
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3b856b5-ec3e-368a-a900-0639c1b253ca.roa
File: e3b856b5-ec3e-368a-a900-0639c1b253ca.roa (raw, json)
Hash identifier: 2hAqq/kUCoS5PAhF1ODYzOLyHqFlAiI2lDB28l1LT7I=
Subject key identifier: D9:42:3F:4D:1B:4D:C3:90:2D:91:7A:E3:3E:39:4D:31:39:E6:E7:20
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584EDB2C9318D1E145676E754980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3b856b5-ec3e-368a-a900-0639c1b253ca.roa
Signing time: Sun 16 Aug 2026 13:00:12 +0000
ROA not before: Sun 16 Aug 2026 13:00:12 +0000
ROA not after: Sat 14 Nov 2026 14:00:12 +0000
asID: 36383
IP address blocks: 104.135.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:db:2c:93:18:d1:e1:45:67:6e:75:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 16 13:00:12 2026 GMT
Not After : Nov 14 14:00:12 2026 GMT
Subject: CN=0cce1e10-1c3b-48f7-9017-d635d53383fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:79:a4:72:ed:d0:f0:8e:df:1a:ae:07:23:50:
bf:87:07:fc:a9:42:4d:25:6f:9a:5f:1b:9c:32:1b:
47:13:1d:91:ad:85:93:8b:ca:c8:5e:6a:24:c4:6f:
8c:b4:95:bf:a2:9b:bf:76:7d:5a:80:99:d1:88:5c:
c9:c2:ad:7e:9f:5d:35:47:f0:ff:e5:d0:cd:dd:88:
6d:73:f1:26:d7:76:3b:7d:30:47:c7:e4:df:49:ec:
5a:38:bb:19:8c:ef:fa:40:8c:7d:82:65:68:af:5d:
8d:5e:a8:5c:cd:61:59:40:21:b1:a1:e5:6b:26:ec:
ce:e6:b4:82:63:82:37:9b:3a:c8:6b:60:4c:0e:6b:
cd:b0:16:35:7a:b4:e9:4e:2a:eb:ba:08:be:33:af:
99:cd:22:78:91:5f:b9:47:e1:03:d3:08:95:2f:c0:
74:be:2e:63:f4:48:89:11:98:77:47:0a:e5:16:ad:
28:a4:d2:c0:27:ab:c1:1b:b2:4b:0f:69:59:40:95:
5f:01:4f:b6:fc:fa:5a:56:93:4e:90:e2:6f:ec:a1:
b1:43:13:43:fa:74:ba:dc:ac:76:dd:ff:70:79:f1:
9c:ac:e5:99:e9:6c:fc:54:79:7b:87:fc:fb:69:a9:
0c:cf:c1:39:db:fd:d4:73:df:63:80:97:7a:57:7f:
95:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:42:3F:4D:1B:4D:C3:90:2D:91:7A:E3:3E:39:4D:31:39:E6:E7:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3b856b5-ec3e-368a-a900-0639c1b253ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.135.190.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:9a:78:29:15:f3:25:a7:e3:30:37:5e:91:d8:3e:ba:82:68:
23:30:09:b0:5e:64:3b:ca:a9:1f:f3:58:9c:6a:7f:91:73:a1:
0a:c6:37:a0:e5:8b:e4:c5:4b:67:4c:42:a9:d9:f3:5f:15:e1:
41:a5:11:a1:bb:15:59:38:8f:f0:32:79:3b:63:8b:91:ae:1d:
f3:03:2e:ce:ac:cf:42:e2:34:49:1e:48:07:de:64:5e:b0:63:
99:2e:9c:04:eb:64:3d:c5:58:68:db:44:a2:52:89:50:c6:0b:
e1:d3:24:b3:b0:88:24:e1:4f:9e:e7:86:61:a6:c0:42:37:8d:
47:23:77:8d:03:f7:51:ef:0a:14:d3:16:5c:eb:af:a3:77:2a:
7f:8c:cb:76:d1:ae:92:20:22:90:6f:ec:5b:98:fd:17:88:06:
e2:f9:e4:c1:b1:01:75:32:a5:8e:82:5f:cc:46:cd:8c:07:5a:
2e:59:93:db:7a:69:34:9c:4c:11:e2:c8:de:40:cd:a0:f6:8e:
e4:61:0c:5f:1d:ae:77:20:f0:48:1b:98:ed:5f:91:58:c0:1b:
ea:97:fa:4c:5a:01:9e:8b:61:52:4e:22:20:c7:ff:5c:d5:a0:
94:a1:7a:8a:dc:fa:21:71:c5:9f:b8:29:5b:03:3e:68:54:2f:
53:61:c5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:12:34 2026 by rpki-client