
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7c3f25da-6271-39f8-990b-cbc85519f5f9.roa
File: 7c3f25da-6271-39f8-990b-cbc85519f5f9.roa (raw, json)
Hash identifier: FU5GanNoiKhyGhA0T5qsnWyYXzx82ZaJ+48cXObeuME=
Subject key identifier: E3:1D:D2:0F:0A:97:08:F3:61:9A:53:33:AF:08:24:E8:45:91:AF:B0
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F497C6D679EEA40079A5452C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7c3f25da-6271-39f8-990b-cbc85519f5f9.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 41264
IP address blocks: 104.132.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 01 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:6d:67:9e:ea:40:07:9a:54:52:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=59534614-9f6b-4bed-823d-c96b2c549cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b7:09:8e:cb:20:4c:ed:c1:81:01:69:63:ef:
9b:37:89:03:73:37:e0:27:55:0d:c7:50:e7:90:2d:
1c:5f:87:88:d1:de:ef:9f:7f:cc:8f:3e:65:ae:ac:
59:68:dc:b2:82:b9:84:55:da:4a:75:55:6c:e2:62:
6e:44:a6:a4:fe:dd:7b:7e:b9:b4:16:c0:b3:5f:18:
63:28:27:a8:8c:e5:89:c8:4f:6a:48:08:14:b7:d9:
8e:12:31:b8:02:2b:ee:35:64:ef:0b:98:cd:44:1d:
f7:6d:95:34:14:c5:7e:4d:11:92:9d:bf:65:70:3c:
c5:75:b2:4f:4d:b2:e7:de:c0:9e:fc:d9:8b:ce:f7:
cb:18:59:f0:63:c9:ec:69:62:81:c4:0c:3b:27:f8:
11:49:ee:67:5f:22:42:14:ac:03:11:c9:f8:4b:d4:
ad:c7:bf:cb:b8:80:de:df:49:1a:28:d8:33:28:71:
e4:c4:09:1b:00:bc:63:bb:2c:2c:5f:53:f0:fc:62:
e3:0a:cb:ad:06:46:c1:17:bf:00:97:a8:3e:3b:e5:
b9:cc:9a:d8:66:98:cb:2d:ee:d8:c2:9e:57:cb:80:
70:c9:e0:ee:2d:3c:e0:f7:4e:e5:8d:14:77:90:d2:
20:a5:f2:72:c7:13:28:fb:ee:93:0e:7f:f5:5a:c9:
b6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1D:D2:0F:0A:97:08:F3:61:9A:53:33:AF:08:24:E8:45:91:AF:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7c3f25da-6271-39f8-990b-cbc85519f5f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:0d:3a:b2:5a:4f:73:1e:4d:eb:42:a6:2d:dd:b7:6b:32:1a:
51:5f:12:53:2f:62:07:fa:09:25:a7:e4:6e:d3:40:17:51:8b:
a0:c3:44:0f:13:4e:7b:6b:36:87:b3:c9:a8:9a:ca:e2:f1:89:
32:be:54:ec:e6:a3:f5:8b:be:c2:e0:82:20:fb:bb:35:6c:17:
19:38:eb:3c:c1:90:36:03:01:f2:85:b3:94:6d:b8:c6:9b:55:
49:5d:ed:41:db:db:83:c8:03:5d:b7:41:9d:6a:52:f7:ec:b9:
84:17:20:3d:b6:bf:39:c3:db:8c:a5:a7:3b:93:d5:d2:10:77:
de:b3:3b:8a:c4:9e:7b:f6:22:25:8c:7f:9c:78:1a:2a:19:24:
07:01:a5:cc:1b:79:e9:45:41:d1:4d:40:d9:b7:2b:1e:4c:45:
e0:1b:5e:8a:0b:4f:86:a6:d7:90:dd:d9:d3:f9:51:ce:14:fd:
21:4f:00:42:b8:a3:ce:a4:ba:6c:07:c0:0b:70:d8:e2:c8:4b:
8d:37:60:cc:2d:37:a2:cc:21:e5:19:fc:a2:e0:a9:8d:58:9e:
76:f8:48:1d:8d:8a:90:a4:dc:aa:46:4c:46:77:b7:f4:63:4c:
1b:67:e8:56:86:a1:c0:75:90:5b:6c:8e:7e:4b:53:aa:5b:24:
7a:d5:45:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:55:36 2026 by rpki-client