
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/a9de4f19-b042-31bc-b04a-dbfd3f28c3e7.roa
File: a9de4f19-b042-31bc-b04a-dbfd3f28c3e7.roa (raw, json)
Hash identifier: 1c8Qbihp9VTME1GhoOJqQGdK7tnLTZd6ybOaaizHYzg=
Subject key identifier: 23:2A:76:B7:9D:DB:8D:43:5F:CD:AE:F9:8E:75:5C:ED:9B:CD:74:B5
Certificate issuer: /CN=954e2959-b160-4ffa-86b4-aaa94863154c
Certificate serial: 010D0C9F4328584EE0C1F26760C3CAA458170A00
Authority key identifier: 7A:0D:9D:66:5A:CD:4F:54:DB:65:04:14:29:CB:05:0D:D9:7D:51:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/a9de4f19-b042-31bc-b04a-dbfd3f28c3e7.roa
Signing time: Tue 18 Aug 2026 13:00:12 +0000
ROA not before: Tue 18 Aug 2026 13:00:12 +0000
ROA not after: Mon 16 Nov 2026 14:00:12 +0000
asID: 3801
IP address blocks: 104.156.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e0:c1:f2:67:60:c3:ca:a4:58:17:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954e2959-b160-4ffa-86b4-aaa94863154c
Validity
Not Before: Aug 18 13:00:12 2026 GMT
Not After : Nov 16 14:00:12 2026 GMT
Subject: CN=ec083517-fc95-4d87-bb0e-05caab515046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:1b:0c:cd:12:40:c6:85:0f:fa:c1:b4:36:
fc:0a:ba:aa:9d:af:3e:34:55:64:e3:43:40:25:4a:
45:29:76:c8:2a:04:97:68:73:d2:48:b4:8a:38:b5:
d6:eb:ef:be:37:40:68:de:ea:f6:71:e9:cb:3b:2c:
11:22:1b:66:03:c8:f6:e1:96:41:78:fe:0e:5e:cc:
81:c5:58:79:40:a9:41:39:79:0a:33:d6:c1:d4:d5:
69:24:49:86:8f:95:0d:04:61:67:27:89:cc:07:83:
01:f6:8c:da:8f:22:2f:20:05:ee:e1:79:be:dd:ee:
c9:17:fa:97:9b:59:03:d1:9c:12:35:22:a6:10:e5:
89:51:b9:8b:33:6f:3a:3b:90:12:43:29:77:ce:c5:
6b:15:1c:7b:65:07:35:58:da:c6:0a:22:78:df:18:
67:d5:f5:df:d0:0c:68:a0:06:d6:e5:8a:f0:a7:6e:
04:bd:ec:56:d8:e5:24:5d:f5:be:c5:43:02:47:a8:
eb:8d:1b:9d:ba:49:a1:88:2f:81:eb:6c:0d:7e:bd:
a0:dd:15:9a:b2:24:55:63:8e:81:2f:0e:d9:3b:24:
68:31:c3:7a:1b:a6:58:05:3d:e1:2a:3d:f5:4e:c9:
f3:c5:7a:64:66:dd:f5:70:7c:88:e7:b8:62:e2:01:
f1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2A:76:B7:9D:DB:8D:43:5F:CD:AE:F9:8E:75:5C:ED:9B:CD:74:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/a9de4f19-b042-31bc-b04a-dbfd3f28c3e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.crl
X509v3 Authority Key Identifier:
keyid:7A:0D:9D:66:5A:CD:4F:54:DB:65:04:14:29:CB:05:0D:D9:7D:51:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:3b:1f:f3:82:57:70:59:ed:45:b2:c3:b1:ac:88:53:f1:e6:
d4:ac:82:8b:09:59:ea:54:2f:a4:39:5a:c9:90:d0:65:f1:7c:
c1:d0:7a:c9:78:81:31:fe:19:85:ab:2f:a6:f7:b1:cd:5e:0a:
f1:d2:9a:c7:dc:f8:98:f7:b6:e9:18:1d:dc:63:a4:3d:44:db:
f9:53:3f:6c:96:c8:b9:c6:45:52:b5:c3:a8:b3:14:9b:4d:63:
df:45:d6:5c:7b:2e:e6:f0:85:74:f5:99:4a:0e:82:fc:f5:c4:
05:c9:39:62:78:c2:8b:3c:90:11:f1:b4:d6:81:c8:f6:08:51:
1c:5b:d4:5a:8b:78:04:78:5a:3b:57:3e:c6:d9:5b:7a:15:0a:
68:99:be:89:69:d8:60:81:b9:95:55:2b:39:a9:d5:9a:b3:a1:
71:45:fa:44:60:fd:1e:7a:dd:93:dd:b3:88:29:4e:11:d2:92:
84:8c:39:00:71:47:54:13:84:e1:86:e5:ba:e7:ff:eb:33:61:
72:8e:70:2b:96:57:68:fc:26:dc:36:61:e1:70:70:eb:a1:b2:
93:fc:8b:78:32:eb:d4:2a:99:5c:71:bc:da:2e:49:28:a4:54:
9d:64:3d:3b:a8:22:f9:7b:f7:92:1b:04:bb:f5:58:50:68:eb:
71:61:b7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:21:32 2026 by rpki-client