:f1:59:50:40:a4:7f:e5:
99:db:96:2a:c5:67:89:5b:12:4a:65:da:f1:75:e6:
8e:ac:4c:49:da:44:23:a4:f0:ca:97:a3:11:a7:04:
04:d3:f3:53:4d:cb:8a:7a:46:f2:70:33:01:2e:8f:
c1:67:49:20:2e:c8:37:60:5b:f4:db:f9:4e:e7:9f:
6d:e5:24:2c:8b:96:5d:20:41:c3:b2:9f:39:a2:4f:
a9:7b:0a:51:48:1b:a2:e6:d3:65:95:66:22:65:2e:
a6:f2:87:61:b1:ca:27:45:13:f2:82:8c:5e:95:40:
2d:3a:7b:4f:4c:16:ed:dd:67:ba:90:5f:f4:1d:ea:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4E:FC:69:47:F3:39:8E:21:DE:C5:32:C5:F3:51:A4:38:2A:0F:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba84198b-638f-37a4-9c37-d994b793bec9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:5a:a9:d7:e6:a1:71:94:32:f3:63:74:ce:e8:84:9d:29:a9:
ba:c1:84:c2:c8:07:18:81:49:64:ae:54:2f:3f:3d:a9:3e:22:
ac:3d:73:83:94:58:54:2b:fd:69:45:77:03:26:f0:89:8d:33:
8e:6c:42:5f:7c:d1:e9:fc:f5:25:16:3d:b8:41:fc:e3:43:5f:
06:b9:13:8c:a0:e7:f4:a9:f8:cb:d0:06:dc:a8:48:97:aa:7a:
a4:79:99:b9:1b:5c:1e:56:48:3b:b1:7b:ab:45:57:96:0d:6c:
72:b5:e8:8a:06:68:82:8a:d6:e3:32:3f:67:fa:18:27:fb:10:
45:22:13:e9:a2:95:ee:23:f8:db:68:e0:b7:94:0e:e8:9f:8d:
e0:ac:a5:79:61:87:d0:1d:3a:24:f9:bf:a1:92:45:c1:47:c9:
08:ed:ee:6f:ea:44:43:a4:73:d9:7b:76:a5:99:67:c6:cf:a3:
91:1d:e0:bb:1f:98:b6:b7:f3:59:a7:3d:37:e2:7a:6a:3d:4e:
f3:36:d3:35:54:94:49:41:7f:eb:ec:f6:44:3c:42:d3:01:24:
b9:9e:f3:97:be:61:26:06:4b:40:a5:92:80:19:15:e7:9b:d5:
81:be:a5:99:47:8e:1f:ef:f7:30:58:ff:d4:c8:31:05:2f:f8:
c7:4e:0e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:08:51 2026 by rpki-client