
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12afb9f1-e653-3840-aa8c-a6b6c6358412.roa
File: 12afb9f1-e653-3840-aa8c-a6b6c6358412.roa (raw, json)
Hash identifier: h0Xgqiv3BJmsyx6/TzhmmzO3DYi/5SLz+xbKEIxdDEw=
Subject key identifier: 46:58:A6:F6:6F:2E:AE:5F:C9:10:13:91:F7:36:B0:FF:AA:6B:7E:9C
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584E00061707C8E827D2A2F76F00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12afb9f1-e653-3840-aa8c-a6b6c6358412.roa
Signing time: Sat 30 May 2026 01:00:10 +0000
ROA not before: Sat 30 May 2026 01:00:10 +0000
ROA not after: Fri 28 Aug 2026 01:00:10 +0000
asID: 15169
IP address blocks: 104.134.240.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:00:06:17:07:c8:e8:27:d2:a2:f7:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: May 30 01:00:10 2026 GMT
Not After : Aug 28 01:00:10 2026 GMT
Subject: CN=fbf52cca-4272-4903-8dce-cb125de255fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2d:54:ea:02:f5:44:09:e6:5d:71:75:a2:a7:
29:6a:39:d1:58:46:6e:ea:47:a3:4a:7e:44:ce:f5:
64:3d:c3:cc:03:d1:8d:79:f2:8f:b8:a9:9a:21:13:
d1:bb:6a:b1:2a:83:87:11:d4:f3:d6:08:1c:89:43:
07:63:63:66:54:9e:77:f5:92:4d:3a:7a:99:0b:58:
ba:36:f4:01:06:65:80:50:d7:29:2c:5f:7a:c5:41:
09:c3:8a:19:1f:e5:72:db:6f:30:f8:23:d6:49:bd:
54:a8:64:05:f0:6b:24:99:79:04:70:f1:fc:cc:37:
0b:61:89:98:df:34:c9:d6:6a:26:27:de:5f:cd:e2:
6a:94:22:05:fa:4e:04:37:cb:b1:0c:b4:82:e8:10:
a9:10:94:3d:89:f2:42:3c:2b:78:9a:dc:01:1b:9f:
d4:02:18:17:fc:22:a1:af:52:e9:00:93:d9:23:5f:
a9:bb:09:00:4a:ba:bf:c7:67:71:95:b9:26:66:fa:
66:c3:07:c1:e6:c2:21:ee:2f:e0:e3:02:6f:fe:dd:
ea:55:e8:19:94:2e:28:b0:26:7e:28:2e:55:59:41:
6c:70:8b:91:e1:d5:a5:89:f0:9e:d9:91:76:0a:3b:
01:ea:cc:ab:ca:4a:ea:79:92:87:bb:ed:53:72:17:
aa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:58:A6:F6:6F:2E:AE:5F:C9:10:13:91:F7:36:B0:FF:AA:6B:7E:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12afb9f1-e653-3840-aa8c-a6b6c6358412.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:7f:42:2d:9f:fd:78:e6:3f:a1:e7:d1:da:ba:d1:11:13:04:
cd:30:43:c7:ca:fa:95:ea:c2:fe:fd:85:01:75:6b:b8:3d:fe:
3e:81:e3:86:9b:62:03:24:8e:d8:e0:26:d3:67:13:c9:25:9d:
bf:0a:97:29:21:92:2b:50:77:dd:c1:16:7b:6f:f6:2c:20:8c:
8c:f5:28:7d:01:c6:c0:56:62:83:66:f2:ad:bd:7b:e0:99:e7:
23:ea:05:ed:42:ce:88:94:34:1e:01:78:6b:38:3b:98:9f:02:
6b:54:bc:b9:d8:b2:92:b6:27:9b:59:08:77:a0:81:f2:dd:46:
85:21:4c:af:de:a4:44:23:b8:53:df:e3:59:2e:11:3f:7d:04:
e4:be:69:e7:94:46:de:7d:d8:1e:73:b9:2f:a6:9d:92:ca:28:
05:80:60:70:ab:d1:1e:ac:8e:9d:16:90:ec:df:99:2d:ef:fc:
ea:59:29:ec:31:51:8e:82:b4:a8:ec:6d:55:0c:39:97:2a:03:
fc:14:9d:c8:1b:55:0f:a8:f9:3a:87:5c:7b:37:c3:65:3c:b7:
9d:a7:9f:df:25:1a:73:53:f8:63:e0:02:52:92:f9:b7:b4:00:
bc:d9:16:76:28:df:77:3f:5c:b1:78:83:73:a3:31:58:e1:e4:
96:85:7b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:32:26 2026 by rpki-client