
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e68af77-07fc-3196-a424-0e5192a94064.roa
File: 9e68af77-07fc-3196-a424-0e5192a94064.roa (raw, json)
Hash identifier: N+R0x9XpumD8Ao84DvPzl179KkCWjlhKLvdNEl0aH6E=
Subject key identifier: 23:5F:7D:3D:1B:74:3E:87:39:D1:01:DE:96:E3:B9:4B:A0:7B:9C:C0
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584EA795824F8FB21BBEFC3A3480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e68af77-07fc-3196-a424-0e5192a94064.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 41264
IP address blocks: 104.133.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:95:82:4f:8f:b2:1b:be:fc:3a:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=9eab54ab-e538-4c7c-93a0-eea484351daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:82:cf:7a:8c:9d:e5:a7:9e:a4:18:99:ad:
e4:73:ee:43:86:72:57:a7:89:8d:86:f1:a4:07:3e:
b5:00:10:c4:c2:ea:39:34:b0:ac:5d:32:da:21:54:
88:51:cd:a2:da:fe:5e:41:57:a1:48:ff:49:18:93:
25:59:e3:e1:f9:b0:34:68:3a:e1:6e:90:21:e5:02:
cc:df:5f:f7:95:c2:ff:35:41:28:7a:de:7d:4f:d5:
dc:4e:d5:65:2a:c6:43:71:9f:cd:f2:95:a6:00:be:
85:ee:9f:f3:25:0b:bf:3f:1f:b2:99:9b:02:dd:2e:
f4:62:20:85:eb:e9:b8:c5:65:d0:2b:ee:2d:b9:a9:
d1:4e:01:f5:ae:77:5c:04:0e:64:d8:f0:9b:d9:90:
b1:98:12:71:37:13:24:9a:9e:0f:ad:31:dd:5e:80:
2f:68:8e:79:e5:bf:90:e5:3e:52:9f:d3:6e:7e:40:
20:02:bb:2d:1d:6d:de:7d:24:45:99:20:68:8b:20:
5a:6f:02:5e:82:89:16:16:bd:3d:d7:ee:17:ad:5c:
27:18:e1:e3:f4:dd:83:a0:ec:76:04:51:e3:76:2d:
a5:46:9c:f6:ab:2f:49:dc:4e:48:40:6e:62:b3:63:
54:8a:f7:47:c8:c8:10:af:be:17:8e:65:81:ca:88:
ae:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5F:7D:3D:1B:74:3E:87:39:D1:01:DE:96:E3:B9:4B:A0:7B:9C:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e68af77-07fc-3196-a424-0e5192a94064.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:e9:73:9b:e0:e4:7e:59:fb:4a:65:c8:b0:68:f7:fa:f3:5f:
f1:e6:3a:08:70:69:27:3b:2a:9f:8f:b1:af:e9:b2:33:1d:67:
16:91:35:44:c8:f1:ba:c3:58:69:e0:fd:10:13:4e:e2:f5:57:
6d:ce:ed:33:62:f8:11:e0:97:38:af:20:8a:57:b6:af:3e:0c:
b7:49:d6:1f:11:d4:6b:25:75:94:62:15:80:c0:3c:c7:05:ab:
49:54:b9:14:4c:85:d6:61:43:9b:31:6f:ee:a3:ba:25:a1:1f:
95:48:a6:cb:f0:0f:5a:02:e3:8e:62:fa:94:ce:4f:cd:d7:c0:
23:47:a3:18:ad:ad:7a:f2:a0:0b:ee:8d:38:52:4d:d7:bf:4b:
75:c8:73:7f:f5:73:86:61:59:c7:51:3c:96:e2:13:0a:d1:78:
be:dd:33:d7:53:8c:8e:55:0c:2a:c7:35:11:f8:bb:e3:ce:c4:
ef:3d:94:08:65:63:88:dc:3b:5b:65:93:08:61:30:96:e3:2e:
2b:07:68:97:41:1c:ef:f5:0f:0b:a6:52:a5:39:05:32:f0:e6:
05:9c:64:ff:09:95:31:3e:ba:da:9c:1e:62:f1:ec:6d:96:48:
73:c1:c8:9d:f8:fb:34:df:87:22:39:77:3b:3b:be:70:71:5f:
e9:50:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:58:08 2026 by rpki-client