
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a0b3e32c-e284-32e7-b3de-255155fd2f08.roa
File: a0b3e32c-e284-32e7-b3de-255155fd2f08.roa (raw, json)
Hash identifier: gGAJqbl41bpbKgpSe5+LN6NmGX0qZlVhQ4WIYsXmUm4=
Subject key identifier: 33:A7:2D:7B:B2:77:A2:37:4A:F1:16:FE:49:7C:8D:8D:6D:F1:F9:FA
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584DF210A783D53A4C85760BFC00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a0b3e32c-e284-32e7-b3de-255155fd2f08.roa
Signing time: Mon 25 May 2026 01:00:24 +0000
ROA not before: Mon 25 May 2026 01:00:24 +0000
ROA not after: Sun 23 Aug 2026 01:00:24 +0000
asID: 41264
IP address blocks: 104.133.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f2:10:a7:83:d5:3a:4c:85:76:0b:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: May 25 01:00:24 2026 GMT
Not After : Aug 23 01:00:24 2026 GMT
Subject: CN=8acebd66-8016-41ba-ba56-8522b0ae963d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:13:ec:ca:ba:4f:f1:f6:32:1d:ae:0a:7d:
18:7c:1c:75:5d:94:3b:4d:5b:17:2f:5d:e6:cb:47:
b7:4e:d0:96:39:b7:1d:e9:34:88:b2:d3:2c:c5:4a:
51:ca:c2:29:f8:4c:fd:cd:27:39:3e:c4:f5:ac:91:
41:fc:98:1f:07:e1:a7:cf:9d:2a:57:28:ad:86:a5:
91:3e:e5:85:28:f0:f1:17:9c:d2:3c:d3:a4:f8:19:
47:78:15:fb:1e:46:ad:11:af:54:ad:8c:c1:f1:c5:
6a:1c:e7:a3:28:8c:14:5d:59:5c:ca:fd:e2:8c:dc:
ec:e8:a7:43:b3:ae:89:39:25:62:96:3f:d3:b8:10:
75:ae:8d:6b:4d:89:b4:55:c5:84:c6:18:b8:2a:97:
ea:ee:26:5a:f4:6d:e0:b6:d1:b9:bd:72:a0:8a:91:
70:3f:42:1d:c3:63:5e:55:74:0b:cf:9f:55:62:fe:
65:bf:3d:63:8e:47:3a:19:ec:32:80:e4:cc:3b:61:
30:25:93:0e:a6:9e:ea:1d:ce:90:e9:0e:f3:7d:ee:
77:b0:88:3f:b4:67:76:f5:be:64:d5:80:9c:f4:9f:
e6:ed:87:5a:e0:b1:30:69:5a:b5:69:9d:4a:85:13:
0d:4e:8a:a9:75:f1:93:51:7d:27:7f:2b:40:9c:b8:
dc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A7:2D:7B:B2:77:A2:37:4A:F1:16:FE:49:7C:8D:8D:6D:F1:F9:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a0b3e32c-e284-32e7-b3de-255155fd2f08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:23:81:dd:64:8e:ab:b0:08:7a:3c:d9:9b:6e:a7:b3:6d:26:
58:09:5a:ce:af:c9:1e:58:d5:62:40:0b:25:18:46:68:96:ee:
02:ac:e6:48:0c:f2:5e:b2:5e:c3:38:24:fe:5f:e5:70:4d:17:
80:af:c4:9b:c1:8e:82:69:ce:eb:22:7f:54:f5:88:e9:95:27:
97:b3:67:18:aa:3d:44:3a:f5:8b:eb:26:c9:51:3e:77:38:7f:
8b:b0:62:9b:cf:a7:7c:d9:eb:ab:c3:e5:34:93:03:ab:4c:5d:
c9:a7:fb:c0:60:8a:3c:4c:93:57:76:1f:06:fe:75:60:5b:47:
83:c6:5f:b2:14:56:47:3a:29:4a:a7:7d:40:89:5c:69:1c:ec:
99:ce:22:60:69:58:bd:80:2d:53:b2:66:5f:ab:3f:b3:44:0f:
b7:6b:e7:41:d6:48:c2:be:69:c6:d5:c9:ed:d9:72:d8:84:18:
cb:61:a8:c7:47:0e:bd:bd:0e:a9:50:2e:0d:be:41:8c:93:53:
29:7b:51:20:4e:46:1b:01:ac:7f:39:d5:84:a1:70:21:ca:12:
fa:29:a2:9d:cf:4e:6b:ae:34:5f:19:d4:bd:46:ee:ac:72:fd:
6c:bb:40:bc:43:48:8e:1e:3d:6d:8b:12:55:7e:f4:f3:d6:1b:
1a:47:7c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:12 2026 by rpki-client