
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5df21498-2b3d-333a-bd13-cf0535030284.roa
File: 5df21498-2b3d-333a-bd13-cf0535030284.roa (raw, json)
Hash identifier: r9Z2PNyPPai1+s3auXtUB7602Nd/lVQM0qvc9cvHsAU=
Subject key identifier: 35:F4:77:A3:DC:AB:04:37:97:44:1D:8C:94:3A:06:8A:C3:AF:CF:AA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D651513DC8251CF729DAC2980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5df21498-2b3d-333a-bd13-cf0535030284.roa
Signing time: Sat 04 Apr 2026 13:00:29 +0000
ROA not before: Sat 04 Apr 2026 13:00:29 +0000
ROA not after: Fri 03 Jul 2026 13:00:29 +0000
asID: 35994
IP address blocks: 104.100.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:65:15:13:dc:82:51:cf:72:9d:ac:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 4 13:00:29 2026 GMT
Not After : Jul 3 13:00:29 2026 GMT
Subject: CN=c80aed24-464d-4986-bc9d-2973f13a6328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:28:cb:5c:2c:63:20:8f:57:e6:72:b7:e0:
e0:ef:7c:56:ec:4d:75:f7:03:2d:01:ca:a0:41:3d:
2a:94:91:b0:b2:25:26:9f:77:8f:c8:cf:81:e8:b3:
78:1c:9d:60:fd:40:d0:df:bf:d9:b0:23:f5:d5:0b:
aa:4e:1b:3f:05:aa:73:29:9c:3b:83:01:2f:75:c9:
d6:1c:89:80:f9:22:66:05:bb:9d:29:b7:a2:44:81:
f1:26:6a:72:62:1b:8f:e9:42:e8:84:32:86:69:76:
f0:90:6e:65:16:35:18:76:61:c7:0a:d1:44:be:de:
6a:77:8e:56:54:9a:66:f0:bb:41:49:4f:bd:bb:2b:
1a:31:11:d5:f6:aa:82:5d:b3:35:f1:d8:cb:07:5c:
ba:e9:d7:46:5e:a3:73:9c:96:a2:d2:e8:b4:9f:de:
34:98:fc:a5:b3:1c:05:4e:dd:a3:25:64:38:7b:f9:
0b:93:62:e1:22:f2:7f:67:50:bb:22:74:61:ba:10:
60:73:e5:64:99:39:1f:9b:6c:d7:b8:89:a1:59:32:
30:b7:c0:84:67:09:0e:88:be:4d:e5:ea:aa:b8:10:
55:c0:f2:9f:0c:25:ce:f0:04:66:f7:19:f4:f9:14:
93:bd:a1:3b:37:21:84:39:8d:04:50:00:40:53:dd:
93:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F4:77:A3:DC:AB:04:37:97:44:1D:8C:94:3A:06:8A:C3:AF:CF:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5df21498-2b3d-333a-bd13-cf0535030284.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.100.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:e3:76:fd:49:f1:70:27:c8:08:90:78:61:af:ef:32:8d:99:
f8:c5:18:85:60:35:12:d1:3e:d6:78:0b:0d:45:94:a1:39:f1:
18:cd:62:5f:57:45:f0:0f:1f:6e:45:81:b1:10:cc:27:44:09:
6e:05:34:9c:9e:52:fb:87:ff:0d:03:ef:9f:b4:cf:02:75:49:
14:9f:54:c8:e3:fc:6c:88:4f:e5:3a:07:8f:32:47:65:40:d9:
2a:fc:b1:f2:43:05:9a:75:dd:b2:dd:e6:59:36:d4:55:60:cc:
a7:79:51:2b:e9:e7:2e:42:8a:ec:f2:4f:90:be:dd:91:56:95:
97:43:7e:6e:4f:74:fe:82:82:69:d0:ba:5e:ba:f9:d2:9e:b1:
b0:45:3e:d8:32:c1:99:1d:3d:bb:3f:41:02:f2:3a:12:17:2d:
56:f7:d8:54:d3:90:8c:96:de:e5:d8:5f:01:22:2e:1c:6b:39:
da:8b:f2:90:d9:42:d3:ed:76:ce:e4:7c:09:cc:51:65:f2:86:
e0:6d:4e:ef:05:35:e2:aa:76:88:b0:6f:e1:13:81:04:64:ee:
18:e5:f7:c7:3d:1e:39:6f:ba:7f:71:25:25:15:d4:21:31:c3:
ce:f4:9e:ec:0a:1a:a8:18:c7:f5:46:bb:8a:01:ea:05:71:82:
78:3f:d5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:06:43 2026 by rpki-client