
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66b275d0-8075-3aac-897b-e4e1aa843cae.roa
File: 66b275d0-8075-3aac-897b-e4e1aa843cae.roa (raw, json)
Hash identifier: XwAgktejGK6mFjEzHOeihrjjch//D8DwLow+k6FoTC4=
Subject key identifier: 9E:64:08:60:6E:73:68:E9:AF:90:5C:36:6E:48:B9:A7:7E:1D:48:1D
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584EA796BB8759FE3F6DFDC907C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66b275d0-8075-3aac-897b-e4e1aa843cae.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 395973
IP address blocks: 104.134.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:96:bb:87:59:fe:3f:6d:fd:c9:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=be06566c-73b4-4574-9df4-154d649fff2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:eb:b1:e7:e3:bf:bc:18:da:f3:9a:0a:30:
0f:c5:6d:80:ab:04:f5:3c:e8:70:6d:de:d2:f6:79:
1e:f4:7a:65:6c:3d:f9:bb:70:05:fa:ac:b3:0b:95:
1c:49:b2:32:36:b6:61:b1:7e:d6:b8:7f:0c:d4:57:
a3:22:94:e2:9b:98:c6:34:eb:64:28:27:f4:60:7e:
c0:c0:a4:b8:f9:93:1f:cc:ea:28:41:17:75:09:f6:
ec:9d:28:b1:e3:67:f1:1b:78:5a:ac:48:9d:85:ee:
04:53:ee:a2:a7:eb:a5:1e:7a:d2:33:4f:4c:50:dd:
8c:33:8e:2b:73:17:f8:66:ec:d1:67:01:51:b9:41:
5b:3a:b3:3e:6f:04:3c:38:7f:a4:67:bb:8e:a3:84:
b1:03:b3:61:13:5e:e5:33:0a:6c:54:f6:a9:67:c9:
99:de:7b:b0:d9:1d:9a:a0:fd:fe:6f:ae:1c:07:9c:
33:c0:84:51:fc:2c:ce:8a:4a:36:80:79:29:02:27:
a5:06:f2:10:53:16:25:a2:0b:6f:7c:72:c2:30:b8:
87:75:f2:a3:56:9b:cc:a6:f9:81:8f:e5:e5:5c:75:
0f:d4:dd:af:f7:47:20:5f:fb:68:62:69:fb:3b:02:
a0:9b:4f:0f:77:5a:68:65:16:16:6c:c4:90:1a:ea:
ef:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:64:08:60:6E:73:68:E9:AF:90:5C:36:6E:48:B9:A7:7E:1D:48:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66b275d0-8075-3aac-897b-e4e1aa843cae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:f5:94:f7:5d:86:0e:c8:67:51:12:50:84:e3:b0:74:d0:42:
1a:aa:f7:19:63:ce:37:8e:ef:3b:28:7a:18:f4:8c:f3:5f:fb:
7d:5c:82:c3:34:47:b8:54:d0:cb:d6:7b:1c:7d:3d:ff:27:b2:
f1:99:96:96:b0:26:83:67:2c:a3:2b:ef:b7:c3:68:48:bd:d6:
82:8c:50:2f:b8:40:94:80:f7:94:fb:c8:94:0d:9c:54:3e:ed:
13:22:24:fc:46:34:10:cc:42:86:a7:0a:55:56:94:87:60:03:
63:90:06:03:66:44:45:98:18:be:da:32:40:ff:7f:23:ac:df:
bb:13:04:05:a3:f0:25:b7:2b:e4:98:13:aa:f8:06:7b:4d:56:
48:d8:e4:ee:9b:06:98:75:fd:70:de:21:e9:1c:26:67:82:82:
fa:40:36:53:e8:26:56:69:48:40:85:b8:8b:55:81:13:21:ca:
c3:39:7b:6d:d3:62:73:cf:38:80:97:97:f6:85:b7:6f:cc:89:
af:06:4b:1f:54:13:d9:ed:d8:54:1c:40:13:85:c1:c0:07:91:
2f:d8:f0:09:87:ca:02:ee:18:e6:24:39:6a:aa:93:be:d9:c9:
c3:87:49:26:6f:cf:48:f6:6b:6b:c7:e6:00:b8:32:fe:94:e7:
cb:10:78:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:24:59 2026 by rpki-client