
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/91bfad80-6fe2-32cf-8016-16bf4b19a422.roa
File: 91bfad80-6fe2-32cf-8016-16bf4b19a422.roa (raw, json)
Hash identifier: 0b9uoWnei3g+o8vUS7cqfLOSSI120mCtiglIfNo0op0=
Subject key identifier: C3:20:3A:4E:DF:AA:4F:4D:9E:CA:6E:54:CE:39:42:70:66:13:F0:9E
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584EC0A749469BD5DF5073D92580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/91bfad80-6fe2-32cf-8016-16bf4b19a422.roa
Signing time: Fri 07 Aug 2026 01:00:12 +0000
ROA not before: Fri 07 Aug 2026 01:00:12 +0000
ROA not after: Thu 05 Nov 2026 02:00:12 +0000
asID: 33363
IP address blocks: 104.137.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:a7:49:46:9b:d5:df:50:73:d9:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Aug 7 01:00:12 2026 GMT
Not After : Nov 5 02:00:12 2026 GMT
Subject: CN=d4dda7f9-71b6-4195-99ea-90f2eb2a70a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4f:5c:2d:94:71:77:54:e3:0c:65:b3:f1:19:
b5:6f:d0:91:ed:3f:4a:e4:3e:e7:f7:45:67:9f:30:
9b:e3:e3:58:6d:42:90:28:e4:ea:ed:6c:d0:ed:5a:
bf:55:91:aa:91:11:95:82:3d:57:25:69:fb:3a:71:
a4:78:b0:00:15:d8:74:cb:34:de:2c:9a:89:13:f4:
1b:8c:67:4e:45:74:05:28:b2:0d:43:58:74:fc:24:
8e:e7:65:ba:3e:42:23:e2:d3:03:7b:87:28:11:54:
d1:7f:0d:f9:f2:5d:66:cd:a6:1f:3f:39:55:a9:ba:
1c:52:08:c6:fa:c4:b8:1b:10:ac:e3:bf:40:a5:38:
11:7b:7b:e8:f7:cf:69:a1:47:72:3b:4a:66:93:b8:
d9:1c:bc:31:d5:9a:b6:e1:3f:46:c3:ab:3b:9e:d0:
e0:3d:26:c1:46:76:e7:6f:29:b4:ab:0c:4b:14:ee:
5e:7c:74:1d:c5:79:55:49:f5:7c:de:26:d5:0b:cc:
52:4c:f2:4d:eb:80:21:82:26:0b:55:d4:db:c2:d9:
b0:a9:56:7d:70:f5:c0:4a:ca:58:87:d1:da:a1:62:
2e:88:00:a2:2b:08:d1:c2:a0:c9:dc:6c:de:f6:3d:
44:38:4a:66:7d:21:dd:ab:62:18:f3:74:44:75:1d:
ad:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:20:3A:4E:DF:AA:4F:4D:9E:CA:6E:54:CE:39:42:70:66:13:F0:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/91bfad80-6fe2-32cf-8016-16bf4b19a422.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
104.137.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:db:76:68:33:29:f0:d3:4f:9d:d6:24:49:89:8a:a3:50:08:
7e:f1:e3:d6:6a:e5:c6:5b:a0:df:38:18:35:99:31:74:16:70:
91:aa:e7:1b:b4:ce:56:38:09:56:0b:ee:f1:87:ef:6b:17:d7:
ad:a2:56:56:ea:ae:2b:e1:26:b5:62:26:1b:74:14:a1:44:e3:
ba:09:60:2f:01:f9:ee:5e:a0:27:ec:e6:12:80:df:53:d9:8f:
47:c7:13:d6:a8:62:97:5b:85:b0:9f:af:a2:bc:c7:74:d4:18:
e5:fb:c9:c1:1a:d9:d9:4f:84:f8:be:04:34:f7:47:bf:58:99:
60:ef:42:4c:31:0f:ab:f7:76:47:4d:f2:6e:50:74:16:17:c7:
3a:16:f5:fa:da:d5:5e:78:44:c6:6d:14:be:24:55:6b:ea:02:
20:3e:4b:26:83:25:fb:4a:8d:ed:fc:3c:fb:2a:7a:eb:04:b3:
e7:f2:4b:7e:e4:58:a9:8c:95:93:a3:77:87:00:81:54:41:43:
60:94:16:a5:79:73:34:47:08:1d:f3:65:e4:19:33:7c:64:cd:
a2:4c:ae:57:b8:5c:72:14:3e:9d:55:35:30:1e:fd:c5:98:07:
ac:b7:ae:be:4f:b9:5d:3e:35:8f:75:ab:44:d5:17:58:0d:ad:
c5:b1:15:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:43:33 2026 by rpki-client