
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b554211f-70ee-3eee-87c3-9d767251f254.roa
File: b554211f-70ee-3eee-87c3-9d767251f254.roa (raw, json)
Hash identifier: NpdC5auFmz16I8l+89bCEtweOE4YAUNXuoU5i2jZbFQ=
Subject key identifier: 89:21:EE:29:F6:3E:B7:48:7F:E1:08:43:DB:C0:6D:FF:F1:A0:44:1E
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584EA7956B013068EB2D684DB6C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b554211f-70ee-3eee-87c3-9d767251f254.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 41264
IP address blocks: 104.132.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:95:6b:01:30:68:eb:2d:68:4d:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=dee28ad7-9bea-49ac-bd30-0d2bf3581fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9b:33:02:27:14:a6:49:83:44:0e:e2:0e:ea:
d7:64:ab:81:5d:91:bc:6a:8c:21:63:d4:66:09:31:
4c:ea:f4:ec:8a:6a:1b:4e:8a:ed:3b:47:8d:ab:b9:
25:2a:e5:db:32:48:4e:40:df:fd:88:15:6d:07:23:
22:c4:61:f1:15:d3:57:5a:c5:95:d2:b5:93:cd:8d:
b0:cf:15:b1:9e:c5:ef:29:19:9c:63:66:12:9f:ec:
2e:d9:3f:0c:08:55:8a:24:89:13:09:e0:57:5a:bd:
63:4f:2d:14:fb:6b:98:b0:19:c1:14:0a:ea:22:b1:
df:0f:00:a6:2d:fc:02:d3:e4:31:61:9b:06:51:e7:
26:5d:29:6b:33:a1:cb:c0:22:39:6b:7a:f8:c2:08:
51:f9:36:d6:91:9b:c4:70:16:9c:e9:c8:55:b7:62:
46:57:30:b1:ef:95:38:77:65:e7:31:de:de:b3:e8:
0f:05:ec:de:d2:a4:68:4b:61:32:0f:dd:17:72:62:
87:69:a1:92:4f:ac:5c:a7:62:10:c8:2f:74:4c:55:
f8:b0:0a:1a:34:b0:f8:28:1d:27:f9:02:4d:15:62:
9e:50:ab:f2:7e:79:26:3d:40:0f:d8:a0:16:95:41:
64:a9:04:70:2c:63:55:86:bf:d9:cf:71:cf:bc:58:
1b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:21:EE:29:F6:3E:B7:48:7F:E1:08:43:DB:C0:6D:FF:F1:A0:44:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b554211f-70ee-3eee-87c3-9d767251f254.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:15:f8:95:ca:fa:ec:b8:2a:33:00:0b:8d:b2:ab:cd:fb:5e:
03:e9:7e:dd:99:30:9a:40:02:65:8d:bd:9f:df:a5:e5:3b:81:
70:91:36:22:a6:05:de:f8:56:d3:54:64:00:03:bf:0b:41:e9:
17:47:fe:a7:3e:67:f9:54:6b:96:d9:1c:ca:a6:0d:4b:6f:da:
0b:6a:85:b1:30:b0:26:67:dd:65:79:d4:0b:47:44:c8:49:cc:
db:bc:a4:46:f4:32:24:7e:9b:53:f1:89:95:70:f3:f5:b2:e1:
e9:57:19:d6:66:ea:8a:33:a4:71:db:87:b4:35:27:62:4f:1c:
23:1d:16:4d:08:36:1f:2c:c3:00:9c:cc:60:6c:92:0e:4a:0e:
9e:c7:00:91:c7:a5:d3:a1:8a:b4:85:19:50:4e:3f:37:08:d4:
37:0e:26:37:07:54:88:46:bc:27:e0:52:e9:b9:6b:10:9f:9a:
14:f4:e6:03:d3:7e:2d:21:45:55:5e:79:99:5e:cb:d2:5d:b3:
c0:75:62:2e:6a:9b:18:5d:c1:a6:da:cc:ce:fd:56:e0:09:53:
93:c7:0b:96:5f:db:40:24:c4:a9:23:0a:89:7c:76:1a:a5:38:
85:1b:76:a0:e5:53:d0:ac:ab:dc:52:47:4b:c7:b0:52:30:c5:
f0:13:c8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:18:58 2026 by rpki-client