
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/d96f77b1-8352-3b23-80a2-1e5585cb1a8c.roa
File: d96f77b1-8352-3b23-80a2-1e5585cb1a8c.roa (raw, json)
Hash identifier: ZBbTs1R7h4+FgDpzR3hBUOWd9TwU0VhiD2fPGyj7Slw=
Subject key identifier: 51:9D:2A:F2:B5:99:7F:17:DD:BA:EF:A2:95:FF:3C:7F:2E:DD:E1:B5
Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial: 010D0C9F4328584DAC45930D6FBC5348ED21DE00
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/d96f77b1-8352-3b23-80a2-1e5585cb1a8c.roa
Signing time: Thu 30 Apr 2026 01:00:26 +0000
ROA not before: Thu 30 Apr 2026 01:00:26 +0000
ROA not after: Wed 29 Jul 2026 01:00:26 +0000
asID: 395793
IP address blocks: 104.241.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ac:45:93:0d:6f:bc:53:48:ed:21:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Validity
Not Before: Apr 30 01:00:26 2026 GMT
Not After : Jul 29 01:00:26 2026 GMT
Subject: CN=1a86ff99-1cdd-4335-9b47-6af1eb2fe55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c4:52:19:1c:13:81:2b:e2:b1:0f:bd:7d:49:
72:92:da:40:19:94:3a:a4:a9:cd:c9:45:5b:51:41:
df:fe:83:8c:0c:03:89:02:8b:43:57:8e:10:b6:f1:
40:93:d3:32:4e:43:00:2c:04:81:c6:42:d6:da:64:
ba:43:1e:fe:d5:48:0c:32:3e:92:12:3c:9a:30:f3:
7f:2e:25:c1:90:9b:67:36:77:e0:c5:ef:21:82:1a:
8a:a2:00:b8:5f:e5:b1:8a:4e:5b:be:29:50:b0:e8:
3b:14:4a:dd:c5:03:b5:d0:0c:49:4d:b4:3b:f9:46:
3e:5f:ff:0d:f4:f6:24:99:a8:36:21:99:11:aa:b9:
94:cb:a6:f8:64:ee:43:fd:ee:7c:7c:c5:7c:58:fb:
f3:f4:ab:3d:4f:ec:20:6e:83:2d:75:4d:7b:a4:3a:
a1:d1:d8:54:da:c3:e4:0e:86:34:14:a0:e1:cd:97:
74:64:7d:48:1b:97:f3:9f:96:99:7e:67:73:7a:6c:
6f:02:9e:3b:d7:aa:0c:61:23:2a:01:e8:30:d5:b8:
ae:77:a3:db:77:fd:13:ca:0b:d2:29:8b:27:fb:d3:
06:90:0b:d8:ad:25:5f:47:a8:f3:f2:a8:bc:35:01:
29:7f:f9:38:0e:c3:72:9e:4d:b7:69:2a:1a:c9:c4:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9D:2A:F2:B5:99:7F:17:DD:BA:EF:A2:95:FF:3C:7F:2E:DD:E1:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/d96f77b1-8352-3b23-80a2-1e5585cb1a8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
X509v3 Authority Key Identifier:
keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.241.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:33:fd:5d:93:dc:53:f1:eb:c0:b8:91:2a:09:8f:bd:19:86:
57:b2:b2:e9:f6:16:b5:f0:5c:d9:71:40:51:64:9d:34:3c:b2:
43:ec:f5:85:52:5a:75:79:b5:45:0a:50:38:d9:53:fa:76:12:
ff:51:de:a9:23:89:cf:cd:c4:a6:ab:1b:d3:05:5d:c4:d6:27:
76:cf:a5:04:df:ce:a3:88:ee:4a:49:de:9a:52:e9:f3:e4:b8:
b9:f2:2b:3a:46:fb:70:d4:24:51:27:e4:18:8b:d8:94:ba:7d:
b8:63:27:77:d9:2d:5e:52:0e:d1:7d:eb:80:bd:71:c5:a2:60:
4b:9b:6d:c5:e8:f8:25:1e:18:38:5c:6e:94:b0:06:46:57:c4:
98:a1:03:32:de:46:d2:61:06:d9:f4:a4:77:c3:0a:b8:14:0a:
46:25:0b:a0:9d:51:f5:6d:b4:f6:d7:fe:ab:7e:10:5b:c7:58:
26:00:b9:43:3d:a2:b4:96:47:8c:de:9b:41:1e:c3:4c:89:c4:
51:ef:88:be:e3:bf:d9:79:3c:c8:a2:d2:a3:fa:66:0b:84:55:
71:01:36:f9:50:87:d4:18:bb:49:b3:3d:e2:8a:06:ed:93:87:
e8:c0:b0:58:dc:60:be:45:86:84:bf:11:09:34:cd:a9:be:37:
4f:a4:79:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRZMNb7xTSO0h3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk
MWE4NmZmOTktMWNkZC00MzM1LTliNDctNmFmMWViMmZlNTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsRSGRwTgSvisQ+9fUlyktpAGZQ6pKnNyUVb
UUHf/oOMDAOJAotDV44QtvFAk9MyTkMALASBxkLW2mS6Qx7+1UgMMj6SEjyaMPN/
LiXBkJtnNnfgxe8hghqKogC4X+Wxik5bvilQsOg7FErdxQO10AxJTbQ7+UY+X/8N
9PYkmag2IZkRqrmUy6b4ZO5D/e58fMV8WPvz9Ks9T+wgboMtdU17pDqh0dhU2sPk
DoY0FKDhzZd0ZH1IG5fzn5aZfmdzemxvAp4716oMYSMqAegw1biud6Pbd/0TygvS
KYsn+9MGkAvYrSVfR6jz8qi8NQEpf/k4DsNynk23aSoaycRSmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFGdKvK1mX8X3brvopX/PH8u3eG1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZDk2Zjc3YjEtODM1Mi0z
YjIzLTgwYTItMWU1NTg1Y2IxYThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPGNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABAz/V2T3FPx68C4kSoJj70Zhleysun2FrXwXNlxQFFknTQ8skPs9YVS
WnV5tUUKUDjZU/p2Ev9R3qkjic/NxKarG9MFXcTWJ3bPpQTfzqOI7kpJ3ppS6fPk
uLnyKzpG+3DUJFEn5BiL2JS6fbhjJ3fZLV5SDtF964C9ccWiYEubbcXo+CUeGDhc
bpSwBkZXxJihAzLeRtJhBtn0pHfDCrgUCkYlC6CdUfVttPbX/qt+EFvHWCYAuUM9
orSWR4zem0Eew0yJxFHviL7jv9l5PMii0qP6ZguEVXEBNvlQh9QYu0mzPeKKBu2T
h+jAsFjcYL5FhoS/EQk0zam+N0+keSY=
-----END CERTIFICATE-----
Generated at Wed May 13 02:32:30 2026 by rpki-client