
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bfe96bb7-2ba7-3fb0-8b20-ed4a650ff27f.roa
File: bfe96bb7-2ba7-3fb0-8b20-ed4a650ff27f.roa (raw, json)
Hash identifier: QAW9dCbBQxMjABoafRQbTR3XUN0Zc02lkTg+LFNiFqk=
Subject key identifier: 7D:49:6B:7B:D5:68:41:C8:27:93:D2:0E:33:22:11:19:50:6A:F6:C2
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D143D8C977085ECBB94085F88
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bfe96bb7-2ba7-3fb0-8b20-ed4a650ff27f.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 395973
IP address blocks: 104.134.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:8c:97:70:85:ec:bb:94:08:5f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=8dc3ccb7-972f-4d4f-933e-755254e4707b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1e:23:13:09:dc:84:8c:9e:e1:18:35:eb:fe:
a5:44:ac:da:56:dd:05:fc:e9:0f:ec:83:49:b9:b4:
80:35:cc:a0:69:6e:2e:87:d1:00:b1:b1:b8:c8:f0:
8e:b9:40:f2:15:6e:8b:7f:55:95:bd:a4:a4:e4:92:
9d:87:c2:0d:a2:ae:b3:8a:eb:57:20:36:33:14:4c:
3a:76:52:d5:cb:e2:ad:87:a8:04:b7:b5:52:f4:41:
60:58:83:49:37:29:8a:db:5f:e3:61:a9:af:12:a8:
e7:56:b5:26:43:9a:96:55:30:3e:6d:27:46:7a:de:
8c:5c:ad:6a:0e:92:2d:20:fa:6e:15:61:71:ea:73:
0c:65:c6:22:2f:04:57:49:b9:d8:a2:32:a4:be:73:
dc:3d:a5:40:c6:6d:58:15:2f:68:9b:19:69:7f:f2:
76:01:b7:fa:d9:1e:57:9e:1b:0d:f7:5d:5f:e0:1b:
11:ef:bf:db:7c:35:c2:2e:21:ea:d0:49:5d:db:bb:
a1:7b:26:12:37:be:f0:5d:64:ef:18:ab:40:41:aa:
e9:40:24:a2:55:1e:0b:99:bd:4e:d2:d9:bb:29:00:
b9:29:87:02:33:0b:bc:3a:9c:96:cc:3b:bf:24:e9:
b6:97:21:f0:06:bc:f3:69:9f:a0:2d:a0:3a:d7:9e:
b2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:49:6B:7B:D5:68:41:C8:27:93:D2:0E:33:22:11:19:50:6A:F6:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bfe96bb7-2ba7-3fb0-8b20-ed4a650ff27f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:6b:0d:7b:e3:e7:b9:a0:75:61:7d:a4:0b:a5:0e:cf:42:e4:
bb:13:a1:c9:91:ed:d1:35:b1:e7:6e:a3:21:40:f6:3c:17:a6:
20:f2:41:7e:6d:53:11:68:11:63:d5:28:8d:67:aa:d3:2a:31:
af:a7:8b:90:b5:c1:95:75:28:c3:f8:58:b3:e7:f2:ce:5c:aa:
7f:1c:05:62:52:af:28:f1:07:e5:43:4d:2e:b0:35:cd:f1:0c:
25:40:9f:b3:78:63:b7:c0:cd:45:53:c7:98:1b:9c:a2:db:0c:
73:91:3d:c2:0e:95:a8:b8:ca:70:09:1c:b2:e8:a4:97:2f:b7:
63:e1:24:6d:6d:c9:e7:11:f3:de:7d:1a:cb:cd:f6:ca:9b:07:
24:93:7d:d9:65:07:e5:b0:72:77:7a:2f:f7:9a:81:52:06:76:
5d:51:4d:6c:61:5a:62:28:8f:47:a3:52:f4:e2:ec:b7:33:b4:
d7:55:90:97:09:a2:43:7a:bb:d9:5d:9a:b7:03:c1:32:0b:1f:
e7:22:36:13:b8:43:0d:a3:45:1b:83:f0:96:30:6b:76:1c:42:
3c:6e:89:6f:7b:c8:6a:97:7a:3d:68:21:4b:25:d5:5d:19:73:
48:6a:f0:53:ba:8a:c0:4d:17:78:9b:02:00:1d:a8:56:18:79:
3a:b5:f8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:10 2026 by rpki-client