
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f4a678fd-ed16-368c-9b2f-0942aeefaad2.roa
File: f4a678fd-ed16-368c-9b2f-0942aeefaad2.roa (raw, json)
Hash identifier: qrU7Qy/9UWQUtg+Ae3trhtOWtkPG1RnS+k8ZovrsBcc=
Subject key identifier: 99:C2:AD:95:60:E0:23:75:0C:EC:71:EA:C6:5C:26:40:75:54:CB:33
Certificate issuer: /CN=f9b1a11d-20ed-494f-a473-5ebece521a34
Certificate serial: 010D0C9F4328584CDDCCF72899ACB3610DEA3680
Authority key identifier: 33:70:29:EA:A3:F0:44:D7:D8:E5:CB:AC:9F:DC:34:E4:50:24:B5:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f4a678fd-ed16-368c-9b2f-0942aeefaad2.roa
Signing time: Sun 15 Feb 2026 02:00:32 +0000
ROA not before: Sun 15 Feb 2026 02:00:32 +0000
ROA not after: Sat 16 May 2026 01:00:32 +0000
asID: 394690
IP address blocks: 104.247.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:dd:cc:f7:28:99:ac:b3:61:0d:ea:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b1a11d-20ed-494f-a473-5ebece521a34
Validity
Not Before: Feb 15 02:00:32 2026 GMT
Not After : May 16 01:00:32 2026 GMT
Subject: CN=8fafc745-842b-40b9-8fe1-698ca17d8fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:91:e1:75:d4:d4:0f:80:6c:ae:48:84:2e:3d:
e2:8d:86:9b:19:f7:b6:49:78:38:5d:05:c1:f7:f9:
dc:d7:05:84:fc:76:21:d7:bd:4e:26:3f:d9:1f:7a:
bb:75:40:23:fd:3d:3f:d4:f4:4e:0e:58:ba:9e:d3:
40:1b:a8:57:dd:c5:74:3c:e1:77:40:41:b0:11:26:
04:50:6e:c5:34:3a:ca:02:23:0f:a3:3a:61:84:81:
56:b3:26:84:39:35:2a:54:41:63:86:7a:7b:2a:ad:
85:c4:1a:07:cd:fa:0e:8c:0f:90:7f:2b:06:f6:89:
52:43:3d:48:cb:7c:f2:27:61:4a:88:84:e0:87:67:
a0:83:69:d1:32:a8:5e:09:7d:11:57:ae:96:c5:34:
26:30:5f:a6:0e:cc:9c:c0:01:f2:f4:d3:18:56:37:
b2:a4:6f:ce:69:64:82:3a:c6:64:9c:e5:5d:82:49:
e8:8e:78:af:b1:2e:05:ff:e2:d2:ab:c9:14:67:8d:
7b:95:9a:f5:c8:8c:f9:1f:35:35:6e:a8:2a:04:33:
df:7a:b0:76:30:38:44:3f:5e:5d:12:ea:6d:8d:89:
a7:18:89:0f:af:3e:6b:7e:ce:7a:93:c2:21:61:86:
7a:96:44:92:64:23:9b:d9:eb:5e:26:65:88:57:d2:
f8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C2:AD:95:60:E0:23:75:0C:EC:71:EA:C6:5C:26:40:75:54:CB:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f4a678fd-ed16-368c-9b2f-0942aeefaad2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.crl
X509v3 Authority Key Identifier:
keyid:33:70:29:EA:A3:F0:44:D7:D8:E5:CB:AC:9F:DC:34:E4:50:24:B5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34.cer
sbgp-ipAddrBlock: critical
IPv4:
104.247.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:17:f1:49:da:58:62:f9:eb:13:cb:0c:ff:72:0d:bd:3b:89:
