
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339aadfb-39fa-3c15-ba0d-54ea8fcd349f.roa
File: 339aadfb-39fa-3c15-ba0d-54ea8fcd349f.roa (raw, json)
Hash identifier: vX11+mV3iyRthhGYehmrmT5VtqQnLXn7UlzpoXyoilo=
Subject key identifier: F3:FE:FA:01:B1:07:F8:4B:46:74:9B:FD:7E:F0:5A:E4:71:5E:DC:D4
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584F8F3DC95DF39540AA920D7B80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339aadfb-39fa-3c15-ba0d-54ea8fcd349f.roa
Signing time: Tue 20 Oct 2026 01:00:12 +0000
ROA not before: Tue 20 Oct 2026 01:00:12 +0000
ROA not after: Mon 18 Jan 2027 02:00:12 +0000
asID: 9009
IP address blocks: 104.250.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Oct 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:8f:3d:c9:5d:f3:95:40:aa:92:0d:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Oct 20 01:00:12 2026 GMT
Not After : Jan 18 02:00:12 2027 GMT
Subject: CN=3d3424b6-50a8-4505-ad03-3286d25ec4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3e:57:a1:0b:89:f8:d1:44:3e:1e:79:70:4b:
57:eb:0d:08:2c:8e:49:29:37:cc:76:31:b6:f7:87:
30:60:54:b9:de:4c:16:b7:a0:65:60:7e:2a:6f:b7:
4e:23:be:28:c1:6f:3c:55:98:89:13:f8:30:e9:46:
3f:dc:a5:f0:a9:bf:a3:ea:f1:24:bf:7a:a4:71:d3:
34:47:db:f0:70:64:25:8a:57:40:31:15:66:19:57:
d1:b7:31:02:d9:ab:d1:16:55:3c:ba:a5:48:ba:f5:
bd:9c:32:f9:ec:23:f9:a3:c0:48:07:24:32:41:56:
e1:ac:fc:28:a0:c0:5d:13:c2:3f:23:b6:9c:44:7d:
ce:51:81:18:41:f1:a6:f8:0e:f1:68:c0:43:43:e8:
f0:78:fd:e8:1a:a0:08:bc:a1:61:11:b5:45:56:a0:
9e:18:75:ed:35:55:32:76:73:92:15:05:80:91:5f:
36:1a:9e:6e:7a:e0:c9:79:73:4e:36:79:42:0f:9e:
33:a1:a9:26:44:15:a6:ba:23:28:f5:49:62:40:02:
ff:bc:a4:0b:15:0c:0f:ec:a2:44:e2:d8:37:1d:3a:
59:07:e5:2c:f6:a2:cb:6b:77:1d:04:26:0d:fd:75:
d1:37:4f:ec:7c:5a:68:0c:da:94:5e:70:77:29:9e:
9c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FE:FA:01:B1:07:F8:4B:46:74:9B:FD:7E:F0:5A:E4:71:5E:DC:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339aadfb-39fa-3c15-ba0d-54ea8fcd349f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:a7:e9:95:d2:ca:13:5a:81:8a:c0:cf:76:f9:b9:70:0e:46:
59:5f:1c:c6:7a:ed:1d:df:77:0b:2e:f0:93:70:ed:8b:3b:49:
04:c9:c6:62:d4:2f:be:4b:72:38:31:6e:20:46:30:ef:5b:65:
02:e0:8a:2a:d0:98:62:0f:12:2f:86:b9:f6:36:fb:dd:d3:f1:
18:79:4c:7b:81:de:45:3f:0d:fc:8b:f6:65:47:0f:94:3d:ff:
6d:6c:48:5a:72:14:f7:81:45:44:2d:05:f8:0b:3f:d1:5d:d0:
bd:d0:da:40:e2:1f:17:a3:38:12:89:20:b9:05:de:33:58:91:
ea:85:4e:86:e8:bf:e7:1c:1e:0a:94:2a:d4:14:7d:75:b3:26:
d9:24:fa:42:1f:8f:f9:54:4a:ea:69:7f:a2:d8:59:b7:b5:a0:
c0:07:af:32:f2:34:74:2a:cb:b4:24:fa:d8:4e:ed:15:49:ba:
28:9c:43:8f:1d:80:cb:1b:5b:eb:0a:07:a7:73:26:53:53:79:
74:43:9d:d5:89:3e:45:b8:49:9b:80:c2:32:d5:0c:3f:c9:3b:
66:5d:f4:db:6a:81:58:26:78:9f:63:9d:11:32:3e:52:f0:0e:
ca:79:89:13:a2:1e:3e:80:f8:59:5f:67:3f:6c:92:ed:8a:be:
20:2d:c6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:31:20 2026 by rpki-client