
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cecb8fd1-3349-3a59-8802-c852e28ef747.roa
File: cecb8fd1-3349-3a59-8802-c852e28ef747.roa (raw, json)
Hash identifier: bhJQ0KN0bI/BeuHg36ydOfPKnBxWynZWSSuNT9bPdcE=
Subject key identifier: 1D:03:04:50:77:D6:F2:3F:13:56:9F:0A:C0:3F:FD:67:3C:0D:D4:BC
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584EA79A9AE3CA529F6B807FC080
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cecb8fd1-3349-3a59-8802-c852e28ef747.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 15169
IP address blocks: 104.134.234.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9a:9a:e3:ca:52:9f:6b:80:7f:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=cd8ff637-4d14-4d3d-a4b0-51cfa467624d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6c:4a:9f:e7:b5:fe:91:c3:08:09:96:44:22:
85:07:56:61:1b:d3:1a:12:d4:bd:97:4a:d6:bb:51:
19:db:70:f0:88:70:d7:31:ba:db:73:a4:62:59:e3:
f5:1f:64:47:90:5e:dc:68:c4:c4:90:d4:39:45:8c:
95:2d:7e:8a:09:aa:84:a3:b4:24:36:09:1e:b0:a9:
b3:d7:3a:b6:eb:d7:14:c8:e7:7e:a2:8f:92:bf:ac:
ff:81:04:90:10:81:e7:18:d4:c6:61:3c:a8:49:22:
0a:0e:b4:75:27:8e:a1:28:23:ac:b6:13:c5:b4:26:
39:60:d5:5d:c3:6c:48:75:f1:58:10:fd:c5:6b:60:
83:e9:d6:2b:d7:3d:9f:9a:fc:8f:69:02:29:8d:10:
c1:d5:9e:bf:cd:81:e4:4e:a6:c9:ce:61:18:59:25:
d2:3c:9d:c1:46:d8:9e:80:d2:a6:8a:1f:7c:1d:48:
eb:4e:b9:bc:80:f4:a6:cc:3e:57:0f:5b:85:76:b2:
00:bd:d1:5f:94:f4:b9:7b:64:49:66:c8:fd:94:05:
0a:89:df:e8:29:52:27:e4:a6:5d:d3:38:28:7b:ec:
27:e9:6b:5d:11:45:a7:d8:33:6e:36:f6:71:2d:f7:
e6:05:ca:70:56:71:fe:a2:25:82:99:22:84:b7:c2:
c5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:03:04:50:77:D6:F2:3F:13:56:9F:0A:C0:3F:FD:67:3C:0D:D4:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cecb8fd1-3349-3a59-8802-c852e28ef747.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.234.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:8b:66:97:f1:ad:ad:42:b2:66:57:8b:11:28:9f:6a:36:56:
72:40:16:1b:a2:50:5c:74:8a:b3:4b:32:56:81:39:28:2e:8a:
49:c3:c8:ef:40:72:f0:36:f2:5f:95:03:cf:e7:bf:18:c5:02:
71:c0:e6:65:71:b7:31:73:21:fe:e5:83:76:0f:df:90:b6:26:
76:4d:f7:7d:fc:e7:db:83:35:ec:f0:16:94:fc:92:b1:b1:d6:
23:6d:9b:c1:1b:26:b3:50:ff:a1:50:ba:2c:6c:90:a0:43:89:
90:c5:04:8d:67:12:1c:c3:ea:53:d3:f0:1d:4e:e3:6a:91:6f:
b4:f7:53:0d:8a:e0:d7:80:67:c3:93:f9:85:d4:9a:77:ec:b9:
71:8a:c1:50:a0:06:9b:a6:ad:8e:ff:9f:ee:7b:77:57:dd:87:
c2:b5:0d:39:96:b1:59:e9:dc:d0:58:80:d9:8b:93:99:83:24:
ee:c6:8a:21:6a:58:7f:9a:37:b5:1a:61:8a:9b:8f:a3:59:fa:
08:7e:e2:72:ab:3b:4f:21:80:13:52:5b:51:10:5e:ab:7b:12:
e6:bc:c8:5c:fd:5c:6a:8a:7d:0b:2b:13:89:a4:01:7c:83:7a:
a7:df:fc:e7:bf:3e:bd:af:99:ea:c7:e7:78:70:d6:e8:1c:9e:
7a:b7:4e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:53:05 2026 by rpki-client