
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9a741094-99c9-3a73-98d8-bf24ee7737cf.roa
File: 9a741094-99c9-3a73-98d8-bf24ee7737cf.roa (raw, json)
Hash identifier: o0SYIRQDtEYn2sjRGxnHT5ADkMV5aYQJOYs5Y05Elds=
Subject key identifier: AF:40:B4:40:31:31:AE:D9:C5:F3:FC:9E:77:66:02:A8:AA:AE:A8:E1
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F497C6DDD3DDE912403CC3535
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9a741094-99c9-3a73-98d8-bf24ee7737cf.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 41264
IP address blocks: 104.133.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:6d:dd:3d:de:91:24:03:cc:35:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=83befaf1-6ad4-47fe-99b0-f873cab57880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:23:80:e5:2c:ff:de:9c:ca:ab:8c:96:bd:
39:ef:12:1d:73:92:9c:d8:25:cf:e4:80:a7:e3:a1:
bc:5d:79:97:65:e2:20:8b:c0:30:4a:82:46:dc:20:
1e:89:06:cf:75:74:ba:e0:a5:d1:a0:81:2e:09:54:
90:be:d7:75:89:8e:b6:4b:23:87:7d:1e:a0:c6:86:
56:a5:ed:79:4b:d2:d3:b0:98:c5:4d:f5:20:34:16:
a5:89:87:de:c5:26:ee:33:3f:f1:a3:aa:a8:6a:22:
32:8b:2a:55:5d:b1:04:ca:39:c9:8f:63:29:7a:27:
eb:fe:a3:95:75:f3:09:b9:95:fd:4e:02:55:3d:f4:
0b:9f:89:00:04:a2:99:ed:3f:b2:8d:ba:c2:96:98:
e3:ca:fb:c8:c0:f2:ca:dd:6b:0f:c7:05:b5:b4:a5:
66:6c:6f:ed:22:4f:03:b4:a5:90:d2:e1:f0:ae:78:
b1:4a:88:2a:fb:c6:6a:c4:04:84:2e:8d:2d:da:cd:
04:1f:d3:9e:5d:f8:06:20:73:4c:18:18:74:e4:c7:
44:64:bc:33:d6:d2:d1:2a:68:df:b2:9f:77:db:e5:
c9:ca:0f:22:8e:c3:8a:3a:95:f5:3e:c1:9a:28:47:
0a:58:58:34:7f:01:ad:7a:5a:b0:92:d2:97:b9:fe:
fd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:40:B4:40:31:31:AE:D9:C5:F3:FC:9E:77:66:02:A8:AA:AE:A8:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9a741094-99c9-3a73-98d8-bf24ee7737cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:b5:03:5b:30:20:6e:aa:ed:70:0c:f9:a3:5e:01:18:b6:92:
e1:eb:d8:2b:b6:f1:8c:0a:06:81:ed:48:49:ae:4c:df:7f:f0:
06:bb:8a:34:46:1d:59:bb:14:36:42:5e:1a:e5:c8:e2:ca:ed:
b8:72:35:3e:0e:6a:e4:90:03:3d:1e:24:bb:a1:86:0c:97:46:
a6:af:63:cc:3a:75:53:96:91:88:dd:3a:50:fd:87:b5:24:04:
5b:c2:a4:f9:a1:b1:f6:bb:09:e5:7b:cf:5e:79:59:96:28:cd:
2c:67:34:43:ee:e4:07:2a:c1:d3:e0:e2:e0:52:2b:e1:83:09:
a9:78:78:43:c8:e2:c6:a5:cb:61:5a:ff:70:87:89:bf:82:4a:
2b:5f:2c:4a:49:5e:17:fb:82:99:90:7c:6f:d6:45:6d:01:1e:
25:0d:d8:90:6d:21:2f:00:e7:f2:20:3e:02:09:14:ea:f1:c2:
0c:d9:47:17:cc:b2:1b:65:1e:4c:14:c0:d9:6b:59:02:07:2c:
1d:d8:80:f5:9d:b9:02:de:9d:59:c6:55:ac:a0:b5:cc:6d:36:
c7:49:06:db:a0:d9:6b:2d:ff:40:74:ab:a1:8e:10:70:e6:5a:
63:be:97:5f:b9:f6:44:ac:4a:a4:9d:3b:35:26:b7:50:87:2a:
50:69:73:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:24:09 2026 by rpki-client