
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fa64b528-4d5e-3048-93d6-79bf8737e58c.roa
File: fa64b528-4d5e-3048-93d6-79bf8737e58c.roa (raw, json)
Hash identifier: NH9E+DXbLMaEPcwuw7PgxxY59jsLNTGzh7PGdQmqo1s=
Subject key identifier: BB:1A:E9:C3:FF:73:18:5F:39:4F:D7:C0:6B:78:86:09:F4:72:BE:78
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584B5141DE630036A24B556B0200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fa64b528-4d5e-3048-93d6-79bf8737e58c.roa
Signing time: Fri 26 Sep 2025 01:00:33 +0000
ROA not before: Fri 26 Sep 2025 01:00:33 +0000
ROA not after: Thu 25 Dec 2025 02:00:33 +0000
asID: 41264
IP address blocks: 104.133.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:51:41:de:63:00:36:a2:4b:55:6b:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Sep 26 01:00:33 2025 GMT
Not After : Dec 25 02:00:33 2025 GMT
Subject: CN=b788cd76-38cc-4b60-bab0-45d14d110c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:93:4c:6e:22:ab:77:6a:90:a2:a0:bb:bd:
6f:9d:5a:86:0f:b8:72:54:73:af:b8:f9:85:c1:bd:
3e:42:98:e3:3e:b6:1e:94:19:90:81:c2:68:4c:b1:
e3:7a:9a:f0:a4:cc:1b:84:a8:4e:af:84:29:4a:5c:
00:9a:10:c3:32:1f:e2:a2:40:3f:b0:9b:5c:6b:5e:
87:16:d4:b3:0a:b9:bc:a5:de:1e:bd:66:b4:61:59:
63:8c:24:8c:cb:e2:a3:8c:cd:9f:50:0c:bc:f9:21:
b1:29:43:c9:b5:76:45:73:bf:aa:ff:cd:0c:56:14:
f3:47:3a:cc:e7:5d:84:6d:19:a5:a2:4a:8e:27:2d:
4e:d2:d7:7f:32:77:2a:0b:e3:ce:31:c9:ca:17:5d:
5a:c6:e3:70:d2:ba:19:3f:99:cf:fd:17:a7:db:de:
1d:53:3a:83:4f:c5:70:12:f3:79:fe:04:a9:44:c8:
cf:44:8d:1d:85:b9:43:f5:18:cb:ef:89:4d:bd:dd:
7a:89:eb:c0:a1:f6:69:2d:aa:df:4e:9d:73:3d:93:
2e:28:f2:48:02:18:f2:05:b4:9f:5a:cf:e2:ab:2b:
2d:c1:82:39:42:46:51:1a:30:d1:b7:46:43:71:d0:
1d:a0:86:99:3d:79:02:2e:dc:af:cc:4d:6a:11:56:
2b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1A:E9:C3:FF:73:18:5F:39:4F:D7:C0:6B:78:86:09:F4:72:BE:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fa64b528-4d5e-3048-93d6-79bf8737e58c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:f9:69:8c:9f:5a:3d:e1:58:4a:d7:e5:29:4d:e1:92:e6:70:
dd:de:66:01:ec:4e:81:2a:40:93:aa:03:84:25:2e:76:c7:1e:
0a:22:82:bf:c4:da:b1:5e:f1:74:b9:f1:e0:e4:f9:0b:fa:80:
b4:56:2a:c5:85:62:07:46:65:ab:71:75:d8:fa:aa:41:9a:9f:
25:76:8b:6d:e6:4a:b9:71:37:b1:e2:73:84:c7:2d:bd:97:77:
2b:7a:83:80:ad:46:35:fb:96:5d:d9:ef:31:ad:55:88:ca:7b:
aa:1c:1d:cd:09:6c:52:25:46:ff:6c:12:a6:2d:d5:cf:fb:93:
ee:ce:93:aa:a2:ff:cb:a4:92:ee:92:ab:e0:a4:8a:6b:e4:cd:
a5:14:6f:e3:b7:c2:c1:30:51:55:18:38:fb:32:56:c2:55:36:
cb:02:07:31:2e:6b:d2:08:a9:02:3a:08:7a:a3:90:da:98:39:
17:98:93:43:43:fd:05:a2:be:b9:00:b1:7a:d2:97:0e:d7:25:
ea:f4:c8:34:f9:85:8b:16:84:c6:d6:76:62:1c:9b:d8:b9:c9:
b9:a9:4b:8e:6a:d2:4b:96:30:a3:8f:ae:cd:7e:d1:5c:e3:11:
1c:72:c9:b2:ac:ea:ed:d1:1d:0a:9a:56:6e:2b:60:f4:09:0c:
b8:52:b0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:53:57 2025 by rpki-client