
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfa07786-4d85-30e0-967d-c30014edb829.roa
File: dfa07786-4d85-30e0-967d-c30014edb829.roa (raw, json)
Hash identifier: hhpAz6+drEggcOPZgiic10XrpcvqNvvlk0go6KPXPqY=
Subject key identifier: EB:24:65:C9:C4:21:11:72:6A:DE:3C:32:3A:FA:5B:57:00:FD:84:45
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F4984C1B4E35752E3D0B78F00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfa07786-4d85-30e0-967d-c30014edb829.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 15169
IP address blocks: 104.134.186.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:84:c1:b4:e3:57:52:e3:d0:b7:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=89027c60-8fb3-47f3-96f4-84c05fbacfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:03:b3:be:b7:ae:5a:d8:1f:b2:50:5b:4b:aa:
f8:ab:98:99:16:66:86:b8:d3:63:3f:fb:d4:c4:64:
be:2a:21:3b:12:21:45:bf:f8:df:4f:58:db:d8:aa:
10:05:ee:ab:34:49:cb:4a:a2:13:11:9c:80:c1:fe:
d8:ff:bf:e8:4b:9d:b2:e2:d5:7d:22:0d:67:2f:58:
bc:0f:f4:4c:68:74:47:cb:47:99:78:82:6d:30:c4:
f0:39:06:f2:8e:3b:f3:d2:61:df:c3:bc:12:bb:91:
8a:b2:59:9b:f1:23:7d:18:25:70:01:11:47:b8:d1:
85:31:7e:ae:0e:12:94:c9:7c:9c:70:ea:57:a3:0d:
86:d2:2b:4a:f1:47:42:cd:b8:0c:ac:e6:5c:68:37:
2f:5b:1b:dd:db:ef:b9:fb:82:68:e9:50:b3:00:97:
06:1d:57:d6:8b:e8:e0:e8:6d:d0:7b:13:2e:3c:fd:
1e:b3:e6:d2:1c:a4:d5:50:be:3c:0a:93:09:b7:ea:
fc:11:cb:4b:db:49:81:59:25:75:29:8a:49:1f:ec:
8a:3c:dd:98:4d:1e:20:6f:2d:51:67:a1:5f:db:20:
7d:c8:62:ad:35:b9:8d:fa:0b:c5:5e:f6:c6:83:c3:
cd:a7:ac:e0:40:48:34:ea:8f:6c:38:d5:62:e2:fa:
b2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:24:65:C9:C4:21:11:72:6A:DE:3C:32:3A:FA:5B:57:00:FD:84:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfa07786-4d85-30e0-967d-c30014edb829.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.186.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:57:d3:5b:98:79:e3:c1:b6:9a:a9:e3:f8:54:b9:32:7d:56:
2c:6e:d6:8c:52:5f:d5:53:f6:19:a2:90:91:ae:d5:04:85:57:
9e:20:97:35:ad:99:69:f7:0f:15:5d:bc:b6:60:76:02:3b:18:
0b:5a:05:ba:6d:94:08:e3:d5:6b:c0:bc:b4:1a:07:80:3a:87:
9d:f2:f2:7f:d9:c9:ed:a0:31:e1:11:a8:17:3c:00:78:e9:ba:
3d:7c:1d:1d:38:8e:54:3a:62:01:c0:3d:b7:f2:69:8d:26:f5:
1f:e8:63:92:d1:02:90:ff:0f:55:b6:07:24:4a:3d:e3:39:d1:
6d:56:69:34:7a:bb:b5:55:3a:ca:46:a8:08:c9:66:15:6d:95:
6c:1f:a5:75:51:0e:fd:a4:22:a5:9d:41:ae:34:d3:29:ef:b8:
fd:3c:fd:4a:21:d8:67:53:e0:88:d3:90:1a:76:6a:b4:ed:af:
76:9a:39:28:25:43:e7:c9:7d:86:a9:8c:30:e5:22:05:26:4e:
10:6e:61:f8:4a:3c:45:bb:5b:54:d5:0d:99:05:63:df:42:d0:
f7:74:22:36:b3:10:df:83:ff:b3:a6:50:c0:1a:b9:56:2f:ee:
76:74:ca:e3:f0:ec:3a:14:7f:ec:64:92:d8:a7:ee:d1:b0:0e:
3d:73:20:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:43:40 2026 by rpki-client