
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c3ea4276-81f0-3187-9654-94d510fbeddb.roa
File: c3ea4276-81f0-3187-9654-94d510fbeddb.roa (raw, json)
Hash identifier: 3cEqREUbJLKud80SB9HDumasflQiUuEluqCVC/ZVplA=
Subject key identifier: E4:E6:D8:B9:86:54:62:96:FB:1B:9D:D8:A4:09:BA:3E:4D:EC:C7:05
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F497C8850A10EBC2D6836CD58
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c3ea4276-81f0-3187-9654-94d510fbeddb.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 41264
IP address blocks: 104.133.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:88:50:a1:0e:bc:2d:68:36:cd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=33eaedee-61f0-498c-b809-f3c2ab81fe9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:3c:70:16:53:1e:d0:fd:a2:97:8d:02:21:
db:9f:2c:ae:e5:20:d4:d6:4e:5a:b7:1c:56:58:78:
24:48:45:92:54:37:a7:ba:71:fb:92:6e:45:66:4f:
c3:8a:1e:20:d2:f0:f2:51:4f:84:21:09:88:c8:33:
02:ab:5f:e7:fc:7e:2b:6c:95:0a:29:7a:78:33:c9:
54:c6:ed:53:c0:29:fb:f6:c8:f8:52:65:5c:c5:2d:
e2:89:eb:b8:84:96:c5:cb:2a:2a:d2:da:31:9e:87:
1d:48:02:3e:aa:cf:05:6c:32:f6:10:14:15:a0:7d:
45:7b:68:26:87:6d:cb:16:00:1a:39:78:7b:18:e5:
c7:a1:d3:76:90:a9:a5:3f:e5:b0:5c:c0:b3:c9:fe:
09:03:4f:2b:50:99:40:6b:5f:1e:9b:96:78:35:3f:
2c:7e:41:bf:30:28:5c:78:ee:32:56:36:a5:c4:e1:
7d:34:2a:76:df:24:2f:92:51:70:1e:ce:29:0f:a9:
41:59:20:8a:2f:bf:12:54:b7:ae:df:01:b3:59:38:
e3:08:2a:bc:70:4b:03:6a:30:f0:9f:8f:20:84:41:
25:c0:72:88:3e:fd:e9:ee:16:64:d8:4b:9f:ba:03:
f1:37:e4:1f:bc:d3:67:6f:43:7f:aa:e3:4d:36:11:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E6:D8:B9:86:54:62:96:FB:1B:9D:D8:A4:09:BA:3E:4D:EC:C7:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c3ea4276-81f0-3187-9654-94d510fbeddb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:c1:3b:0c:1e:64:f7:c0:29:66:9b:f7:61:db:aa:fc:4c:7d:
f6:f8:66:54:e0:53:c8:c4:c3:f2:e3:9c:26:a9:b3:dd:c5:60:
3d:f0:55:f5:c5:23:44:9c:17:8e:a5:22:fd:8c:92:0d:cc:39:
d4:0b:39:36:cb:6f:9b:58:c2:35:80:d0:d4:e4:d3:12:8b:c6:
44:99:c4:3a:fd:be:d6:71:9a:fa:73:f5:ff:72:de:ec:eb:39:
d7:c9:3e:89:2a:0c:20:30:7a:cc:01:8c:8f:3f:26:86:03:d4:
91:c6:d4:66:93:81:b9:19:8f:7b:da:cd:25:3e:2e:4b:bc:48:
67:a9:21:83:89:52:dd:d2:01:66:00:fb:32:84:b9:cb:41:57:
4a:8e:53:70:10:f1:cd:f3:00:54:8e:18:82:9f:07:40:63:67:
80:63:dc:3a:72:b3:02:75:b7:f2:25:f8:cc:ec:89:8b:cf:8f:
0b:ff:11:6f:30:35:ae:5b:e4:08:df:9f:f8:f8:a7:55:1e:13:
3d:de:7b:c2:80:1e:d2:d0:00:15:24:20:36:2a:0f:b0:24:bd:
a9:37:6e:4f:13:9b:3d:68:88:01:5a:f8:40:f7:3f:da:0b:ba:
76:90:ec:30:4c:fc:69:36:d9:dd:b4:88:10:b5:d6:41:6f:c0:
1b:fc:96:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:31:51 2026 by rpki-client