
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa
File: a492bc79-a43d-3b74-a966-215a139f5151.roa (raw, json)
Hash identifier: dScd1jeybqqVTDDhMdw15P6dVJH2K9scs3LF3LTzmjQ=
Subject key identifier: BA:7C:53:1E:46:2C:FE:AF:41:77:FA:B9:72:F1:AB:00:ED:30:E6:3F
Certificate issuer: /CN=871ce6b0-1791-44dd-b7f7-f0b38bb30c09
Certificate serial: 010D0C9F4328584F2957B49A26FB311BA3325400
Authority key identifier: DF:3F:C7:D7:52:04:20:9C:7B:26:E5:0F:7E:C0:18:DB:3A:8C:76:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa
Signing time: Sun 13 Sep 2026 13:00:11 +0000
ROA not before: Sun 13 Sep 2026 13:00:11 +0000
ROA not after: Sat 12 Dec 2026 14:00:11 +0000
asID: 399833
IP address blocks: 104.250.248.0/22 maxlen: 25
204.144.124.0/22 maxlen: 25
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:29:57:b4:9a:26:fb:31:1b:a3:32:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871ce6b0-1791-44dd-b7f7-f0b38bb30c09
Validity
Not Before: Sep 13 13:00:11 2026 GMT
Not After : Dec 12 14:00:11 2026 GMT
Subject: CN=6a043369-c535-42db-8ea3-652c2d92c105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:70:81:24:79:7e:cc:05:4b:f9:74:2f:08:
75:ab:fc:81:5a:3b:a6:8d:ae:6e:fb:2f:1d:d1:31:
df:22:33:27:8d:f3:4c:06:bc:a6:e6:e3:87:4a:79:
7d:bd:44:cb:42:d5:b5:e9:bd:a5:d1:00:24:f1:bf:
22:e0:f0:ce:eb:86:6b:4f:39:f1:55:eb:fb:56:15:
c9:e3:27:2b:1a:a3:c6:9d:04:0e:ba:96:56:20:9d:
c3:c5:64:0a:8c:a8:c4:99:d1:6a:10:81:fc:23:bb:
2e:2f:32:06:a9:b5:6e:79:b8:69:f4:f3:91:df:73:
c6:cb:61:ba:19:1e:5e:f9:13:0b:df:21:92:1f:83:
24:57:56:39:91:3e:03:74:dd:84:aa:cc:b7:15:3d:
df:81:d8:86:ae:76:fc:62:af:08:b6:d1:97:83:72:
66:2a:37:82:dd:d3:e9:9a:8c:34:5c:0d:0c:4f:9d:
e6:2e:1c:f7:72:08:cc:d4:f1:58:6d:cc:a7:d8:99:
a9:32:2f:a8:f7:2d:f8:76:41:67:a1:bc:3f:15:ce:
3e:ee:93:26:57:0e:c3:30:a9:d8:bc:29:8c:70:f1:
3a:d1:3e:6f:d0:a8:8a:c2:d6:b2:fa:e3:eb:ab:e0:
20:9a:9d:cf:3c:e2:57:9f:01:51:c2:b4:08:b2:3c:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7C:53:1E:46:2C:FE:AF:41:77:FA:B9:72:F1:AB:00:ED:30:E6:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.crl
X509v3 Authority Key Identifier:
keyid:DF:3F:C7:D7:52:04:20:9C:7B:26:E5:0F:7E:C0:18:DB:3A:8C:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.248.0/22
204.144.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:18:03:ed:66:45:f3:cf:43:21:23:25:76:ff:03:1e:82:78:
97:06:2e:f4:0e:d9:53:ce:d8:96:59:a1:64:d4:20:43:74:58:
a5:1b:5f:9e:92:dc:78:d5:af:b2:84:e0:bc:6e:33:0b:f3:77:
c4:d8:c6:22:81:04:22:3e:83:35:62:0b:19:0d:9c:33:3a:37:
c4:04:13:52:bb:78:00:ae:bb:29:ca:ee:36:bf:65:ee:0c:80:
85:34:34:0b:83:b4:c1:8c:63:d8:27:dd:e5:d2:f7:a5:3d:6e:
b9:fe:9a:f2:67:4b:12:64:57:5c:f6:53:10:b1:36:86:8f:ac:
6a:54:66:f7:6b:53:f1:06:ea:fb:10:c0:d4:18:61:77:21:19:
80:33:71:2a:4b:0d:01:a3:7e:ca:4a:88:23:d0:15:6e:be:0f:
ba:e2:7d:0f:f5:99:7e:7b:1f:c5:51:5e:cc:f1:5d:aa:62:9e:
66:2e:4c:12:2d:76:48:b7:71:f9:4e:59:37:47:12:00:26:e3:
58:78:8a:b2:37:f5:f9:55:de:c8:8f:fa:f1:9f:8b:36:b8:bc:
8b:e4:ad:5c:39:45:0a:fa:b4:d6:8a:79:5e:e7:f9:5a:71:3b:
69:06:f3:73:66:61:e6:6d:d5:bd:c8:b9:27:56:54:e7:0a:ee:
fb:f5:02:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 10:00:03 2026 by rpki-client