
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d7453953-3a4c-33aa-912d-ea5f9b120dfd.roa
File: d7453953-3a4c-33aa-912d-ea5f9b120dfd.roa (raw, json)
Hash identifier: qA8BQXVREIeaKbCAJbU4nLcbbBnT4cXzHLlXdD+csHY=
Subject key identifier: 68:50:76:07:D7:16:89:3D:BC:57:65:EC:F8:86:1E:E7:CC:DA:3A:D8
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D0EA7D20E185F0B58B946D990
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d7453953-3a4c-33aa-912d-ea5f9b120dfd.roa
Signing time: Wed 04 Mar 2026 14:00:41 +0000
ROA not before: Wed 04 Mar 2026 14:00:41 +0000
ROA not after: Tue 02 Jun 2026 13:00:41 +0000
asID: 41264
IP address blocks: 104.132.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0e:a7:d2:0e:18:5f:0b:58:b9:46:d9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 4 14:00:41 2026 GMT
Not After : Jun 2 13:00:41 2026 GMT
Subject: CN=9908c730-c291-4806-ac40-cfce93314209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7c:19:32:ce:66:db:d6:98:63:b3:3e:33:96:
c1:ec:d8:ed:33:2c:27:1e:41:a0:1c:f1:c1:7b:57:
56:68:12:ec:a0:36:95:dc:ad:54:a0:ab:f6:5c:67:
74:b2:12:f4:75:13:24:71:ea:ef:a2:2b:83:4a:05:
c7:c2:88:d6:ab:21:72:5e:c7:2a:f0:e2:fa:a6:33:
01:6e:77:9e:bc:46:9f:6b:8d:46:ed:10:53:28:df:
d7:e7:53:0b:be:3e:e1:47:c4:9e:9f:a8:67:b8:66:
b9:d9:93:f7:19:3c:f2:dc:e5:d6:7f:6d:23:f2:99:
1e:03:4c:5d:43:88:ae:6e:aa:e2:a6:72:62:73:67:
8c:06:f7:bc:2b:14:0f:f5:31:93:90:ce:ef:fb:d3:
04:c7:e5:ab:3b:3a:2a:f0:91:7d:d6:10:e5:a2:55:
e3:d7:0c:f7:8b:d3:6e:26:7d:3b:8e:c8:1f:22:8b:
a7:89:01:21:de:80:6a:e2:ca:f3:47:09:9e:82:0b:
60:42:fd:ce:37:98:a4:45:f8:d0:46:81:4d:93:12:
1a:e2:6a:c4:6c:f9:0b:46:6d:44:41:7e:fe:61:4a:
fa:30:35:a7:47:b2:0d:2d:5e:5f:37:84:0b:23:f6:
23:ca:b9:d7:7c:42:ac:ff:7c:92:fe:ff:44:5d:7a:
9a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:50:76:07:D7:16:89:3D:BC:57:65:EC:F8:86:1E:E7:CC:DA:3A:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d7453953-3a4c-33aa-912d-ea5f9b120dfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:d9:85:c7:8e:87:33:b7:91:d3:96:45:33:7f:b3:fb:61:96:
35:c2:e2:ce:b7:53:2c:43:b6:2b:a0:f3:7a:4d:cb:0a:c0:53:
b2:0c:ca:1f:c9:8f:98:84:eb:06:7d:f0:c8:7c:e2:0e:df:fb:
b5:a6:5b:1f:bd:84:8e:eb:b6:f2:19:f3:19:fb:d5:bd:18:54:
10:a6:6d:6a:ec:ef:28:8d:08:0d:80:00:ab:07:62:00:54:ad:
de:4d:55:54:41:8d:ba:97:3d:b5:8b:1c:17:34:1f:df:c1:5e:
8d:93:79:c6:dc:a8:82:7e:0f:0b:ed:d6:2e:67:11:82:82:05:
08:33:a0:78:d3:4a:a9:ad:5f:5e:27:3c:ac:8e:95:e5:e8:72:
9f:27:f1:89:95:42:b5:94:67:b3:d4:12:ff:69:2f:0e:17:62:
00:5a:aa:58:e7:ec:ee:9f:1d:db:9e:ed:c3:50:be:08:3d:10:
b3:c5:74:17:bd:2c:bd:79:bf:45:6a:d3:06:7d:bb:9e:21:41:
25:be:4f:be:2a:a9:bf:33:fe:1c:a8:59:45:10:ec:bb:34:6a:
7d:71:cb:6e:6b:30:26:95:89:7c:c4:50:25:81:29:0a:4d:dd:
73:9a:4a:58:fd:8c:8e:20:17:9a:e5:09:71:26:7d:61:99:9f:
95:cc:b2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:25 2026 by rpki-client