
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cf5a63f5-02e4-3524-9217-d786e8df2e30.roa
File: cf5a63f5-02e4-3524-9217-d786e8df2e30.roa (raw, json)
Hash identifier: PqoO4Ec/Xs0d9reb2IoL1MjXRjUJaOYAfnI3To3reyo=
Subject key identifier: 67:9B:08:2D:3E:26:06:87:02:B0:6B:E4:8B:B4:48:88:7A:65:DF:38
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584E2809A5922F307F5B7039E540
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cf5a63f5-02e4-3524-9217-d786e8df2e30.roa
Signing time: Sat 13 Jun 2026 09:00:12 +0000
ROA not before: Sat 13 Jun 2026 09:00:12 +0000
ROA not after: Fri 11 Sep 2026 09:00:12 +0000
asID: 9009
IP address blocks: 104.250.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:28:09:a5:92:2f:30:7f:5b:70:39:e5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jun 13 09:00:12 2026 GMT
Not After : Sep 11 09:00:12 2026 GMT
Subject: CN=079ab4d7-3582-45f9-a643-aae453db4bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:36:21:b4:4a:27:24:75:e9:84:00:6f:08:45:
0c:21:22:1e:d2:16:d5:d3:e5:73:d3:76:98:c3:b6:
c5:9e:31:ef:8a:bc:59:34:0a:90:84:d6:c8:14:cd:
9a:d1:bf:19:0f:98:df:b6:6d:fa:9d:d8:55:3e:cd:
c0:e1:9c:66:6d:90:9c:a8:d6:52:76:f2:24:91:e2:
38:be:1e:65:f2:d0:3e:25:e0:20:94:12:60:9f:07:
a4:02:87:4d:bb:a1:a8:60:5d:be:a1:63:84:ad:c8:
73:f0:27:af:36:3f:22:fc:8e:e3:b5:e0:5e:58:18:
b7:d9:90:eb:6e:b0:70:2c:f5:fe:a3:08:ce:dd:4a:
61:db:d4:89:1e:98:4a:4a:7d:5f:b3:ab:be:c0:4b:
55:3f:24:e4:4a:07:a4:11:10:74:33:29:00:3b:c5:
3f:a6:75:16:7f:36:b1:b6:5a:67:ba:23:2d:e0:2b:
2a:0e:cd:9a:78:65:b5:ee:f1:a3:e1:f7:46:45:f6:
0f:b3:9e:19:7e:7f:03:4a:fc:af:ce:9a:25:37:49:
ed:4e:f6:fe:ab:42:b2:da:27:da:5a:66:83:65:de:
7a:7c:1a:98:a2:6f:6c:eb:d9:4a:c2:30:dd:77:02:
03:1c:31:33:94:ac:96:89:5e:49:30:ac:c7:fa:05:
aa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9B:08:2D:3E:26:06:87:02:B0:6B:E4:8B:B4:48:88:7A:65:DF:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cf5a63f5-02e4-3524-9217-d786e8df2e30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:50:b9:da:22:5b:b3:d0:98:83:ab:60:10:c8:12:74:fe:40:
77:68:10:f1:5d:f6:12:a0:26:5a:38:c2:a0:d9:34:a8:8f:9c:
8a:d5:19:df:02:91:6c:0f:25:29:2a:f5:15:e4:e0:d8:bc:94:
16:cf:e2:3c:aa:db:76:93:5b:84:33:67:3a:67:67:f2:3c:24:
86:cc:9b:0e:fb:f5:fa:53:c3:61:e4:82:b7:0f:37:75:7b:fe:
6e:db:87:8e:d6:af:81:23:fb:a8:13:56:ad:7f:2f:f1:51:26:
09:9e:b8:6c:a9:f5:67:fc:d0:87:bd:32:a9:be:e7:89:74:9b:
ad:a3:80:7d:a4:c8:d7:ae:98:e7:79:c5:f1:ef:eb:93:6b:72:
43:44:ef:73:18:14:e9:37:75:02:13:06:83:95:ad:d8:ba:70:
41:48:b4:c2:7e:fe:5f:02:de:65:07:a9:1c:60:8b:1b:d3:dc:
0e:12:f5:2d:5d:a5:11:3e:93:92:c6:e7:30:92:a6:0b:5e:5e:
5d:7c:55:c5:7a:2c:df:92:86:87:d2:ae:10:f5:3d:a1:fa:1b:
34:d9:ff:35:5c:41:50:9d:3c:b6:de:1b:8b:52:70:8d:88:86:
ce:00:16:e4:cd:89:f6:01:99:55:a6:dc:b9:6c:b5:8a:1e:f7:
9a:aa:70:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:56:48 2026 by rpki-client