
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d31434d1-6dd7-3815-8fdd-f793e950252e.roa
File: d31434d1-6dd7-3815-8fdd-f793e950252e.roa (raw, json)
Hash identifier: wjrJPYQrnUUV2GaCrIToK8WeVIIuGxB/Y8jokckA/5o=
Subject key identifier: 26:6A:36:6D:70:71:95:67:B2:21:0D:A3:81:1E:93:05:B5:4E:80:90
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F23C26EA4036793A1A792D680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d31434d1-6dd7-3815-8fdd-f793e950252e.roa
Signing time: Fri 11 Sep 2026 13:00:12 +0000
ROA not before: Fri 11 Sep 2026 13:00:12 +0000
ROA not after: Thu 10 Dec 2026 14:00:12 +0000
asID: 36383
IP address blocks: 104.135.240.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:23:c2:6e:a4:03:67:93:a1:a7:92:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 11 13:00:12 2026 GMT
Not After : Dec 10 14:00:12 2026 GMT
Subject: CN=5440770a-e5b6-493b-b0b5-c604d94e13b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:dc:0f:7a:0d:1b:15:d1:a1:71:d9:92:b1:
c3:eb:fc:85:44:69:6c:cb:7b:33:19:a9:c5:0e:f8:
f3:bf:1d:3e:37:6b:96:72:66:03:84:40:f7:aa:93:
9a:71:e3:9c:67:2a:99:8b:b5:af:52:e1:2d:a9:39:
c7:e1:8d:94:d3:f7:fb:9f:af:c7:99:25:73:ba:0a:
6b:bd:d5:63:72:26:85:71:64:e7:f9:82:2d:d9:dc:
66:ac:f7:16:f7:c6:54:99:e4:e0:c3:37:59:79:c0:
44:04:25:22:83:08:88:49:d5:85:f8:a1:92:85:44:
5e:83:fc:86:3b:9a:9b:d4:b5:c5:69:dc:ac:ed:3f:
3a:60:a0:d9:29:bd:8d:32:21:4b:d2:00:13:8a:b5:
de:8b:eb:bb:97:36:14:2f:c4:87:7b:bf:74:ea:fb:
3d:6e:6d:af:95:f8:63:b0:71:71:bb:67:15:a7:a3:
37:23:98:fe:17:00:bd:29:1a:d1:04:a8:74:d7:51:
bf:0d:cb:c5:c4:d0:2a:14:8c:db:02:27:f0:5a:7a:
fa:4c:da:4d:7a:8d:08:d8:3a:80:02:cc:62:0a:cb:
bb:ed:06:c7:ca:ed:7b:dd:d8:42:50:52:e9:20:5d:
1c:17:24:bb:9f:77:87:66:59:f2:e8:fa:69:84:01:
9b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6A:36:6D:70:71:95:67:B2:21:0D:A3:81:1E:93:05:B5:4E:80:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d31434d1-6dd7-3815-8fdd-f793e950252e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.135.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:64:93:e4:6b:d7:77:65:14:53:d2:ae:45:7f:5e:00:39:e2:
8d:af:ec:1c:a6:3b:5b:65:f3:8a:da:2a:30:4b:06:59:7d:bc:
46:09:26:72:ba:ae:c8:60:81:37:bc:d4:11:84:08:28:8c:32:
63:57:2c:ea:ef:6b:0c:db:49:4f:8a:fc:4c:c1:7f:25:36:f1:
83:8a:d5:c5:bb:3f:16:7b:1f:a1:4c:bc:7b:35:17:c5:61:8a:
cd:d1:cb:22:92:5d:b5:75:8d:a6:61:cd:72:eb:22:94:c5:0f:
57:e9:27:1b:00:ca:79:d0:20:22:8e:99:17:1d:03:9c:20:6f:
93:6b:f0:a4:78:df:54:6e:35:a4:89:d7:03:b0:13:d3:85:0b:
12:a2:ab:ea:e5:e0:1b:30:99:93:e7:1a:37:d6:97:5e:47:85:
02:92:be:20:ff:d9:b2:c2:13:d4:05:35:e7:d8:c4:b5:69:c6:
d6:fe:af:59:6e:68:77:d6:d8:a4:1e:10:51:82:74:06:05:e4:
65:75:ff:fe:99:33:e8:b3:9d:72:da:f4:2b:57:63:b7:c1:26:
3c:3f:6d:75:17:11:10:b1:15:e3:6c:0d:e2:38:e0:ce:b8:b9:
7f:17:6e:79:31:69:4b:69:e9:28:a9:05:4d:26:6e:b6:0b:43:
cb:08:ce:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:56:21 2026 by rpki-client