
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4d9f3480-3fc5-3e1c-9434-19837d1765f2.roa
File: 4d9f3480-3fc5-3e1c-9434-19837d1765f2.roa (raw, json)
Hash identifier: kLa1CaYNx1ivmddJVFxqWzqdGNP42cjBiF8Im/fWxJ8=
Subject key identifier: EC:25:3F:9A:A3:D0:4B:46:F7:B9:D4:0F:90:1A:2A:E7:ED:70:F5:BA
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F497C5BCB8338C2BC62F1FAC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4d9f3480-3fc5-3e1c-9434-19837d1765f2.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 41264
IP address blocks: 104.132.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 01 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:5b:cb:83:38:c2:bc:62:f1:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=937391d7-1ff2-482f-a7e6-3b43349adda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:fd:a2:b8:f8:9d:99:8a:47:00:34:cc:a8:be:
b2:36:99:3c:63:c4:2e:ac:00:8c:d7:8a:2e:63:e2:
7b:b1:51:89:43:e8:49:5c:b9:c9:fd:1c:7d:06:6e:
93:a5:2d:31:7e:2f:c4:7b:7f:b4:f1:24:10:53:de:
a7:eb:77:2a:b7:c2:28:7c:02:13:8d:44:c8:5b:7f:
5c:32:b5:3f:84:3d:93:da:6f:df:e4:e5:8f:39:b6:
77:45:7f:db:6d:9e:c1:50:a7:88:b8:0a:2d:e9:e8:
83:18:fd:3f:34:bb:f4:67:4d:64:76:76:d0:10:1c:
b8:0e:bd:0e:40:8d:55:b4:99:8a:a2:b8:74:25:be:
9f:ce:28:59:ef:19:b6:1f:49:dd:ee:cf:01:bc:34:
41:24:58:9e:ab:5e:02:86:de:05:5a:9a:7d:84:ec:
90:b1:f8:fb:ba:f2:b5:a8:50:d8:32:15:16:42:6d:
2c:5d:0d:33:dc:ab:d2:a7:57:4a:a5:a2:ec:a2:b8:
cb:db:65:b9:0e:e6:91:91:2d:ee:c4:ec:25:c3:ad:
96:53:38:3f:e1:79:ec:77:e9:84:3f:c1:e5:76:ff:
de:f8:cc:13:e4:10:86:2f:71:6f:4d:e3:5c:20:3d:
2d:88:36:e6:86:8c:0e:e4:18:0d:49:12:45:e3:6d:
82:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:25:3F:9A:A3:D0:4B:46:F7:B9:D4:0F:90:1A:2A:E7:ED:70:F5:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4d9f3480-3fc5-3e1c-9434-19837d1765f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:16:ba:15:16:24:fb:bd:fa:b7:76:88:20:63:be:ec:ca:f4:
91:e2:a7:3a:5f:ac:5d:30:39:de:4c:04:e7:54:fa:5b:53:d2:
b7:bd:e8:47:97:97:1b:bf:0b:ed:ee:32:c2:11:5b:e2:01:d4:
3b:a5:06:b0:c1:aa:e7:72:b8:b0:4f:4b:40:ea:49:94:ec:e7:
38:2b:6e:bb:98:d6:52:95:cb:ff:a8:c7:71:1d:af:bc:d4:a9:
37:42:e8:36:ef:fb:dc:db:43:62:7d:c9:1a:6b:da:1b:81:71:
45:fe:c7:34:9a:62:07:d7:fb:4b:79:76:44:f6:9d:33:00:7c:
34:37:54:9c:df:d4:af:53:3b:93:6b:f1:d5:db:e7:8a:7e:7b:
16:01:54:02:24:42:d3:01:d3:e1:39:c9:9f:f4:fb:cb:2c:36:
a3:68:a9:e3:a7:5d:07:4e:69:a1:ab:2a:0a:82:37:83:d6:fd:
fe:9d:8b:d5:0c:e9:cb:56:41:88:28:6e:0b:bf:ca:93:2a:03:
d2:39:32:42:a3:6e:72:4c:cf:0f:f9:29:68:ba:18:79:ac:e7:
c1:21:da:3a:ec:77:48:ee:1e:9d:9d:8c:db:9d:14:4b:66:af:
55:bd:7e:b4:00:b0:dd:4a:4f:d3:30:85:a0:29:ad:ef:45:d5:
a5:8f:27:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:48:06 2026 by rpki-client