
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/dfbfc770-f1dd-38f6-8858-4800cd01515c.roa
File: dfbfc770-f1dd-38f6-8858-4800cd01515c.roa (raw, json)
Hash identifier: Zpd+5PVQY6GbviUH1WtXdenRG/zw3Y1KfQGb7hW7RvA=
Subject key identifier: 5B:E8:C9:6A:85:12:EE:52:3C:D3:DC:F8:8A:B1:F2:E4:3D:72:5B:98
Certificate issuer: /CN=9ed327a2-62ee-4bd2-be90-1cf122db3819
Certificate serial: 010D0C9F4328584E2D9F42EAB24D8C7529B19500
Authority key identifier: CA:67:09:F5:E9:84:71:C3:8D:ED:F6:A7:3A:EE:E2:99:24:9C:B9:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/dfbfc770-f1dd-38f6-8858-4800cd01515c.roa
Signing time: Mon 15 Jun 2026 09:00:12 +0000
ROA not before: Mon 15 Jun 2026 09:00:12 +0000
ROA not after: Sun 13 Sep 2026 09:00:12 +0000
asID: 11796
IP address blocks: 104.241.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/9ed327a2-62ee-4bd2-be90-1cf122db3819.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/9ed327a2-62ee-4bd2-be90-1cf122db3819.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 24 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2d:9f:42:ea:b2:4d:8c:75:29:b1:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed327a2-62ee-4bd2-be90-1cf122db3819
Validity
Not Before: Jun 15 09:00:12 2026 GMT
Not After : Sep 13 09:00:12 2026 GMT
Subject: CN=61802343-540b-43b3-a19e-a1c9de2eaa75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:e4:03:27:32:d7:56:dd:ca:bb:06:92:73:
02:b8:d2:08:f0:98:ed:1d:e2:60:63:d2:ab:80:e3:
e8:95:98:57:7c:35:34:cc:2e:a6:6d:5b:3f:db:02:
23:43:55:fb:4b:0a:e6:0f:95:40:34:9b:24:ec:d2:
eb:2a:ec:c1:3d:6d:b1:40:bb:d5:2c:4d:24:a0:8f:
03:81:f4:3f:15:27:7d:60:df:00:4c:7e:a1:09:3d:
dd:b0:95:16:7c:86:4d:41:ce:5b:5d:75:fe:e2:82:
14:34:ee:e2:7d:ce:dd:b0:cb:c3:33:22:38:63:81:
82:6f:74:ef:5e:c5:a2:42:58:d2:a9:1a:a6:86:48:
c6:c2:cf:d4:75:06:f0:53:7a:69:d2:88:9f:c2:7b:
2e:1f:ef:fc:eb:30:2d:2c:06:52:36:6f:4a:d2:e5:
e0:99:a8:2c:38:e6:df:95:45:45:68:e1:0c:5b:30:
a5:61:d2:31:cc:17:cc:92:ef:84:f9:12:17:99:fd:
d4:c6:b4:f1:ae:e1:c7:ed:c6:17:7b:41:5d:06:79:
ff:b4:7c:ab:36:fc:f2:45:c7:8e:c3:d5:36:98:5c:
f3:65:16:51:b7:cf:12:be:d8:23:cf:74:fc:0b:f8:
31:90:60:5c:eb:b5:43:c8:b5:55:03:58:11:0b:f6:
54:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E8:C9:6A:85:12:EE:52:3C:D3:DC:F8:8A:B1:F2:E4:3D:72:5B:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/dfbfc770-f1dd-38f6-8858-4800cd01515c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/9ed327a2-62ee-4bd2-be90-1cf122db3819.crl
X509v3 Authority Key Identifier:
keyid:CA:67:09:F5:E9:84:71:C3:8D:ED:F6:A7:3A:EE:E2:99:24:9C:B9:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819.cer
sbgp-ipAddrBlock: critical
IPv4:
104.241.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:1d:99:7b:9f:b6:9b:81:c7:9f:cf:67:cc:4d:9d:7a:61:66:
eb:c3:77:7c:df:2f:54:36:18:ad:3a:da:78:36:12:5b:90:2d:
94:54:7e:e7:9f:08:d4:f2:14:52:1f:7f:81:a2:2b:cc:15:8c:
3b:6c:61:c8:7b:ed:78:5b:8f:50:a2:16:e6:85:a5:df:49:6d:
70:1f:ae:b6:56:a5:ee:dc:e7:69:3f:32:bb:2a:9e:1d:18:7e:
a2:d2:63:87:93:42:01:c2:75:e8:f8:0e:91:b6:26:e9:fe:dc:
2f:34:73:2f:28:25:1e:cf:fb:d1:b0:7f:8d:db:83:0f:8f:45:
d5:c3:be:e6:41:ba:c9:1e:b1:94:5c:c6:03:77:2f:3a:73:bc:
57:a8:7a:ef:1f:2c:81:26:1a:42:f7:1d:c9:c4:64:5d:e6:1c:
c5:52:54:5b:3d:67:1d:86:7f:da:be:07:55:26:5e:1b:0d:45:
fb:6c:65:7d:f7:95:5b:bc:32:e0:b6:e3:b1:8d:9e:4b:11:6d:
68:10:76:d0:b8:08:57:a8:2a:d4:11:e2:41:08:11:c2:04:d0:
1e:bc:3c:53:fa:ab:7d:7e:25:3e:df:fe:8a:64:58:00:f6:4a:
01:e4:a6:42:f5:8c:ad:0d:81:3f:13:be:f0:67:d9:e0:68:9a:
67:28:36:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 01:07:27 2026 by rpki-client