
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e295f92f-092f-43bd-857b-06f3572f5efa/f5a3fc32-b8e0-35da-a2e3-7dce60ddaa89.roa
File: f5a3fc32-b8e0-35da-a2e3-7dce60ddaa89.roa (raw, json)
Hash identifier: vHoAWAK9GQ9HBzdbO1I5QEfXEEgm7pARgJHmWVgDsVI=
Subject key identifier: 81:48:E6:28:CA:C8:21:06:EE:3C:BD:88:16:69:03:04:E4:25:A9:D4
Certificate issuer: /CN=e295f92f-092f-43bd-857b-06f3572f5efa
Certificate serial: 010D0C9F4328584EA2DFD1C431FA8105C8669700
Authority key identifier: F4:50:D9:0F:5D:89:AE:E8:00:06:09:2D:14:1C:E5:CA:D1:18:A7:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e295f92f-092f-43bd-857b-06f3572f5efa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e295f92f-092f-43bd-857b-06f3572f5efa/f5a3fc32-b8e0-35da-a2e3-7dce60ddaa89.roa
Signing time: Mon 27 Jul 2026 09:00:12 +0000
ROA not before: Mon 27 Jul 2026 09:00:12 +0000
ROA not after: Sun 25 Oct 2026 09:00:12 +0000
asID: 63018
IP address blocks: 104.237.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e295f92f-092f-43bd-857b-06f3572f5efa/e295f92f-092f-43bd-857b-06f3572f5efa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e295f92f-092f-43bd-857b-06f3572f5efa/e295f92f-092f-43bd-857b-06f3572f5efa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e295f92f-092f-43bd-857b-06f3572f5efa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a2:df:d1:c4:31:fa:81:05:c8:66:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e295f92f-092f-43bd-857b-06f3572f5efa
Validity
Not Before: Jul 27 09:00:12 2026 GMT
Not After : Oct 25 09:00:12 2026 GMT
Subject: CN=d54ea663-19e8-4f55-b289-82aec24cff82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fd:28:0a:e6:e9:6f:82:14:c8:4c:42:a0:fe:
03:e9:38:5e:ed:0c:b3:09:16:30:04:de:7b:15:db:
34:17:60:2f:1a:1b:81:82:fa:93:51:a4:90:ae:09:
97:ac:9e:87:88:9a:de:bd:c1:0b:ea:09:7b:a1:ee:
5e:a4:79:d7:7d:91:6c:92:a2:ac:a9:b2:53:df:22:
d5:12:85:52:57:ef:39:77:cb:bc:10:7e:30:f3:56:
6d:83:88:70:77:3b:e3:a1:60:fa:96:ec:9b:31:15:
11:ac:64:fe:53:cf:9e:7e:9e:c0:32:e8:fc:02:55:
1d:0b:9d:cc:99:c4:f4:72:e5:08:1c:86:33:cf:8c:
58:12:27:5d:d6:00:63:f9:04:67:94:2b:57:c0:0f:
0e:f7:ff:13:f9:ac:0f:f0:ef:4c:e5:cf:ae:f5:0a:
54:eb:02:e3:97:3d:46:c4:12:78:be:40:83:89:b1:
6a:8e:06:9e:e1:cd:cb:89:3f:bc:fd:b9:ae:3b:77:
15:d7:da:e0:44:6a:41:73:df:b3:71:bd:1c:2b:ed:
6c:dd:16:af:89:a5:28:e6:0b:a1:12:c3:be:17:24:
0e:e5:9c:b4:4a:56:fa:f8:ab:cc:be:d6:11:f2:b3:
3c:0e:ce:84:5f:54:44:fe:22:03:bb:31:9b:1a:97:
97:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:48:E6:28:CA:C8:21:06:EE:3C:BD:88:16:69:03:04:E4:25:A9:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e295f92f-092f-43bd-857b-06f3572f5efa/f5a3fc32-b8e0-35da-a2e3-7dce60ddaa89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e295f92f-092f-43bd-857b-06f3572f5efa/e295f92f-092f-43bd-857b-06f3572f5efa.crl
X509v3 Authority Key Identifier:
keyid:F4:50:D9:0F:5D:89:AE:E8:00:06:09:2D:14:1C:E5:CA:D1:18:A7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e295f92f-092f-43bd-857b-06f3572f5efa.cer
sbgp-ipAddrBlock: critical
IPv4:
104.237.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:07:1a:ea:45:66:f5:13:00:bc:d6:8a:2c:fc:47:8f:df:1d:
47:f6:ba:ac:94:fd:85:6d:16:8c:fd:f3:ce:36:bf:a3:8f:93:
6f:fa:bb:61:40:c2:8d:90:2a:a6:be:47:c4:6b:1f:86:90:4d:
b9:a7:83:cd:bc:3c:7a:b7:d4:ee:47:e7:3c:48:6d:60:6a:37:
5d:6c:d3:aa:a4:03:ec:5d:15:47:e0:3a:72:eb:c0:be:c1:ac:
38:32:b0:b4:bf:82:72:1d:c2:60:46:cc:fc:33:43:24:cd:6b:
bb:1c:74:bd:82:3a:60:be:2b:07:2e:76:95:ce:51:dd:3f:73:
66:96:c6:8d:bc:8d:53:3d:ee:a8:cb:0b:81:77:a3:b1:34:0b:
05:b7:d4:0c:a7:26:09:f7:f1:77:4d:29:70:aa:4d:f7:8c:d8:
ec:b0:02:bd:03:45:e1:ec:a9:9f:40:ec:74:93:c3:05:1e:c5:
63:dc:30:15:36:79:76:27:51:58:2e:08:fe:7f:d8:e6:50:c8:
30:d7:d3:37:18:f3:e9:4e:37:ce:ea:82:c3:0c:6b:dd:13:11:
40:88:62:98:44:25:97:ea:70:9a:64:6d:8c:e2:41:73:5a:3c:
d0:67:b6:45:c8:86:83:02:79:c0:ad:8c:1c:e2:e5:e5:33:fb:
41:1c:90:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:27 2026 by rpki-client