
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0e650e8-42ca-3b0b-82e7-54b60647533e.roa
File: f0e650e8-42ca-3b0b-82e7-54b60647533e.roa (raw, json)
Hash identifier: n4CiG3Hj5utSNERnQ2TAI4YPoS9OuP2X/Vilmk+XjOo=
Subject key identifier: D9:B9:F9:B5:DF:5C:E6:06:1A:B7:FE:46:94:BF:BB:A7:39:67:C7:FD
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F4984E332B54B90AAD8295914
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0e650e8-42ca-3b0b-82e7-54b60647533e.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 36411
IP address blocks: 104.134.70.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:84:e3:32:b5:4b:90:aa:d8:29:59:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=0bc5a926-dab0-4c79-a8b0-a381f2077fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:de:8a:6e:2c:85:b2:09:d2:b0:85:8e:11:
ac:7c:db:9f:dc:94:63:51:6f:62:1a:06:73:e7:f5:
19:3d:55:91:5c:ea:64:07:60:8b:6c:c1:76:1f:e6:
c0:39:cd:00:29:4e:0b:8c:5c:e6:8f:ea:36:fb:82:
d6:2a:a3:a7:07:15:9c:c4:ef:b6:94:33:3f:c2:6d:
b6:ad:30:80:45:29:5d:bb:a5:46:2f:59:7b:a3:27:
86:dd:8c:3c:18:9d:41:99:1c:f9:48:f9:bb:0e:48:
83:10:c9:a8:62:90:aa:0e:80:a8:c7:e5:a2:5f:1e:
22:42:d1:f6:89:a7:21:89:fe:c2:78:d3:be:6d:a5:
93:49:eb:fb:0b:cf:77:79:e5:1b:61:06:01:e4:33:
90:f2:af:e1:49:ac:3d:08:d7:46:2a:ef:f9:ad:e3:
de:c6:86:92:f4:0d:fd:9c:93:ad:77:40:b2:44:50:
0b:46:0f:60:61:bb:e8:ae:bc:bc:0c:3f:01:4b:5b:
22:f6:5e:06:a7:bb:9a:df:0a:7c:8c:82:94:b7:59:
57:7d:c7:3a:a3:33:27:88:d7:73:8e:18:ea:48:4b:
da:68:04:16:0f:5b:35:30:26:3d:06:de:39:03:0e:
16:57:5b:ad:5e:16:ed:c9:2a:99:41:04:74:88:98:
3a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B9:F9:B5:DF:5C:E6:06:1A:B7:FE:46:94:BF:BB:A7:39:67:C7:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0e650e8-42ca-3b0b-82e7-54b60647533e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.70.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:9c:e1:06:fe:ea:2c:ec:2e:da:56:57:e7:49:7f:46:d3:09:
71:e4:12:ee:e0:cf:c1:17:00:e1:49:95:85:dd:93:68:59:88:
3b:d9:79:43:74:e4:91:ac:9c:f6:b1:b9:84:53:54:24:c7:3b:
9d:39:0c:cf:cb:e1:65:40:ca:ca:0a:5e:fa:f7:23:cd:4d:12:
8a:fd:42:ce:82:19:0e:1b:8d:0f:bf:74:45:d7:b1:3b:86:17:
8e:21:13:6a:d2:bd:a5:e7:7d:14:a7:bb:87:85:c4:7f:72:15:
5f:3b:92:67:d1:d4:bb:33:65:83:7f:e5:a6:a9:8f:b5:bb:de:
88:b9:d5:18:11:5a:e5:87:ed:10:ad:d9:42:17:71:d2:0e:b6:
93:b3:76:5d:02:75:e2:76:23:d7:1d:fb:dd:d1:e9:78:99:f4:
3c:24:7b:31:24:44:3b:13:9a:21:a7:dc:ed:af:0b:d2:cb:93:
cb:be:96:0b:82:c6:b0:5c:95:95:8a:d1:4d:c3:8b:c1:97:de:
4f:26:52:ed:d9:33:92:0c:dd:fc:dd:c1:41:3c:e8:b9:18:b0:
73:29:3b:1c:2c:5e:39:04:03:25:13:24:f5:bb:b9:27:f3:c8:
4a:12:bb:58:dc:58:d3:a4:24:d4:81:7b:14:68:54:eb:16:63:
ac:ff:06:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:18:57 2026 by rpki-client