
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d2acbc52-bb00-38b2-a37a-cb954cf5453b.roa
File: d2acbc52-bb00-38b2-a37a-cb954cf5453b.roa (raw, json)
Hash identifier: aMsDZkDHX+koOvrkIjw6CoSDvU6+b4SN7I3Lrz4/ux4=
Subject key identifier: 17:E6:C4:59:80:A0:ED:27:D2:83:5A:6B:80:A1:FB:D6:77:D4:68:7F
Certificate issuer: /CN=d25f3fa9-8b52-4f17-8aca-6740ded73683
Certificate serial: 010D0C9F4328584F4C3D575413BC96242CED4800
Authority key identifier: 8E:B5:84:9A:70:4E:11:B0:46:6B:AD:9D:D3:5B:7B:FC:11:F0:B1:36
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d2acbc52-bb00-38b2-a37a-cb954cf5453b.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 16509
IP address blocks: 104.166.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:57:54:13:bc:96:24:2c:ed:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f3fa9-8b52-4f17-8aca-6740ded73683
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=a04e61bd-01fa-4962-96ab-7d204c2ca00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:60:3d:b9:00:2d:03:50:5e:99:9a:00:37:d1:
50:85:da:1a:ca:0d:7c:64:0f:8a:3e:0c:88:c8:8c:
d5:96:f0:f9:7b:5a:d6:90:69:c3:d2:c6:e7:17:05:
f4:d8:bc:20:d0:07:e4:98:64:3c:0e:27:58:a5:1d:
41:93:b1:81:17:fa:b1:b0:e2:9c:5d:5b:6f:87:8f:
ce:79:eb:d4:af:6e:b6:f3:77:ed:0c:bc:18:76:e5:
5e:fa:3e:38:13:f2:1d:ea:7a:d2:66:67:b0:1b:5c:
8f:82:98:22:1e:d5:71:b8:5a:e1:cb:cb:92:88:ab:
67:9b:47:49:4a:c8:fa:e4:3b:e9:b8:ff:dd:4d:fc:
9a:39:11:d0:44:1e:38:e0:16:a0:99:14:f1:50:e8:
1c:da:c6:38:16:93:5a:1d:28:af:1f:e6:a6:ec:dd:
d6:ff:82:37:d8:b6:14:bc:08:fd:d1:c2:96:c6:d2:
20:8e:87:bd:34:22:0b:57:98:17:f9:55:35:82:ce:
1a:0e:59:bc:40:9b:25:72:0d:55:2c:b9:16:a3:ea:
a9:ad:1c:67:fb:63:aa:75:1a:52:5b:39:a5:2c:59:
bf:e8:05:0b:0c:7f:0f:fa:6c:d0:41:8e:71:b3:f1:
31:64:87:66:18:15:47:10:ca:4e:fb:c5:7a:5e:c1:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E6:C4:59:80:A0:ED:27:D2:83:5A:6B:80:A1:FB:D6:77:D4:68:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d2acbc52-bb00-38b2-a37a-cb954cf5453b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.crl
X509v3 Authority Key Identifier:
keyid:8E:B5:84:9A:70:4E:11:B0:46:6B:AD:9D:D3:5B:7B:FC:11:F0:B1:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer
sbgp-ipAddrBlock: critical
IPv4:
104.166.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:28:d5:8b:94:34:84:6e:37:0c:2c:80:b8:6d:4d:b0:4e:28:
3d:72:29:ec:c8:de:ad:f9:3b:95:c0:c1:2c:bf:44:ef:9c:91:
e4:08:78:4d:3d:cb:4f:7b:ea:c1:30:13:0f:f0:5d:a2:96:eb:
63:31:3a:02:93:ba:7c:1b:a0:dc:27:bf:ee:30:8f:f5:74:d6:
d1:63:a0:41:09:d7:26:61:02:14:74:0c:51:d7:03:0e:52:63:
e0:09:06:9b:b3:6b:36:64:f8:23:e2:55:ea:7a:5b:87:90:56:
6f:c9:45:84:06:44:18:9f:21:ff:7f:ef:9f:25:c5:57:79:68:
8a:73:c0:c2:ff:59:f3:31:aa:f0:41:ca:22:b2:a8:e4:4f:08:
fd:e9:db:38:54:fc:80:82:37:e1:44:be:59:69:64:68:18:93:
85:66:a4:05:d8:e7:92:2d:16:10:55:8b:fe:7b:59:5a:f7:08:
10:71:e8:76:8f:a5:40:d4:49:89:22:8c:56:c5:24:1d:81:f4:
1a:f8:86:d2:ff:02:81:a9:a9:20:dd:53:88:6d:b7:aa:a1:2b:
7f:77:f9:a5:f9:2f:0c:91:89:f0:6f:c7:9b:8a:83:ea:95:b6:
74:f8:88:50:68:75:4b:f8:06:76:4b:c0:ca:d0:5c:2f:d4:87:
f7:aa:c8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:48:22 2026 by rpki-client