
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fbc0d0a6-cb7a-3052-9e58-fd7a14eac98c.roa
File: fbc0d0a6-cb7a-3052-9e58-fd7a14eac98c.roa (raw, json)
Hash identifier: Icbo5tagLlswofq0XVVlv37YSQe+paJggrSXdQ0lqQg=
Subject key identifier: 26:E6:F6:67:82:11:D1:21:92:DB:13:F5:9D:7A:E4:85:5B:45:A4:C5
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D1F4A5196B8EE3E6E9A8FF400
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fbc0d0a6-cb7a-3052-9e58-fd7a14eac98c.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 15169
IP address blocks: 104.134.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:51:96:b8:ee:3e:6e:9a:8f:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=88a23a9a-fe6d-4ab5-8e15-84494c93ed36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6d:31:76:09:7b:82:32:e0:50:ba:70:85:ba:
29:b7:94:2c:78:c2:16:4a:10:ac:f7:e9:62:58:50:
63:68:e4:95:b8:2e:52:0b:c8:d7:7b:5f:8b:02:19:
a4:1f:45:39:2c:7a:00:4c:f2:0d:ef:b7:55:56:03:
65:ed:05:47:85:aa:03:83:92:5a:c0:29:85:92:03:
c2:e1:b4:8c:98:c6:51:de:f2:af:10:b5:19:0e:70:
e8:ac:42:78:14:b2:5c:c8:22:80:df:e7:e4:24:3f:
ae:5a:cf:5b:9a:67:99:c0:25:b3:ae:ff:57:e4:26:
23:eb:66:23:99:a9:81:72:4b:11:81:4e:60:79:ab:
8a:c6:31:32:5c:43:92:eb:6b:58:5a:00:7f:06:e1:
2e:24:c5:cd:5c:b4:eb:4f:2c:8f:07:b2:a0:65:38:
2c:17:1c:87:09:70:52:2a:3f:26:fa:dd:eb:e8:87:
23:d2:b5:e4:0b:ad:c3:a6:47:64:a0:7c:1c:4b:f1:
d8:15:41:54:08:95:dc:23:57:75:e9:3c:75:c3:52:
fe:8f:b0:79:36:3b:99:d3:29:62:64:31:de:44:81:
35:13:f4:84:99:72:5f:9b:ce:6b:49:2d:51:ff:dd:
5c:50:67:96:85:e3:58:e5:5d:42:ca:a8:9d:cd:e5:
8e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E6:F6:67:82:11:D1:21:92:DB:13:F5:9D:7A:E4:85:5B:45:A4:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fbc0d0a6-cb7a-3052-9e58-fd7a14eac98c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:d8:66:02:bf:af:8a:b7:cf:8e:f2:ca:74:d7:25:4a:40:df:
a3:23:e0:f1:88:0e:c2:39:fa:cd:5a:3f:6e:4a:78:ac:ed:ba:
53:00:d6:41:15:29:93:68:70:4b:97:65:90:8f:c0:08:0f:89:
32:a1:78:56:29:d7:ab:fb:7e:b6:7b:0c:c5:08:21:c9:44:76:
00:b0:16:50:ae:92:ce:e3:a4:a1:87:14:06:32:fd:2a:a9:4b:
2d:97:72:d1:07:15:37:c7:8b:0d:aa:19:4e:7d:aa:87:c3:f6:
e9:e2:07:c6:cc:36:f1:04:a0:1b:83:03:dd:27:2e:3f:c7:16:
42:1c:3c:64:cc:d9:b0:35:8f:a8:d1:cb:e2:91:8f:1c:51:f3:
36:85:c0:e7:a5:0f:81:4c:84:df:8b:fc:a6:c0:bb:ba:6a:0a:
82:fd:cf:2d:a6:93:a3:e9:5e:3e:ec:88:53:88:e1:73:f3:d2:
33:27:50:2d:20:77:24:c7:5b:c3:10:27:b0:56:b2:d5:ce:64:
3d:97:01:a7:be:e7:83:a3:2b:1e:eb:3f:8e:45:27:6a:50:d6:
26:a7:0a:15:bd:b2:3c:b3:53:f2:9c:67:bc:70:7b:5b:67:4a:
a7:9e:e5:35:e5:67:42:76:78:dc:80:ac:d4:49:a0:c8:08:0d:
de:b2:52:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSlGWuO4+bpqP9AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
ODhhMjNhOWEtZmU2ZC00YWI1LThlMTUtODQ0OTRjOTNlZDM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm0xdgl7gjLgULpwhbopt5QseMIWShCs9+li
WFBjaOSVuC5SC8jXe1+LAhmkH0U5LHoATPIN77dVVgNl7QVHhaoDg5JawCmFkgPC
4bSMmMZR3vKvELUZDnDorEJ4FLJcyCKA3+fkJD+uWs9bmmeZwCWzrv9X5CYj62Yj
mamBcksRgU5geauKxjEyXEOS62tYWgB/BuEuJMXNXLTrTyyPB7KgZTgsFxyHCXBS
Kj8m+t3r6Icj0rXkC63DpkdkoHwcS/HYFUFUCJXcI1d16Tx1w1L+j7B5NjuZ0yli
ZDHeRIE1E/SEmXJfm85rSS1R/91cUGeWheNY5V1CyqidzeWO6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCbm9meCEdEhktsT9Z165IVbRaTFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZmJjMGQwYTYtY2I3YS0z
MDUyLTllNTgtZmQ3YTE0ZWFjOThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJrYZgK/r4q3z47yynTXJUpA36Mj4PGIDsI5+s1aP25KeKztulMA1kEV
KZNocEuXZZCPwAgPiTKheFYp16v7frZ7DMUIIclEdgCwFlCuks7jpKGHFAYy/Sqp
Sy2XctEHFTfHiw2qGU59qofD9uniB8bMNvEEoBuDA90nLj/HFkIcPGTM2bA1j6jR
y+KRjxxR8zaFwOelD4FMhN+L/KbAu7pqCoL9zy2mk6PpXj7siFOI4XPz0jMnUC0g
dyTHW8MQJ7BWstXOZD2XAae+54OjKx7rP45FJ2pQ1ianChW9sjyzU/KcZ7xwe1tn
Sqee5TXlZ0J2eNyArNRJoMgIDd6yUvc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:18 2026 by rpki-client