
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ca6162f7-4988-3210-a8e6-0a80099496a5.roa
File: ca6162f7-4988-3210-a8e6-0a80099496a5.roa (raw, json)
Hash identifier: yWLyecFLkkCdvPFAp8Q4tFhm3+zuNrpTxZ521wKR4Vg=
Subject key identifier: 70:41:FF:3E:98:42:A4:9D:FA:C2:C5:F2:6F:12:A4:08:06:3A:A0:E8
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D1F4A49713970F3E27E88BD00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ca6162f7-4988-3210-a8e6-0a80099496a5.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 15169
IP address blocks: 104.134.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:49:71:39:70:f3:e2:7e:88:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=a9f7761f-9e6c-4774-afaf-96d206ff8ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:f4:a1:28:f6:c5:ab:04:57:a9:f2:4f:55:
7e:c6:05:d8:19:13:11:79:13:fb:2e:9d:14:34:dc:
46:2f:ee:ae:0c:6a:5f:43:ff:13:34:50:27:fc:3d:
a6:2d:09:8b:70:2a:bd:d8:a5:88:bb:91:7a:4d:bf:
cc:59:61:c6:8c:6c:07:0f:ca:cf:ce:57:31:33:c3:
4c:d5:94:b5:28:9c:5e:61:41:69:e9:46:ca:13:f6:
5e:1c:00:e2:7b:cb:5d:d4:33:0d:48:f2:ee:b5:b6:
ec:e2:dc:90:19:b4:0c:a4:02:03:41:88:78:09:ff:
bf:81:40:f5:be:1f:b8:b2:8a:bc:47:43:81:d7:63:
ac:76:02:33:96:cb:06:a4:f8:61:1a:1f:08:7f:5c:
f2:b5:28:04:1f:1a:ea:6b:08:d2:bc:71:a7:e3:de:
cc:16:21:ed:46:1c:26:ec:6a:e1:ab:83:6c:d4:b4:
f2:a8:1c:47:54:6c:80:83:c3:f1:40:3a:dd:02:75:
d7:fe:14:8f:4e:01:da:84:b2:34:17:8a:00:7a:77:
d9:97:e0:3b:3c:f3:88:b4:40:b2:dc:ed:df:f1:d2:
79:c1:bc:6a:70:3c:69:31:ac:70:2d:a5:ca:20:8d:
be:b0:89:3e:b9:a1:68:ed:77:a6:21:22:6c:32:60:
e9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:41:FF:3E:98:42:A4:9D:FA:C2:C5:F2:6F:12:A4:08:06:3A:A0:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ca6162f7-4988-3210-a8e6-0a80099496a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:c5:66:b0:19:21:e4:76:2c:fe:58:26:01:b7:ac:2b:8f:e2:
bb:e3:0c:a4:b6:1e:83:ef:92:4a:4b:76:ab:b1:68:1a:21:9c:
13:1e:e9:45:ec:05:f1:c0:14:58:7d:8f:29:af:21:fc:2f:30:
06:41:b4:fe:18:81:b1:ca:bc:a1:86:a3:8a:b1:b1:f6:e8:e0:
d9:97:17:f6:48:4d:d1:06:ac:6c:0c:c4:f3:97:27:64:3e:df:
bb:b7:8c:84:44:ba:ea:74:68:5b:e0:9d:12:30:d0:3f:c7:f6:
92:89:6d:b7:2e:53:62:2b:f2:a9:dd:ce:ef:4c:ca:55:6d:62:
c5:1a:55:0e:92:5c:17:53:7a:bd:59:c8:8f:db:fc:91:5b:55:
a8:2d:ac:2c:8b:da:31:d5:ce:56:da:b7:d7:84:8b:63:59:7c:
85:f2:4d:c2:d1:f0:e6:de:84:a2:df:bd:89:8b:69:7a:c7:4c:
ef:7a:84:9a:4d:1d:41:ed:1f:54:ed:48:db:d1:11:5b:39:a9:
8b:f8:30:36:da:f5:98:d5:ce:bd:db:a0:f7:11:22:35:46:ee:
18:3e:6f:cd:0b:2f:12:91:3e:86:c3:07:9f:89:a3:12:43:a7:
30:35:27:82:03:0b:0c:ce:90:3e:8a:06:2f:1e:07:1d:fc:86:
4b:bc:6c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:20:33 2026 by rpki-client