1b:4f:cb:85:90:66:aa:8a:e2:6c:df:08:5f:5f:5f:4b:86:04:
02:e0:85:e3:9a:3a:12:9b:b3:32:8f:cf:fe:1c:c8:d6:6e:a9:
ca:2a:e2:37:3e:5d:c9:43:68:c6:28:d5:74:60:14:2f:31:4c:
49:c8:85:bb:5d:6d:89:2f:b4:18:e6:a3:45:8f:5f:59:b6:8d:
c2:e3:51:47:64:b4:3f:be:bb:d5:b2:b7:8b:37:8d:5f:cc:1c:
3b:b9:50:2a:fe:b1:b3:b8:e3:55:c6:c4:41:7f:2a:0c:b6:2e:
61:95:d9:22:ef:7a:44:1a:4b:91:45:27:45:ed:e3:25:3e:a8:
45:81:40:5c:64:93:a6:6e:28:5d:d6:67:8b:18:97:68:8f:3c:
f7:0b:ea:c8:31:d0:f6:c0:3b:e9:bd:04:c1:8d:d1:42:26:fa:
40:b1:24:29:da:e9:1a:ad:ff:50:7b:47:b9:c9:08:57:a6:a9:
01:f5:5b:f2:51:3b:33:f1:d9:14:e1:2a:a3:c7:c5:b2:41:e5:
20:cb:29:cf:16:f6:39:37:d6:38:55:cb:69:23:c1:b9:87:1d:
bb:65:51:c2:55:23:94:82:53:bf:fa:41:d2:ab:3a:ba:c9:3b:
40:4f:80:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzPcomayzYQ3qNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjliMWExMWQtMjBlZC00OTRmLWE0NzMtNWViZWNlNTIx
YTM0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk
OGZhZmM3NDUtODQyYi00MGI5LThmZTEtNjk4Y2ExN2Q4ZmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZHhddTUD4BsrkiELj3ijYabGfe2SXg4XQXB
9/nc1wWE/HYh171OJj/ZH3q7dUAj/T0/1PRODli6ntNAG6hX3cV0POF3QEGwESYE
UG7FNDrKAiMPozphhIFWsyaEOTUqVEFjhnp7Kq2FxBoHzfoOjA+QfysG9olSQz1I
y3zyJ2FKiITgh2egg2nRMqheCX0RV66WxTQmMF+mDsycwAHy9NMYVjeypG/OaWSC
OsZknOVdgknojnivsS4F/+LSq8kUZ417lZr1yIz5HzU1bqgqBDPferB2MDhEP15d
EuptjYmnGIkPrz5rfs56k8IhYYZ6lkSSZCOb2eteJmWIV9L4CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJnCrZVg4CN1DOxx6sZcJkB1VMszMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mOWIx
YTExZC0yMGVkLTQ5NGYtYTQ3My01ZWJlY2U1MjFhMzQvZjRhNjc4ZmQtZWQxNi0z
NjhjLTliMmYtMDk0MmFlZWZhYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjliMWExMWQtMjBlZC00OTRmLWE0
NzMtNWViZWNlNTIxYTM0L2Y5YjFhMTFkLTIwZWQtNDk0Zi1hNDczLTVlYmVjZTUy
MWEzNC5jcmwwHwYDVR0jBBgwFoAUM3Ap6qPwRNfY5cusn9w05FAktSkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mOWIxYTExZC0yMGVkLTQ5NGYtYTQ3My01ZWJl
Y2U1MjFhMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ4X8UnaWGL56xPLDP9yDb07iRtPy4WQZqqK4mzfCF9fX0uGBALgheOa
OhKbszKPz/4cyNZuqcoq4jc+XclDaMYo1XRgFC8xTEnIhbtdbYkvtBjmo0WPX1m2
jcLjUUdktD++u9Wyt4s3jV/MHDu5UCr+sbO441XGxEF/Kgy2LmGV2SLvekQaS5FF
J0Xt4yU+qEWBQFxkk6ZuKF3WZ4sYl2iPPPcL6sgx0PbAO+m9BMGN0UIm+kCxJCna
6Rqt/1B7R7nJCFemqQH1W/JROzPx2RThKqPHxbJB5SDLKc8W9jk31jhVy2kjwbmH
HbtlUcJVI5SCU7/6QdKrOrrJO0BPgCA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:48:45 2026 by rpki-client