
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28fd5113-41a6-3d0c-ad20-7ab8233cb4e2.roa
File: 28fd5113-41a6-3d0c-ad20-7ab8233cb4e2.roa (raw, json)
Hash identifier: dxhcoi1b9ZbXNxEh1EPlDe/utEWeTbFRP9QJB3PF2r8=
Subject key identifier: DE:68:B9:68:37:AC:6A:8D:43:C2:C6:0F:5A:D5:17:0C:97:FD:7E:62
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584EA7967B7DB185317AF13E8E80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28fd5113-41a6-3d0c-ad20-7ab8233cb4e2.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 41264
IP address blocks: 104.133.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:96:7b:7d:b1:85:31:7a:f1:3e:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=733686af-1cd8-4318-b793-4bc10bc8b29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ed:4d:44:c6:ff:ad:6c:36:6d:4e:f7:53:60:
24:34:64:6a:b8:7d:e9:4e:a3:fb:fa:be:79:dd:3b:
d8:38:3a:0c:60:4c:51:da:08:f6:8e:53:6b:f1:6c:
04:03:ce:bc:91:0e:70:ff:52:d1:74:f4:f0:e2:cf:
a3:6a:a9:55:e9:6c:67:ca:c6:e6:ab:59:e9:b5:44:
11:28:a9:b0:68:cd:62:3a:30:35:8a:84:8b:bb:46:
03:dc:91:97:f3:49:67:31:fc:51:9e:4d:bd:29:08:
bb:64:a9:ae:24:4a:43:a2:a4:06:49:24:40:c6:ba:
ef:2b:4b:bd:82:45:9d:bf:14:50:10:a3:23:55:74:
e6:7e:d8:cf:6a:b1:2c:8b:10:86:bd:23:3b:b1:0a:
74:32:8d:a9:71:06:96:98:cc:11:29:cb:f9:4d:52:
8c:97:4a:bf:7d:3d:14:7d:b7:b7:3c:b1:ca:07:91:
fb:98:2d:28:7a:29:2d:a0:16:39:bb:20:b0:24:01:
74:7e:3d:78:a6:a6:30:f3:d4:73:04:9f:8d:ae:5a:
f8:ae:9a:d2:e1:cd:05:28:6e:2f:3f:a7:a2:e0:d9:
60:61:8b:da:20:59:d4:3f:bb:e8:96:95:7e:e6:b2:
cb:c9:88:45:bd:5d:da:10:44:a9:bc:7a:46:49:93:
81:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:68:B9:68:37:AC:6A:8D:43:C2:C6:0F:5A:D5:17:0C:97:FD:7E:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28fd5113-41a6-3d0c-ad20-7ab8233cb4e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:40:74:9a:3c:be:db:f8:75:a5:53:71:54:82:3e:91:51:72:
4e:25:1c:84:09:b9:55:d5:e6:71:bb:b6:5f:fc:76:05:f3:a1:
71:5e:93:60:b3:d2:bd:94:0b:45:0d:9a:65:7e:a0:3a:0e:87:
f1:57:6b:98:8a:ce:96:1a:98:d4:d0:aa:a9:e4:78:22:e2:1e:
ed:cc:b5:05:25:13:ee:ac:ed:bb:ce:35:e2:9c:31:df:d8:c2:
38:2f:3b:48:aa:e8:d1:2c:bd:4e:5c:a2:95:bb:f7:df:ad:68:
09:60:5a:be:80:ca:7b:6b:32:79:c0:b1:4e:18:00:30:4d:0c:
b0:17:ac:8c:49:e7:e2:f6:04:c5:46:38:30:42:76:6d:6c:12:
00:80:e3:c0:ca:49:2e:df:49:52:ae:de:c4:43:67:0a:91:91:
6d:d5:0c:9e:2c:51:82:4d:41:16:f7:9f:72:e1:27:67:70:5b:
87:f7:bb:3a:97:0c:80:37:d9:56:e0:99:20:2d:ec:a0:36:fb:
46:d2:19:6a:51:d7:de:2a:a7:fe:b1:f0:af:d8:2a:7e:54:56:
a1:08:1b:27:68:81:57:e8:d7:24:7d:cd:cc:41:da:73:52:d2:
4b:19:bf:51:6b:24:83:0c:b8:0a:a9:8e:07:b3:dc:3d:b5:cb:
1c:24:7c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:11:02 2026 by rpki-client