
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ffb354f-e928-3147-97bd-72ab560c7723.roa
File: 0ffb354f-e928-3147-97bd-72ab560c7723.roa (raw, json)
Hash identifier: 4hJlFjNZ6tJLqSbRokHhBsXVOTrB9HATMzv7hpgS4c0=
Subject key identifier: 37:AE:D3:CB:19:E8:F3:D4:2D:B5:BB:55:22:6D:2D:CE:88:38:AA:6F
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F49848C32839C8B728F355780
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ffb354f-e928-3147-97bd-72ab560c7723.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 41264
IP address blocks: 104.132.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:84:8c:32:83:9c:8b:72:8f:35:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=c5f9001d-7efc-4c9d-b30d-f8e341c33de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:2b:6f:fc:ab:f0:09:b7:2c:a4:91:03:f7:
e6:11:86:d6:5c:91:15:e9:5a:74:ec:27:5c:a2:01:
1e:55:26:45:68:c2:dd:aa:25:b1:c1:e2:1b:b4:28:
71:2b:8b:b6:46:63:0f:c6:93:10:e4:fe:25:fe:37:
c0:16:83:f6:fa:2b:df:94:f2:cb:33:c5:e6:ee:b8:
c1:36:c8:db:02:89:f9:fb:00:1a:c6:a4:30:ee:75:
37:97:1b:37:72:98:95:73:64:4d:93:44:fa:47:9f:
d6:3d:58:c7:a9:d0:ab:29:c0:21:3e:17:1b:f4:ec:
f6:4b:95:59:95:19:49:34:c3:06:c9:2a:8d:92:9e:
9f:8a:c6:c4:4d:b6:15:b5:71:03:27:58:54:a8:4a:
4c:60:bd:62:62:21:20:ea:fe:70:89:b7:5e:7d:87:
fc:76:3b:bf:68:07:cb:84:38:69:52:a2:25:4d:ed:
f6:ed:a5:cf:2d:c2:51:b7:0c:81:f2:75:49:f3:44:
5f:aa:21:93:10:e6:14:44:64:12:78:20:17:a6:63:
49:ae:64:0c:3b:33:d5:25:72:c6:f6:49:c0:e7:e1:
a8:85:2e:22:ec:6d:2a:34:d3:5d:73:34:41:ab:b7:
82:26:55:ed:8d:8b:05:46:c5:bd:af:a3:af:08:4e:
eb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AE:D3:CB:19:E8:F3:D4:2D:B5:BB:55:22:6D:2D:CE:88:38:AA:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ffb354f-e928-3147-97bd-72ab560c7723.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:1d:7b:24:77:ad:90:14:50:08:38:76:40:77:58:ab:dd:cd:
f9:f1:6d:56:a8:b2:d4:f1:69:ab:8e:d7:a2:3e:ca:d5:05:f9:
54:1c:39:5c:31:86:34:6e:7e:cb:03:12:a5:ad:50:81:69:be:
53:26:10:90:7f:2c:16:1b:9d:54:aa:fc:f0:a8:a4:75:cc:17:
f6:20:bf:26:58:8c:e5:ff:2e:d5:65:da:63:1e:ed:54:51:c9:
e9:37:63:01:b9:c5:1b:1b:66:05:3a:2f:e2:03:51:6c:22:ab:
47:1e:33:d1:57:ad:08:91:f2:3d:b8:e3:44:7c:cd:60:dc:dc:
15:56:e6:b3:36:9e:09:48:b3:49:43:c1:bc:76:ef:0b:69:c3:
35:1b:2c:fa:20:64:94:c3:29:3b:9b:13:e3:23:c2:3e:c9:19:
71:b6:27:90:5f:69:74:31:cb:32:9e:c5:18:47:5e:81:f9:7a:
75:c5:a7:b1:bd:bd:21:39:64:65:47:ed:36:73:3e:7f:9b:2a:
fe:30:9f:b4:96:0e:7d:fd:90:92:1f:41:f5:35:1d:70:75:01:
9d:e4:14:d1:6b:6f:68:40:d8:ed:6b:4a:50:0b:1e:b9:f0:0e:
54:6f:80:81:e2:6b:22:74:98:15:7d:ce:56:10:d3:5b:39:7a:
a7:b3:04:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:58:55 2026 by rpki-client