
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fdaa83b3-6c7a-3e00-8827-0d3c81097caa.roa
File: fdaa83b3-6c7a-3e00-8827-0d3c81097caa.roa (raw, json)
Hash identifier: XqfB33nQa3m2s+druRUijpqs34Ug8zLYzMVmLJE04G0=
Subject key identifier: 8A:54:2B:89:1F:10:1F:F1:E1:5E:64:34:A7:AC:7E:0E:F2:5B:52:8E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584CB981DCCD10E9E062B072E200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fdaa83b3-6c7a-3e00-8827-0d3c81097caa.roa
Signing time: Mon 02 Feb 2026 02:00:32 +0000
ROA not before: Mon 02 Feb 2026 02:00:32 +0000
ROA not after: Sun 03 May 2026 01:00:32 +0000
asID: 24319
IP address blocks: 104.114.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b9:81:dc:cd:10:e9:e0:62:b0:72:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 2 02:00:32 2026 GMT
Not After : May 3 01:00:32 2026 GMT
Subject: CN=41a3f67b-8460-4630-a5b7-bd2cb69e4f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:74:ad:4f:4e:46:75:07:59:4d:9d:85:05:eb:
5a:bf:88:6d:8c:e9:3d:75:d6:73:38:c8:c1:1e:23:
b5:a6:de:47:f0:64:f5:58:f4:f4:f0:f8:d5:09:d4:
c1:dd:ed:cb:5f:36:22:3d:d4:10:74:20:f5:43:d1:
cf:8b:f4:fa:39:18:9a:d5:79:aa:e8:2d:19:c3:54:
55:eb:a3:f4:20:c3:b2:d8:a2:f6:5c:3b:7b:16:80:
28:d4:6a:4b:5f:ef:98:38:7f:d4:0c:3c:7b:9d:45:
ce:3e:cf:bc:ea:b3:fd:59:6d:6d:fb:e8:82:75:dd:
8b:19:00:2a:19:9f:d2:9b:0a:1e:54:ed:62:44:0e:
fe:46:8c:8b:71:8e:e0:55:1f:f0:ee:b9:f6:65:a5:
84:da:c8:5e:ad:52:a8:f7:21:b5:6e:63:0a:05:d2:
28:71:84:6d:22:e0:40:a7:a4:24:e6:98:f9:3f:fb:
4c:12:bf:4c:e9:a5:aa:16:97:0e:2c:9b:70:bc:ea:
c7:07:63:0c:80:dc:32:6f:d2:1c:75:87:e4:d5:c7:
67:21:39:f8:93:46:04:bf:fd:d3:6a:2d:35:9f:4c:
d6:2e:49:d1:36:85:1c:2c:24:ca:ce:5a:24:42:52:
0a:5a:d2:82:30:0b:f0:c4:d4:c0:b5:c6:8d:d5:17:
2e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:54:2B:89:1F:10:1F:F1:E1:5E:64:34:A7:AC:7E:0E:F2:5B:52:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fdaa83b3-6c7a-3e00-8827-0d3c81097caa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.114.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:a8:52:95:49:db:68:fe:8a:0c:c6:eb:c3:cb:c5:92:6b:a7:
98:e3:a1:16:38:cb:e2:37:b0:b3:7d:a1:c1:a5:29:99:e4:e5:
4c:7d:a0:9a:18:5d:33:2a:7c:fc:3f:5b:d1:a6:dc:68:a3:20:
f5:95:46:da:ee:84:e5:d9:80:10:69:ef:c7:d0:d3:73:fe:5b:
e8:8b:5a:b6:61:63:c8:37:91:18:e1:a9:74:52:3d:64:70:42:
b6:74:85:90:51:15:56:3c:42:7a:bf:25:34:d6:2c:27:73:b1:
73:8c:d7:0e:84:89:45:dd:f6:05:61:78:84:67:a3:26:c4:43:
65:65:16:4a:e5:d8:8a:76:a5:1d:c2:68:3f:65:b1:cf:c7:36:
28:1d:15:d4:af:6c:f6:be:04:e9:0c:78:cd:00:c7:bc:3f:fd:
df:2e:c3:9d:a9:84:7c:ec:04:30:1e:ba:88:2b:ac:53:c4:25:
78:1a:15:62:e1:35:83:ff:65:f6:5a:a4:b9:6b:25:2f:f7:20:
47:22:ef:d5:9a:29:e5:17:73:cc:1a:d6:19:49:03:8b:ed:95:
79:0f:b5:4a:f3:24:cf:2f:bd:cd:e7:5b:8b:65:04:22:22:c9:
ec:8d:88:2e:cb:3d:6a:1d:84:16:e9:2b:9f:db:46:2b:61:61:
86:e5:fd:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gdzNEOngYrBy4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk
NDFhM2Y2N2ItODQ2MC00NjMwLWE1YjctYmQyY2I2OWU0ZjRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHStT05GdQdZTZ2FBetav4htjOk9ddZzOMjB
HiO1pt5H8GT1WPT08PjVCdTB3e3LXzYiPdQQdCD1Q9HPi/T6ORia1Xmq6C0Zw1RV
66P0IMOy2KL2XDt7FoAo1GpLX++YOH/UDDx7nUXOPs+86rP9WW1t++iCdd2LGQAq
GZ/SmwoeVO1iRA7+RoyLcY7gVR/w7rn2ZaWE2sherVKo9yG1bmMKBdIocYRtIuBA
p6Qk5pj5P/tMEr9M6aWqFpcOLJtwvOrHB2MMgNwyb9IcdYfk1cdnITn4k0YEv/3T
ai01n0zWLknRNoUcLCTKzlokQlIKWtKCMAvwxNTAtcaN1Rcu+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIpUK4kfEB/x4V5kNKesfg7yW1KOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmRhYTgzYjMtNmM3YS0z
ZTAwLTg4MjctMGQzYzgxMDk3Y2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHJAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACqoUpVJ22j+igzG68PLxZJrp5jjoRY4y+I3sLN9ocGlKZnk5Ux9oJoY
XTMqfPw/W9Gm3GijIPWVRtruhOXZgBBp78fQ03P+W+iLWrZhY8g3kRjhqXRSPWRw
QrZ0hZBRFVY8Qnq/JTTWLCdzsXOM1w6EiUXd9gVheIRnoybEQ2VlFkrl2Ip2pR3C
aD9lsc/HNigdFdSvbPa+BOkMeM0Ax7w//d8uw52phHzsBDAeuogrrFPEJXgaFWLh
NYP/ZfZapLlrJS/3IEci79WaKeUXc8wa1hlJA4vtlXkPtUrzJM8vvc3nW4tlBCIi
yeyNiC7LPWodhBbpK5/bRithYYbl/RE=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:08 2026 by rpki-client