
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ebc89f47-058f-303c-ba73-dd10592f859d.roa
File: ebc89f47-058f-303c-ba73-dd10592f859d.roa (raw, json)
Hash identifier: xraEe2T2EsCY4af3uGgwh1bQQAi9k+lMrI4IpuAW5ho=
Subject key identifier: FD:EB:BC:C1:1B:F9:15:49:4B:C7:86:CB:A9:0B:63:8C:8D:80:BD:8D
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D143D90119A4C8B332499E500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ebc89f47-058f-303c-ba73-dd10592f859d.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 41264
IP address blocks: 104.133.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:90:11:9a:4c:8b:33:24:99:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=33f8b12d-fd3a-4f61-ab87-a0ea87cba291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:6e:ed:57:d2:da:76:c1:67:a8:09:e7:9e:
88:18:bb:97:93:d4:88:51:5c:f2:2c:c4:b0:17:58:
82:c0:4d:82:60:93:bf:4b:c3:f8:eb:4d:f3:fd:cb:
4b:20:6b:72:0c:f5:d2:58:fe:18:77:e4:78:21:bd:
fb:b7:66:5f:95:a1:99:d6:a3:a1:68:19:67:99:ba:
85:2d:37:32:05:21:4f:1a:d9:73:db:e7:58:74:9a:
b7:13:25:79:ff:83:96:2d:94:64:0a:47:54:90:c8:
f1:c6:1d:ed:bc:d2:68:84:02:8a:1f:b1:ad:e5:e6:
c7:7b:bd:10:8f:26:11:d2:51:92:e9:6f:54:69:9c:
64:29:6e:ea:4c:26:d2:66:b0:0b:c1:8e:67:cd:2c:
09:4f:57:0d:1f:d7:75:ca:d2:79:3a:2b:40:61:5c:
0a:ac:fb:e0:fc:01:ce:b8:07:37:f0:bd:10:f3:16:
ab:f1:17:40:cc:c3:89:4b:fb:65:28:a8:93:8a:c2:
ec:40:7f:33:a1:64:7d:3e:7f:d7:fd:3c:6e:87:03:
56:64:6c:4d:af:7f:0c:4a:fe:3d:3c:72:42:60:6a:
88:31:6f:d9:b6:a4:fc:50:b9:9b:a8:41:12:a2:b5:
64:d0:e4:5b:4d:c3:79:0b:13:9e:77:d1:e1:68:93:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EB:BC:C1:1B:F9:15:49:4B:C7:86:CB:A9:0B:63:8C:8D:80:BD:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ebc89f47-058f-303c-ba73-dd10592f859d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:0b:fd:80:7b:a0:8a:ab:26:b2:4c:f2:62:58:0d:fb:e4:79:
a1:4f:d0:6e:74:ee:79:3b:62:9d:0f:6f:89:dd:f0:e8:9a:69:
17:5a:55:6c:e9:d4:13:ca:6a:c5:6c:98:d8:d4:21:ec:e3:1d:
be:c9:e8:76:d5:0b:d7:97:7a:e3:8d:ec:17:61:23:95:42:1a:
a1:16:55:25:6d:37:58:f6:37:49:10:c8:9a:0f:9a:4d:bb:f0:
ee:c5:4a:9c:8e:90:dd:c8:32:90:b9:03:44:b6:eb:a7:e8:d4:
23:e8:8d:72:73:1d:6a:b4:6a:ba:f7:f7:e2:63:88:d4:c0:a0:
50:3f:f8:46:fb:2a:1f:30:28:2e:14:b1:e0:5f:45:1e:27:9f:
a8:f3:fc:be:32:a0:f1:c8:cb:38:1f:4d:7c:0d:8a:02:55:b0:
cd:2e:ef:79:eb:9b:35:fe:97:7a:8c:a7:cc:70:be:00:1c:48:
67:bf:67:fa:7e:2d:ad:77:a2:18:42:c3:3b:b7:20:e0:84:be:
40:42:39:29:d0:f6:d4:bf:9a:04:06:15:ba:2d:44:4f:7f:9b:
12:2a:da:54:5c:9b:07:0c:8e:f7:5a:f3:ce:25:e3:5a:72:cd:
b8:3e:0e:dd:3c:55:09:c7:9d:56:0d:35:a9:2a:5e:1e:d5:a8:
16:10:18:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:24:16 2026 by rpki-client