
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fd4175ec-0c8b-3078-ade0-d5e78f6c8add.roa
File: fd4175ec-0c8b-3078-ade0-d5e78f6c8add.roa (raw, json)
Hash identifier: SacQRRZaAkQExviABwlC0mt7830+6IlXO95GgmobmU8=
Subject key identifier: EE:78:34:A3:C6:FF:E2:4D:CF:A5:07:A0:43:C2:24:66:17:C6:5B:E9
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584EA796837597F765288FC2DC40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fd4175ec-0c8b-3078-ade0-d5e78f6c8add.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 395973
IP address blocks: 104.134.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:96:83:75:97:f7:65:28:8f:c2:dc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=655e97a4-d4c5-4ad8-ad06-da847aea8f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:c5:74:3b:4f:72:d9:17:69:a5:d4:34:b1:
6b:a1:c7:63:d0:01:8a:ac:75:b9:91:cf:ab:db:2e:
df:f9:3b:72:40:5e:32:98:b1:93:dd:4d:b4:8f:04:
83:63:9a:fb:11:f2:9c:ac:41:91:b1:76:ae:e4:bd:
9f:60:a9:54:cf:f6:bb:a1:73:93:80:3a:bd:89:93:
54:b0:fa:1b:93:84:fa:b6:f5:b4:e3:e6:13:45:29:
26:2e:98:65:a7:23:3f:99:f3:8d:b7:d8:52:be:4a:
cf:f2:22:cb:d2:65:a4:ff:b1:f9:8e:50:8f:21:26:
34:e9:6b:2e:18:4d:7f:47:f0:9c:50:0e:21:b7:00:
be:3b:a4:32:dc:fa:9e:d5:c1:ca:2a:f0:7b:06:6a:
20:78:0d:65:c2:fb:cd:e3:e9:ea:5a:06:5c:55:9f:
b7:4e:47:18:24:32:9c:f3:f1:8d:d8:38:29:93:72:
05:ea:0a:83:97:1a:67:04:fe:a0:f6:6d:f9:bb:e7:
7c:7e:03:be:1d:5f:10:e0:c8:96:fd:69:a9:bb:b2:
ff:99:d8:b7:04:f1:5d:60:2c:e7:81:f5:47:12:71:
f3:f2:98:14:18:df:84:a2:16:d2:f4:eb:cc:55:b8:
c2:3f:de:60:48:c2:19:ed:ea:71:ee:c6:27:95:70:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:78:34:A3:C6:FF:E2:4D:CF:A5:07:A0:43:C2:24:66:17:C6:5B:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fd4175ec-0c8b-3078-ade0-d5e78f6c8add.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:fd:01:09:1b:f0:59:b3:43:4c:b9:13:9f:5c:6f:4f:f9:9d:
2b:e0:95:28:b1:95:51:ae:64:af:f1:a3:4f:e2:a8:15:c3:0a:
fb:29:27:af:a2:e0:52:0e:a8:9f:f6:59:16:12:e0:f7:b4:bb:
09:a4:06:3d:21:d7:58:9e:59:90:5f:c9:e7:8b:66:e1:7a:b5:
67:b5:cd:d0:7a:d8:7a:85:47:17:9d:aa:db:58:93:8b:94:b1:
07:f3:31:a4:fc:4c:f0:63:8e:01:ce:c9:ea:06:7e:f7:8c:55:
7c:95:e6:11:2c:f9:14:de:95:ca:2b:42:1e:06:93:e8:c7:11:
16:c4:39:31:38:eb:80:41:c1:53:2a:97:b0:8d:ab:36:1e:98:
ec:08:a8:a1:c1:e0:c3:39:95:aa:cd:20:29:86:23:91:ed:cb:
5b:72:3b:d5:31:a1:e3:bf:65:02:de:9b:e4:4c:8e:01:1e:a6:
5c:a7:3a:29:a8:31:ef:60:8c:1b:6c:f6:2c:e6:a7:0e:21:19:
e6:4c:85:7a:87:19:80:b6:c2:f7:fc:ff:4d:6c:c8:9d:a4:8d:
cd:db:99:cf:02:f7:09:05:a2:5f:40:40:cd:e0:38:4e:a3:69:
f4:a2:00:fd:bf:a6:4a:2d:cd:ca:bb:df:7c:f4:84:e6:d8:3b:
b3:1b:00:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:58:52 2026 by rpki-client