
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3914c294-cd51-3175-b02b-781afb254873.roa
File: 3914c294-cd51-3175-b02b-781afb254873.roa (raw, json)
Hash identifier: rT2ZVWFy/1ivG+bPCGKueoJ2dr5j7dUP378j7I/fkiM=
Subject key identifier: 44:E1:88:1D:F7:C4:25:D5:FA:13:82:4F:FB:A4:09:CF:AA:B1:42:A6
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F497C73ADDED4282D3357E7C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3914c294-cd51-3175-b02b-781afb254873.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 41264
IP address blocks: 104.132.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:73:ad:de:d4:28:2d:33:57:e7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=6ba5ae52-27a3-4c32-b016-5587939f120e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:40:65:d0:cb:ae:1e:88:00:c8:db:ad:54:65:
3f:c4:c8:5b:8a:63:fb:bf:b0:36:bd:9e:04:e7:b5:
62:6a:86:9e:c7:4f:7a:26:26:b4:c4:96:c6:86:11:
46:d0:a0:49:fd:98:7f:d8:de:f7:f9:57:92:01:9f:
d1:aa:69:a3:2e:0a:4c:01:d2:49:cf:c9:66:31:29:
4d:80:68:53:43:f3:ae:59:51:a8:1a:4f:14:f0:be:
33:bf:17:86:58:85:d0:4f:c2:06:f0:ed:ef:1a:f9:
c9:1d:ce:7a:1a:dd:66:c2:5f:9f:e6:64:34:2f:f1:
5e:b5:c4:b4:11:57:ba:54:7e:71:f7:48:18:1c:0b:
5c:c8:38:6f:94:83:f0:6b:f6:9b:d1:77:8d:0a:64:
66:8c:b5:2f:dc:d5:3c:0a:a3:00:8d:60:36:4a:68:
61:4d:68:eb:11:f0:95:64:d4:0c:26:5b:a8:09:21:
92:1b:a8:9f:d7:81:b1:ce:75:83:fd:60:21:3f:8f:
d4:ef:e3:62:0a:52:0a:82:09:ba:2e:d9:5e:84:6e:
23:bd:39:c3:1c:18:ff:38:0a:36:f1:d0:90:61:da:
4b:6c:72:28:7f:d3:6d:c7:06:64:b7:e6:9b:38:29:
09:49:95:1f:26:bc:2c:60:29:5d:22:90:7a:4c:13:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E1:88:1D:F7:C4:25:D5:FA:13:82:4F:FB:A4:09:CF:AA:B1:42:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3914c294-cd51-3175-b02b-781afb254873.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:4f:12:1d:57:79:ac:7b:3c:74:ed:c2:83:50:bd:7a:f2:73:
ec:35:d2:96:0a:90:e0:b5:e6:30:8b:54:50:9f:57:6d:48:76:
a6:0e:eb:cf:1d:ab:21:e6:94:0b:cb:a3:35:43:9b:c8:6f:06:
66:db:fc:95:62:aa:25:26:2d:be:5b:ae:d3:23:71:e3:2c:1f:
9f:f5:ad:db:94:ac:32:c8:a5:fb:37:c0:70:ae:85:b2:59:f1:
5e:c1:e7:f6:84:6d:22:a6:cd:33:37:fd:22:8e:dd:6c:9b:0f:
44:cf:4b:3a:61:ff:55:36:78:32:5b:ac:f4:1e:30:bf:32:ff:
e8:d9:d1:c2:be:5c:58:39:0d:62:8f:8c:5c:7e:f5:f0:87:26:
8b:4c:2b:ba:1a:64:1f:53:fd:50:71:4c:e2:4c:ab:84:5d:d9:
58:95:c1:22:71:f9:5a:b6:d6:e1:1f:e8:22:57:ce:72:08:7e:
6d:12:9e:ff:eb:df:80:96:1f:28:35:6e:c6:02:a5:bd:c2:19:
8e:5f:92:e2:38:28:0e:4e:54:58:dc:d5:2f:dc:1e:58:01:87:
7f:a4:8a:32:0a:30:cd:0d:1e:44:4e:bf:9c:0e:c7:5a:84:75:
88:41:53:78:c6:51:90:7d:db:6f:4a:72:fa:33:d7:e0:b5:40:
4d:83:12:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:22:31 2026 by rpki-client