
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dba63746-4af5-386b-a8b8-030d2c8cd4ea.roa
File: dba63746-4af5-386b-a8b8-030d2c8cd4ea.roa (raw, json)
Hash identifier: YP3Tm35DXfEwwPqFFlht+/KexgwdF9/85YbQsJC1L7I=
Subject key identifier: E9:CE:79:67:A6:82:26:11:C9:68:73:76:DA:05:F7:67:8D:88:D1:DC
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F4984A39A5AA1A72F3B552D40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dba63746-4af5-386b-a8b8-030d2c8cd4ea.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 395973
IP address blocks: 104.134.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:84:a3:9a:5a:a1:a7:2f:3b:55:2d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=83d3ba57-dfdb-4d5f-84cb-828cd2709f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:e2:85:67:a3:38:3a:f5:8e:bb:f3:5f:a4:
9d:6c:07:e2:46:53:f8:dc:fb:26:e5:db:ee:ca:c6:
f7:a3:d7:83:b0:2d:44:d1:f4:99:48:21:58:15:80:
03:ef:5a:22:f9:e2:77:6c:d5:b2:e9:96:1d:56:6d:
e0:36:2d:27:9d:31:5b:ed:30:57:bf:a9:34:19:75:
eb:3f:19:79:ce:e6:40:69:f6:5c:59:fe:79:6b:5b:
00:d4:f1:7a:3e:be:c5:31:c4:21:90:92:53:5f:c1:
eb:23:fd:c1:fe:66:76:4e:a2:36:29:31:09:0d:dc:
be:f7:9a:00:4e:dc:bb:0e:0e:b2:10:8b:21:44:09:
a6:45:f4:ff:b5:e4:b2:7a:2d:4b:8b:bd:c2:fc:73:
eb:01:b2:e1:9b:a1:36:be:43:52:f8:15:b1:36:94:
39:8f:35:11:95:a5:97:8f:03:95:c7:a5:d6:c7:dc:
43:8f:26:42:81:91:4f:bd:c4:61:e2:d9:75:80:41:
57:1a:1a:f4:0a:96:c8:57:bf:35:7e:2a:77:04:d4:
85:1a:37:70:22:35:49:16:78:52:da:03:ba:2d:da:
7e:fc:45:3d:b8:33:91:aa:82:db:9b:12:7b:69:08:
9f:d2:42:0d:30:42:99:a0:d3:b7:db:c2:aa:33:d6:
d9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CE:79:67:A6:82:26:11:C9:68:73:76:DA:05:F7:67:8D:88:D1:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dba63746-4af5-386b-a8b8-030d2c8cd4ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:fd:0a:74:7c:96:3a:af:90:6f:fa:5e:1b:6b:de:42:8c:0b:
b2:8b:24:d8:f8:ca:a2:42:b9:86:2c:72:11:05:7b:ef:4d:b3:
f6:fd:98:05:58:f2:7c:33:56:d8:67:c6:2b:87:04:52:d6:7d:
38:6d:bf:17:d3:ab:de:eb:2b:4b:af:09:f5:8d:b2:6c:26:58:
f0:b5:31:af:f5:4e:22:64:af:b9:9d:08:35:e2:56:90:0c:cd:
aa:76:c7:06:3b:6d:14:ca:a8:66:ab:e1:a1:6c:2b:40:73:9d:
71:9b:bb:68:99:b0:b1:be:5a:1e:26:7f:87:1a:25:18:5e:f5:
6d:fe:e3:ee:be:0a:a0:ae:f8:b8:82:bc:06:83:3d:a9:de:0a:
44:20:91:51:93:92:85:57:87:b9:e2:c8:27:df:bc:29:85:27:
cb:51:c2:1f:9c:d9:b2:0e:65:04:78:85:a1:71:2c:65:20:95:
92:13:2c:ea:84:8b:e1:2d:93:a8:d9:16:04:23:e3:50:61:9d:
53:4d:c0:e2:29:41:51:6f:83:a2:04:6d:c6:1b:e6:d6:d2:7f:
12:72:26:20:c5:a8:f0:7a:33:36:18:21:92:dd:13:6e:df:99:
3a:ed:74:3d:d2:cb:28:66:59:86:3b:cd:8f:95:9f:cd:aa:22:
a3:03:c4:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhKOaWqGnLztVLUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ODNkM2JhNTctZGZkYi00ZDVmLTg0Y2ItODI4Y2QyNzA5Zjc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvzihWejODr1jrvzX6SdbAfiRlP43Psm5dvu
ysb3o9eDsC1E0fSZSCFYFYAD71oi+eJ3bNWy6ZYdVm3gNi0nnTFb7TBXv6k0GXXr
Pxl5zuZAafZcWf55a1sA1PF6Pr7FMcQhkJJTX8HrI/3B/mZ2TqI2KTEJDdy+95oA
Tty7Dg6yEIshRAmmRfT/teSyei1Li73C/HPrAbLhm6E2vkNS+BWxNpQ5jzURlaWX
jwOVx6XWx9xDjyZCgZFPvcRh4tl1gEFXGhr0CpbIV781fip3BNSFGjdwIjVJFnhS
2gO6Ldp+/EU9uDORqoLbmxJ7aQif0kINMEKZoNO328KqM9bZKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOnOeWemgiYRyWhzdtoF92eNiNHcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZGJhNjM3NDYtNGFmNS0z
ODZiLWE4YjgtMDMwZDJjOGNkNGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAP9CnR8ljqvkG/6Xhtr3kKMC7KLJNj4yqJCuYYschEFe+9Ns/b9mAVY
8nwzVthnxiuHBFLWfThtvxfTq97rK0uvCfWNsmwmWPC1Ma/1TiJkr7mdCDXiVpAM
zap2xwY7bRTKqGar4aFsK0BznXGbu2iZsLG+Wh4mf4caJRhe9W3+4+6+CqCu+LiC
vAaDPaneCkQgkVGTkoVXh7niyCffvCmFJ8tRwh+c2bIOZQR4haFxLGUglZITLOqE
i+Etk6jZFgQj41BhnVNNwOIpQVFvg6IEbcYb5tbSfxJyJiDFqPB6MzYYIZLdE27f
mTrtdD3SyyhmWYY7zY+Vn82qIqMDxNg=
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:11:50 2026 by rpki-client