
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d10bb535-0a69-30d4-bd3e-c3ad366549c4.roa
File: d10bb535-0a69-30d4-bd3e-c3ad366549c4.roa (raw, json)
Hash identifier: hRHLcEmquuLlsCwJZ4mPf8tBumVyYjhEpSdK4teNF6s=
Subject key identifier: 21:E8:83:5D:80:90:C3:7C:0F:23:D8:AB:03:EB:4A:C8:B8:C5:17:D7
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584F497C7FB1C358EA62C8158A80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d10bb535-0a69-30d4-bd3e-c3ad366549c4.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 395973
IP address blocks: 104.134.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:7f:b1:c3:58:ea:62:c8:15:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=3a06f1a1-e22a-4775-a20e-9223ecc1e259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:ab:77:5f:04:7f:a0:83:85:f9:1b:69:ab:
ae:e8:f4:cc:94:82:fc:d2:22:31:2a:86:60:b6:cc:
88:df:b3:7c:0f:0a:e1:10:6b:e3:d9:9d:6d:7e:af:
61:35:c9:ac:e2:a1:89:61:2e:a0:22:9c:de:c5:b1:
70:a2:31:9c:dc:4c:49:10:98:69:73:e7:2e:b0:c6:
39:8b:b4:56:7a:c8:63:06:07:f4:5f:70:f8:74:15:
4f:8c:fb:98:40:d4:f5:e6:61:ca:20:9e:01:c0:38:
89:a5:d8:81:f0:cc:58:de:22:a6:35:be:94:f7:c3:
5b:64:01:56:ae:85:bb:7f:7c:3d:eb:83:80:ba:75:
99:61:57:3b:3c:78:47:51:39:ad:80:f9:41:de:f4:
77:5d:b7:65:cd:74:0b:5e:14:19:78:50:c7:ff:b5:
e4:38:81:a8:2a:31:6a:f8:6d:06:72:35:24:2a:bb:
fe:9d:4b:19:5c:d7:98:a3:ff:d3:6a:a0:b6:ff:ee:
9c:74:64:ca:e3:7d:4a:75:5d:51:07:42:c7:7d:85:
36:96:e9:ed:e8:c1:ac:f1:ba:f4:cb:06:bc:bf:e9:
ab:88:39:30:1f:0e:ea:e9:76:11:4b:1a:5a:d5:30:
ec:bc:39:ee:83:b5:ca:62:d1:69:2b:e9:b7:93:ba:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E8:83:5D:80:90:C3:7C:0F:23:D8:AB:03:EB:4A:C8:B8:C5:17:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d10bb535-0a69-30d4-bd3e-c3ad366549c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.142.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:07:35:0a:81:f7:d9:22:c3:06:18:aa:ca:09:01:5b:6e:23:
ce:3f:96:0e:94:43:f3:38:eb:5d:a2:96:e0:d2:59:f8:52:70:
df:46:4e:11:a5:68:97:c1:23:c1:7a:11:2d:30:2e:26:3c:40:
db:a6:bd:6a:88:41:dd:79:68:1e:d5:fa:f4:45:72:07:c6:40:
bf:33:c2:62:29:fd:ab:a2:e8:8b:08:54:e9:68:07:f2:c0:71:
85:d8:41:7e:70:40:e4:d5:ca:67:63:f5:28:66:9d:3e:a1:94:
2a:56:56:c2:f3:72:3a:01:59:4f:c6:12:1b:29:27:12:9b:48:
c5:08:3b:cb:16:6b:3a:d3:fc:fe:0a:3a:fc:d7:df:0c:fd:11:
9f:c8:40:7f:d6:3b:d6:43:82:e7:68:b7:ad:41:35:4e:bd:dc:
7b:a2:ec:40:6c:74:11:5f:6e:6c:e3:5d:92:2d:07:79:95:02:
30:4c:c3:04:b9:4c:54:c9:aa:2d:98:e9:2b:de:ca:a0:d5:53:
e4:62:9e:c6:a0:f5:34:d2:06:fc:d1:55:5b:77:17:c6:4c:5a:
f8:f7:5f:a3:7f:2e:d2:be:49:b3:b5:8c:be:6c:f4:3e:69:fb:
34:ed:31:47:49:ca:7f:ef:e4:5f:93:68:b2:0d:dc:16:ca:93:
f5:27:6b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:26:49 2026 by rpki-client