
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cc2cc1ba-7a06-33a7-a7f5-6a4657122659.roa
File: cc2cc1ba-7a06-33a7-a7f5-6a4657122659.roa (raw, json)
Hash identifier: Ofjh3/9fpNk2477cQWWbCf0R+TahLXfmCCj2GlBuwzs=
Subject key identifier: 7C:32:79:D5:4F:02:58:9C:42:5B:52:E1:89:CC:5A:52:5F:D5:33:01
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F497CA929344A43EAC3988080
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cc2cc1ba-7a06-33a7-a7f5-6a4657122659.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 15169
IP address blocks: 104.134.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:a9:29:34:4a:43:ea:c3:98:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=cc3319ac-afa4-4074-a8cc-039957a86395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:87:fa:ce:a0:41:69:8c:4f:95:51:71:4b:75:
a2:5d:76:49:52:5a:fc:9a:bb:6c:36:02:ff:40:58:
fc:5e:1b:70:fd:ae:37:81:c8:a4:7d:f9:1a:91:90:
ea:2f:d1:5d:75:93:8b:19:d4:25:54:e9:bb:53:64:
69:3e:55:95:b8:aa:af:3b:2f:8a:a3:3a:28:27:15:
bc:b4:1b:be:8a:24:31:3e:44:10:44:e1:3b:ce:95:
56:37:c8:06:a5:36:38:ed:37:f8:cf:e5:c5:8e:91:
8e:19:b6:da:b2:f0:bb:43:b3:f5:f2:96:73:53:87:
aa:7d:4d:bf:12:5b:26:48:8e:92:48:38:ab:6a:fc:
5b:bc:c3:81:70:32:ab:11:fe:00:b5:b7:40:4e:a1:
0f:10:1b:f8:eb:a8:60:c0:11:29:18:53:6c:df:15:
9f:35:16:9e:26:da:21:16:1d:18:e0:bf:f7:32:84:
f3:f1:4f:20:ef:80:56:a3:33:ca:a0:e3:f2:74:84:
d9:16:b6:46:91:2e:00:1a:f7:c9:c6:c3:60:f2:d5:
22:f7:5d:df:fb:04:92:1b:8f:49:38:ce:65:14:24:
7b:6e:4c:dd:ac:83:e5:65:46:63:e6:96:b7:95:07:
a8:96:e7:4d:9f:d7:13:16:b0:99:26:de:5a:ef:ce:
83:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:32:79:D5:4F:02:58:9C:42:5B:52:E1:89:CC:5A:52:5F:D5:33:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cc2cc1ba-7a06-33a7-a7f5-6a4657122659.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:4e:ee:56:12:12:3c:66:9a:04:60:f1:70:2f:c4:44:5f:c1:
7b:3c:33:84:97:37:8b:02:e3:f5:d5:1d:cb:04:41:bd:93:53:
61:e4:41:6f:49:41:a1:10:7a:56:65:0c:a5:13:c3:7a:a4:ac:
4a:40:b2:ee:02:f3:00:ed:57:9b:ad:91:cf:f1:e0:02:6b:1b:
bc:e5:ab:59:46:8a:1c:4c:c9:74:bd:19:8b:c8:7b:29:ec:c2:
64:e4:a0:a0:96:c9:25:91:5a:29:f0:7a:aa:88:59:7a:1f:65:
55:c0:8d:b2:4f:89:14:af:47:c1:be:a6:9c:1a:5c:98:58:a5:
28:04:d3:13:a9:3f:cc:be:b2:60:6c:5e:73:b2:98:b3:46:9c:
5e:d1:b9:57:3a:cf:43:24:8d:2a:f5:07:91:11:af:60:95:bf:
f4:96:f7:d8:87:c8:ad:d3:9c:ee:06:7b:44:2a:1c:ff:ef:e6:
a2:e6:3c:0f:57:eb:8f:74:ab:c1:8d:c4:06:d4:85:f7:35:8b:
e9:2c:3f:ef:cf:0c:ce:a2:cb:41:c4:69:e8:22:50:3b:6b:2c:
c6:5d:41:d1:84:29:46:f8:93:23:69:98:0f:8b:d9:a7:0c:dc:
34:1d:9e:5e:4c:65:2b:ef:a0:cd:1a:e5:04:04:dd:1d:3b:99:
31:a1:8e:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfKkpNEpD6sOYgIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2MzMzE5YWMtYWZhNC00MDc0LWE4Y2MtMDM5OTU3YTg2Mzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxof6zqBBaYxPlVFxS3WiXXZJUlr8mrtsNgL/
QFj8Xhtw/a43gcikffkakZDqL9FddZOLGdQlVOm7U2RpPlWVuKqvOy+KozooJxW8
tBu+iiQxPkQQROE7zpVWN8gGpTY47Tf4z+XFjpGOGbbasvC7Q7P18pZzU4eqfU2/
ElsmSI6SSDiravxbvMOBcDKrEf4AtbdATqEPEBv466hgwBEpGFNs3xWfNRaeJtoh
Fh0Y4L/3MoTz8U8g74BWozPKoOPydITZFrZGkS4AGvfJxsNg8tUi913f+wSSG49J
OM5lFCR7bkzdrIPlZUZj5pa3lQeoludNn9cTFrCZJt5a786DPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHwyedVPAlicQltS4YnMWlJf1TMBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2MyY2MxYmEtN2EwNi0z
M2E3LWE3ZjUtNmE0NjU3MTIyNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFO7lYSEjxmmgRg8XAvxERfwXs8M4SXN4sC4/XVHcsEQb2TU2HkQW9J
QaEQelZlDKUTw3qkrEpAsu4C8wDtV5utkc/x4AJrG7zlq1lGihxMyXS9GYvIeyns
wmTkoKCWySWRWinweqqIWXofZVXAjbJPiRSvR8G+ppwaXJhYpSgE0xOpP8y+smBs
XnOymLNGnF7RuVc6z0MkjSr1B5ERr2CVv/SW99iHyK3TnO4Ge0QqHP/v5qLmPA9X
6490q8GNxAbUhfc1i+ksP+/PDM6iy0HEaegiUDtrLMZdQdGEKUb4kyNpmA+L2acM
3DQdnl5MZSvvoM0a5QQE3R07mTGhjhc=
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:40:59 2026 by rpki-client