
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/da9f656f-967e-33d1-a127-ac025a8b8520.roa
File: da9f656f-967e-33d1-a127-ac025a8b8520.roa (raw, json)
Hash identifier: oniArlfM0zmKqcM6dg7J9ZVPF68yLIalOwlPLq92cE0=
Subject key identifier: 53:6C:9C:0F:6C:E5:DB:DD:D9:5F:53:C9:B1:86:0B:DF:9B:C4:5D:44
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D143DA2B6454916D4832D4D00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/da9f656f-967e-33d1-a127-ac025a8b8520.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 15169
IP address blocks: 104.134.130.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:a2:b6:45:49:16:d4:83:2d:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=889a2420-9a69-4568-8e11-f04eba305d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ed:90:70:37:5a:a0:b1:a1:15:d7:12:38:16:
62:e2:8c:13:bd:1d:83:d5:84:65:db:f2:a6:0a:ee:
da:5a:4b:6c:dc:5a:cb:e0:b7:ca:3e:bc:35:27:3d:
2b:9b:c2:97:b8:da:f2:8a:58:f1:b5:ed:03:e0:bd:
af:1e:40:41:1c:35:a4:f5:4c:81:e0:0a:f7:22:d7:
5f:7e:a7:91:a1:30:30:91:bc:6a:6e:59:2c:66:fb:
39:4f:ea:bd:51:4d:59:a7:a9:c1:d7:55:45:12:7a:
d8:d0:21:80:4f:91:a6:e0:9e:61:58:5f:d3:78:96:
15:bd:37:9a:ed:23:da:68:57:52:61:b8:36:7e:1a:
23:cb:fc:c1:51:7e:43:fa:97:0b:27:23:b7:fc:fc:
bd:1a:ac:b3:2b:64:f4:40:81:20:28:d1:32:94:39:
a9:6b:d6:28:c6:8c:b3:a6:46:c8:49:13:48:9a:ba:
61:67:13:cc:9e:b6:e6:4f:55:99:26:cf:14:4b:c6:
86:39:18:d0:2e:f4:79:34:db:60:8e:97:c6:92:1a:
0a:61:46:93:64:d0:6e:62:a5:b0:0e:6a:f8:f6:12:
bf:e5:dc:10:47:26:12:01:93:3f:0b:6b:a3:c8:5e:
b2:16:fb:93:b5:90:37:32:b0:e0:3e:b6:77:36:72:
20:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6C:9C:0F:6C:E5:DB:DD:D9:5F:53:C9:B1:86:0B:DF:9B:C4:5D:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/da9f656f-967e-33d1-a127-ac025a8b8520.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.130.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:16:83:92:5b:2a:d2:fd:e3:8d:7f:05:2c:4f:c5:b7:5e:55:
67:c7:bc:6d:68:09:26:a1:25:7e:1a:35:c8:ce:58:2b:4d:3e:
e9:19:8f:2a:ff:04:f5:95:79:01:83:f0:e8:30:18:01:01:e3:
19:09:8e:b8:01:58:a1:2b:d1:b9:1a:ea:39:5c:2f:5a:ca:75:
99:4c:2d:ee:36:a4:7d:3b:d6:2d:96:77:e2:3c:b7:64:7b:5c:
a8:76:b7:a7:e9:09:8e:dd:4a:6b:0b:f9:0f:3b:29:31:99:8c:
39:0b:67:b5:35:d3:dd:db:21:62:04:0d:71:5f:42:16:33:6d:
2e:d2:42:97:06:bb:ef:50:7b:2e:72:93:c1:1d:e3:5c:39:79:
ea:f1:bb:f0:34:98:db:80:40:61:10:f0:1a:5b:53:c6:04:7d:
4b:e4:f2:89:55:ee:8a:d2:ac:56:25:4c:1d:d3:86:b1:08:83:
9d:54:33:1e:63:0a:93:49:60:34:8f:b8:61:57:f7:99:b9:71:
25:d5:bb:00:bf:c5:b6:ac:1f:90:59:d1:fc:ba:d6:99:03:37:
59:99:13:24:8b:81:91:e8:90:8b:3f:47:5c:7c:38:e9:82:b5:
f7:15:d2:7e:ba:41:86:24:db:29:13:86:64:d6:c0:6b:ae:b6:
65:50:5b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:28 2026 by rpki-client