
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a5918730-9194-31c1-b9c6-a93078738549.roa
File: a5918730-9194-31c1-b9c6-a93078738549.roa (raw, json)
Hash identifier: DsCnINcyZIUbdXQtd4io3sYY5Y2hZvkvGgFEDCD1cGM=
Subject key identifier: 46:B8:4A:E9:A2:E2:E6:9C:51:6A:33:A5:10:FD:6A:3E:0F:F6:72:D1
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584D60E50CF7DE9B4F71DE9B2698
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a5918730-9194-31c1-b9c6-a93078738549.roa
Signing time: Fri 03 Apr 2026 01:00:24 +0000
ROA not before: Fri 03 Apr 2026 01:00:24 +0000
ROA not after: Thu 02 Jul 2026 01:00:24 +0000
asID: 395973
IP address blocks: 104.134.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:60:e5:0c:f7:de:9b:4f:71:de:9b:26:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Apr 3 01:00:24 2026 GMT
Not After : Jul 2 01:00:24 2026 GMT
Subject: CN=aafe1954-8898-40fd-9b09-7dddfb7418e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4b:89:b8:4b:b5:d2:15:c2:f6:d0:a5:e0:36:
90:2b:c4:2b:d1:bb:74:5e:1e:9e:50:c2:9d:1b:0b:
2e:87:b6:8f:82:65:84:00:f8:91:63:f4:46:ab:a2:
72:3c:ee:73:9b:0a:3f:f9:98:04:2d:ac:6b:4a:bd:
e7:10:cc:72:e2:00:34:c7:f2:7c:07:3a:04:30:7e:
91:37:da:0f:36:0b:21:bf:a1:7e:de:2d:87:07:47:
1d:eb:a0:95:12:d2:fe:fe:c6:cf:45:0d:56:44:02:
ba:c3:c6:f4:25:67:02:43:80:e8:5e:dc:df:d6:f0:
94:36:d2:84:76:b7:19:73:89:af:d8:07:4d:d2:30:
39:06:2a:df:98:02:1d:b1:f6:28:f1:80:fe:ec:ce:
bf:a9:6b:04:ef:42:c9:9a:83:be:21:c4:ca:9d:63:
3b:67:bd:86:c0:77:7f:78:b6:aa:e3:fc:07:40:b5:
7f:99:6d:5b:b0:43:dc:82:f7:f2:d5:b6:84:e7:b0:
43:39:28:89:e1:25:5f:f3:65:cb:59:d3:44:de:40:
1c:a5:68:1e:ce:96:98:f7:e6:1c:e6:39:2b:d0:13:
d2:ed:82:5a:02:54:cd:9e:c4:2f:49:e5:5e:39:ed:
17:ed:f6:47:97:09:cf:3d:15:99:c5:6e:8f:b8:b6:
49:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B8:4A:E9:A2:E2:E6:9C:51:6A:33:A5:10:FD:6A:3E:0F:F6:72:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a5918730-9194-31c1-b9c6-a93078738549.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:51:af:52:4f:4b:50:90:49:01:7b:a5:85:25:f3:b1:ce:c0:
24:aa:aa:51:3f:4e:c6:76:73:a8:fd:56:42:1b:fc:50:e2:0c:
3e:2e:3c:c4:a1:10:a9:cc:d1:5b:0e:c0:2a:9b:d9:b5:54:84:
df:d1:f0:e0:cf:7e:a6:93:be:9f:25:3f:b9:a6:9f:d5:12:da:
ee:78:00:c3:2e:87:66:63:00:a2:05:66:c8:ff:3a:9a:af:2d:
51:0c:52:21:b3:92:c3:77:2c:f9:53:86:8a:fa:45:72:94:e0:
07:6e:01:ed:11:d5:bb:5d:5b:aa:3a:72:9e:d6:78:ea:27:40:
c8:b9:8b:26:47:ba:4f:bb:9c:b4:04:6f:06:aa:d6:05:f8:25:
25:3e:b0:50:76:0e:c3:27:01:46:6f:73:05:16:27:38:02:c0:
d1:21:00:9e:e2:eb:ed:f9:c9:ff:f0:c4:2d:34:4c:8d:09:2c:
53:80:89:8c:36:b7:9a:12:ba:91:d0:23:a3:46:df:fa:f0:ea:
52:8d:f2:e7:06:b1:c7:b6:8d:65:f9:3c:0f:b6:1e:81:0f:d8:
ae:70:e8:b9:1f:a1:3f:90:ea:b6:60:b2:1d:a3:8c:a2:88:96:
8c:c2:83:34:3b:bf:3c:7b:78:f9:05:b7:f8:59:d5:b3:6f:59:
e5:c9:4b:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Qz33ptPcd6bJpgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk
YWFmZTE5NTQtODg5OC00MGZkLTliMDktN2RkZGZiNzQxOGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskuJuEu10hXC9tCl4DaQK8Qr0bt0Xh6eUMKd
Gwsuh7aPgmWEAPiRY/RGq6JyPO5zmwo/+ZgELaxrSr3nEMxy4gA0x/J8BzoEMH6R
N9oPNgshv6F+3i2HB0cd66CVEtL+/sbPRQ1WRAK6w8b0JWcCQ4DoXtzf1vCUNtKE
drcZc4mv2AdN0jA5BirfmAIdsfYo8YD+7M6/qWsE70LJmoO+IcTKnWM7Z72GwHd/
eLaq4/wHQLV/mW1bsEPcgvfy1baE57BDOSiJ4SVf82XLWdNE3kAcpWgezpaY9+Yc
5jkr0BPS7YJaAlTNnsQvSeVeOe0X7fZHlwnPPRWZxW6PuLZJ1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEa4Sumi4uacUWozpRD9aj4P9nLRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTU5MTg3MzAtOTE5NC0z
MWMxLWI5YzYtYTkzMDc4NzM4NTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIBRr1JPS1CQSQF7pYUl87HOwCSqqlE/TsZ2c6j9VkIb/FDiDD4uPMSh
EKnM0VsOwCqb2bVUhN/R8ODPfqaTvp8lP7mmn9US2u54AMMuh2ZjAKIFZsj/Opqv
LVEMUiGzksN3LPlThor6RXKU4AduAe0R1btdW6o6cp7WeOonQMi5iyZHuk+7nLQE
bwaq1gX4JSU+sFB2DsMnAUZvcwUWJzgCwNEhAJ7i6+35yf/wxC00TI0JLFOAiYw2
t5oSupHQI6NG3/rw6lKN8ucGsce2jWX5PA+2HoEP2K5w6LkfoT+Q6rZgsh2jjKKI
lozCgzQ7vzx7ePkFt/hZ1bNvWeXJSxE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:45:34 2026 by rpki-client