
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d91b651f-2613-3750-8f9d-63f0bcb2abac.roa
File: d91b651f-2613-3750-8f9d-63f0bcb2abac.roa (raw, json)
Hash identifier: hIRzqRH0xqz/DlI0mDKPtSNj4j4lVP03GLs/SdUxfHU=
Subject key identifier: C0:59:AB:CA:2D:66:FB:54:11:B9:CC:EB:C6:A6:B1:AE:8F:3C:E8:2E
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F497C8DC48AFE45D469D91610
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d91b651f-2613-3750-8f9d-63f0bcb2abac.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 41264
IP address blocks: 104.133.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:8d:c4:8a:fe:45:d4:69:d9:16:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=e84d0dc4-f29b-4754-89a6-8f8d365c8997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:73:6e:6d:ad:9c:5b:55:85:b7:06:fd:6b:72:
52:00:ef:7a:f4:45:9d:a9:3d:67:37:5f:08:46:c8:
c9:6c:49:a5:3d:48:d7:71:30:bf:16:7b:7f:a8:f7:
db:42:bc:4b:d8:71:90:4f:76:d9:d6:04:4a:29:a9:
24:a6:56:14:5c:a1:f5:73:21:df:42:1e:35:9a:c6:
fc:f9:95:2a:ee:d6:68:de:77:1a:2c:e4:3e:ed:55:
d0:32:df:39:b9:66:dc:3f:a4:79:b4:c2:b0:d9:5a:
a5:8a:86:4f:0a:a7:08:99:36:5d:9d:6f:10:80:bf:
a8:97:ea:6e:50:3c:bb:2a:15:6e:5c:aa:e4:c6:b9:
6f:37:75:91:64:73:0d:48:62:94:b5:23:d2:d2:aa:
ea:c3:3b:d0:2d:2f:27:00:0b:eb:55:86:50:de:84:
ea:af:f8:dd:e4:56:cf:07:f5:39:5a:f2:9e:70:1c:
e1:7c:e9:d7:48:a7:d4:6c:82:93:f0:3e:5b:cd:74:
8d:68:30:72:6d:08:6b:48:67:f3:e2:6b:30:8f:31:
1f:c9:f2:c6:90:2d:87:a4:7a:2e:bd:9e:b2:d3:8f:
3a:b7:54:20:40:4d:3d:8b:12:00:2b:e5:9d:63:ed:
67:35:c7:f9:e4:57:4f:b3:93:dc:a0:b1:78:a8:28:
fb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:59:AB:CA:2D:66:FB:54:11:B9:CC:EB:C6:A6:B1:AE:8F:3C:E8:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d91b651f-2613-3750-8f9d-63f0bcb2abac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.50.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:33:bc:ef:39:12:24:ec:02:2e:58:6f:3f:af:e4:44:fc:14:
e4:63:fa:da:ac:d2:e7:88:d6:3b:88:69:a2:cc:d0:57:71:31:
9b:1d:ca:c2:40:80:3e:51:44:81:95:5a:32:9e:37:da:70:32:
44:eb:41:fa:7a:a1:c0:18:0a:00:a7:f6:4c:ec:ad:91:b9:f6:
91:52:78:ad:bd:9d:46:10:ef:fe:f8:64:57:65:2d:f8:37:c3:
99:e3:76:6c:d8:71:16:e1:e2:17:5d:73:fd:10:7c:20:94:a0:
b2:5d:ec:d5:62:4e:78:c9:29:b6:7c:58:01:59:50:b3:76:b7:
de:a2:7f:7d:77:15:ca:bd:83:2f:a7:bf:77:16:6b:f2:1e:09:
47:3d:cb:c7:e3:9d:97:52:db:08:88:c4:22:ee:57:b3:8e:3e:
82:45:c5:5b:17:71:0e:23:0d:f8:c8:92:fe:a0:9a:e1:e6:b2:
fa:0e:da:40:ee:36:28:7c:00:fe:8b:5a:64:6c:53:ad:8e:1b:
bb:58:f5:15:63:1b:9c:dc:88:13:1f:53:bb:f4:6a:2d:5e:35:
f3:77:49:d6:d9:b5:38:77:a2:c7:9b:4d:6c:75:a8:51:c5:5b:
d5:6d:7c:0c:96:29:12:9d:97:45:76:8d:13:a0:20:69:47:5a:
c7:44:84:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:15:43 2026 by rpki-client