
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cdab77c5-5a90-3693-b662-f47638d0f948.roa
File: cdab77c5-5a90-3693-b662-f47638d0f948.roa (raw, json)
Hash identifier: Q+aGHVqv4UjzYZvBY0eOV34330RckN7iM2ZvvZpyt5U=
Subject key identifier: 8E:AF:F2:5C:BE:2D:B8:68:D2:33:32:44:68:E6:13:71:DA:B9:F6:1D
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584E00061C1C3D4868C4EC392EB0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cdab77c5-5a90-3693-b662-f47638d0f948.roa
Signing time: Sat 30 May 2026 01:00:10 +0000
ROA not before: Sat 30 May 2026 01:00:10 +0000
ROA not after: Fri 28 Aug 2026 01:00:10 +0000
asID: 15169
IP address blocks: 104.134.228.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:00:06:1c:1c:3d:48:68:c4:ec:39:2e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: May 30 01:00:10 2026 GMT
Not After : Aug 28 01:00:10 2026 GMT
Subject: CN=0c5b9081-6fbf-4611-80ad-10a40c0ab3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:1b:06:23:fd:14:29:9a:45:50:ea:0e:1d:
75:ec:cc:2f:65:3c:f4:d3:ea:b8:89:80:bc:65:8a:
21:a2:a3:ce:63:ec:25:e2:c0:55:e4:6d:1e:b8:2c:
2d:8f:c3:c9:40:f9:18:72:e1:89:91:5c:ec:bc:13:
d0:5e:e4:c0:b7:aa:61:0e:d8:99:c4:56:06:e4:97:
bf:8e:08:e7:60:68:b0:10:fd:8e:d7:32:d0:63:ab:
b7:1c:d9:54:e7:32:ad:69:d3:70:8c:4a:eb:ab:0d:
50:45:1c:4d:ad:71:c4:a8:9c:08:40:c8:ef:ce:6b:
33:16:9f:e7:11:e7:ea:fc:70:61:10:34:49:f6:e9:
0d:a9:ab:4e:55:e9:ca:eb:03:61:83:c1:ec:76:75:
40:f4:76:a4:b9:e0:40:a8:83:19:ed:a3:11:e2:d9:
18:9f:e5:7c:74:2c:93:64:1b:48:e9:d4:05:37:df:
c0:3a:d6:c9:b8:2d:f1:ff:86:8b:b5:1a:2f:48:d3:
97:4f:cc:ac:d9:2a:cc:c8:9d:b3:67:d0:75:3c:94:
b3:c6:dc:69:16:33:f9:99:8a:a2:8a:61:c7:f2:14:
98:b5:2f:0c:7d:eb:93:a3:ce:9c:81:1e:03:40:9f:
16:cd:cc:4a:75:eb:ff:8d:e9:75:11:97:b8:5c:69:
de:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AF:F2:5C:BE:2D:B8:68:D2:33:32:44:68:E6:13:71:DA:B9:F6:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cdab77c5-5a90-3693-b662-f47638d0f948.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:d9:b7:a2:08:f6:e4:09:65:4e:82:83:dd:a5:c6:5d:21:26:
92:f6:87:31:a7:1d:04:b0:b9:0c:f6:e1:3c:ec:cc:d1:81:f3:
20:ef:b7:ab:4c:ed:99:72:52:46:21:b3:7e:40:69:df:12:82:
83:c5:48:42:0f:fa:2f:54:80:51:3c:0d:ae:e8:1c:3b:bb:0c:
56:be:ec:a6:dc:fa:6f:c9:26:a2:d6:40:5d:55:66:51:b0:6b:
75:56:31:34:da:f9:6e:ca:f2:6c:34:03:87:68:ec:d5:30:86:
22:83:7b:11:a5:ce:c2:0a:1a:26:40:97:6f:b9:55:44:0d:d0:
69:b0:bb:f8:2d:d2:30:1e:d3:b2:81:1e:57:23:c1:36:88:b1:
31:98:fe:e6:8b:0c:ef:38:da:b5:9e:e9:ee:1d:12:72:f0:e0:
70:6c:49:d8:b9:2e:2d:50:49:02:b0:2f:e5:41:1d:86:0a:16:
25:95:71:39:83:9f:a3:db:1c:9c:84:51:ab:83:71:f4:09:76:
dd:23:7e:a9:e2:f7:c7:91:47:3d:0e:e1:46:94:8e:3c:37:d0:
b3:7f:81:a8:c7:da:ae:c6:8e:43:b3:b1:12:72:3d:da:2f:38:
e6:49:97:3b:57:c8:aa:94:71:26:d0:78:e0:fe:9e:30:e1:37:
2d:9e:f1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:35:21 2026 by rpki-client