
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/12457d9b-1b73-3fa3-9936-55d404c83c78.roa
File: 12457d9b-1b73-3fa3-9936-55d404c83c78.roa (raw, json)
Hash identifier: j16dWE+PJ1J0a3T3DTo82TRgP25XxuvBvtqOQxtQZgo=
Subject key identifier: DE:65:3A:A1:16:90:08:66:C5:30:81:CA:B8:C3:E5:72:FD:A2:80:9A
Certificate issuer: /CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f
Certificate serial: 010D0C9F4328584F1CC79BD355D9883ED441CE80
Authority key identifier: 91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/12457d9b-1b73-3fa3-9936-55d404c83c78.roa
Signing time: Wed 09 Sep 2026 01:00:11 +0000
ROA not before: Wed 09 Sep 2026 01:00:11 +0000
ROA not after: Tue 08 Dec 2026 02:00:11 +0000
asID: 203020
IP address blocks: 104.247.113.0/24 maxlen: 24
104.247.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1c:c7:9b:d3:55:d9:88:3e:d4:41:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f
Validity
Not Before: Sep 9 01:00:11 2026 GMT
Not After : Dec 8 02:00:11 2026 GMT
Subject: CN=9995a71d-c276-4e87-bffe-95a2de5ddbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:0d:ef:4c:c7:51:20:cc:80:51:88:53:dc:
bf:9c:f7:1c:81:e5:f9:e9:07:a4:61:c5:f7:46:70:
ca:ac:e4:c3:d2:60:9c:6a:11:d7:7a:3c:53:3a:5f:
86:9f:88:8c:8b:c9:ae:40:33:60:d6:97:d6:a0:d2:
f5:95:ac:23:98:54:26:5b:32:88:e8:de:aa:aa:38:
03:c7:4f:e8:c6:00:e3:77:f8:21:70:76:a6:2a:7d:
f4:bf:7a:53:2a:88:58:b3:45:f8:6c:0d:0c:65:64:
63:d4:a2:25:36:1c:be:fc:3c:68:98:3c:d2:13:6e:
bd:2f:23:de:1e:f8:e3:12:62:95:69:ee:64:47:c7:
f4:be:39:ea:3c:6c:b7:f6:e5:e4:ec:99:a6:55:38:
cc:39:32:f0:90:f6:9c:9e:f9:a3:87:37:6b:20:66:
dc:9d:05:20:64:b4:83:4e:67:34:bc:23:e9:b5:7a:
5d:c1:41:17:2d:5c:26:b8:87:e6:5d:d4:ff:ec:42:
07:a0:16:6e:96:2d:fb:b2:13:3d:1d:6d:74:31:b7:
d2:d6:bf:c7:51:4e:b9:9b:a4:45:0a:70:1c:3b:47:
d8:84:7a:1c:c3:27:55:a1:d8:8e:1e:66:d3:f7:8d:
1a:c9:53:81:ad:2f:41:9e:82:2e:b0:d8:99:68:45:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:65:3A:A1:16:90:08:66:C5:30:81:CA:B8:C3:E5:72:FD:A2:80:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/12457d9b-1b73-3fa3-9936-55d404c83c78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl
X509v3 Authority Key Identifier:
keyid:91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.247.113.0/24
104.247.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:25:9a:2c:41:df:b5:5e:69:4d:2f:ea:c2:ab:24:d2:29:a7:
a0:d9:38:84:c9:5e:28:7e:b9:91:ab:54:f1:63:e5:1d:e0:62:
76:97:9a:ac:95:7d:4d:e9:ac:ea:5b:74:c9:87:52:10:68:8d:
19:fb:79:f1:52:3b:73:ee:d0:ea:95:44:4a:c0:3a:01:1a:a0:
7e:ac:89:c0:01:31:22:e8:6f:f3:d3:17:92:3b:84:f4:32:e5:
be:72:2c:9f:d8:77:5d:61:5f:94:8d:f2:cb:84:6b:8e:ee:ec:
74:10:5c:bf:67:34:75:08:64:27:7b:a8:c9:32:e8:e0:28:85:
29:7e:a0:9d:5a:32:64:0e:25:58:83:e2:b3:7a:9d:0f:4e:13:
e2:ad:57:84:dd:8c:a7:23:44:64:46:ff:31:39:20:fc:ac:62:
e8:0d:1a:aa:ef:83:6c:bd:e5:2b:1a:b0:69:e5:20:26:cc:e9:
36:61:40:6b:4a:af:75:08:9e:c2:a8:36:25:cc:60:e2:d9:e4:
bf:20:91:fc:e9:b6:78:5f:65:13:b0:07:9a:08:4c:9f:8a:85:
52:fd:cc:0e:8e:7f:5a:2f:84:b5:e5:fc:e8:a4:13:71:34:0e:
ad:2c:b8:f8:64:3d:50:dd:fe:75:f4:f7:3d:ee:4f:10:ca:79:
0e:f7:02:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:52:04 2026 by rpki-client