
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6c71a50b-e704-3623-89e8-1db9283e8ca4.roa
File: 6c71a50b-e704-3623-89e8-1db9283e8ca4.roa (raw, json)
Hash identifier: 9n5Y1bwjxSKRddiGgwSQbKKuwF6h5o8jRRsqPZ7WpTQ=
Subject key identifier: 83:DE:50:8E:6B:E9:F4:70:4E:4C:CC:B6:2B:5F:BA:08:D2:ED:A1:24
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F4328584F4C3D7910D3592A91AE611CC0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6c71a50b-e704-3623-89e8-1db9283e8ca4.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 137409
IP address blocks: 64.64.112.0/24 maxlen: 24
173.239.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:79:10:d3:59:2a:91:ae:61:1c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=21c024a7-c953-4224-a914-aa29e7a4ed8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e9:ef:56:8d:0e:3b:0e:38:47:e7:05:c3:ce:
f4:e1:00:b9:87:a0:3c:8b:26:b0:fe:d7:b8:81:e4:
88:93:61:e2:a6:92:e0:94:fd:4c:47:90:dc:dc:95:
0b:21:96:12:76:04:56:9d:93:7e:22:22:9f:1c:b3:
e8:20:8d:73:c8:e0:51:32:fc:5d:21:de:2d:68:6f:
1b:f2:b0:d7:55:d0:51:a8:92:a3:2d:83:5a:7a:10:
9b:e9:1e:35:32:fb:8d:2c:8b:c1:fd:ef:bd:55:02:
77:e1:30:8f:da:b9:f1:c6:fb:ea:8c:07:82:b0:54:
c2:c2:2f:a3:95:03:f3:01:c1:97:ff:4a:f0:7a:d9:
ef:07:20:07:1a:e0:6f:f0:3c:77:d6:df:65:e1:9c:
ca:9e:97:97:32:24:87:c4:b6:11:75:00:2a:6d:bf:
b6:9e:cd:63:ff:8d:b9:92:6b:83:06:0c:39:7a:b8:
e6:44:a1:38:b8:48:0e:ec:dc:49:12:24:99:5b:1d:
d7:fb:eb:05:e2:e0:7b:f4:a1:21:5c:d8:93:5a:ee:
12:b9:1a:e8:e0:22:73:2d:96:dc:5f:07:ca:d8:20:
5a:a5:26:2e:24:46:8b:c4:f5:f5:39:6e:03:94:0f:
5f:7c:a0:bb:34:32:23:4d:e0:21:7a:43:38:00:86:
75:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DE:50:8E:6B:E9:F4:70:4E:4C:CC:B6:2B:5F:BA:08:D2:ED:A1:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6c71a50b-e704-3623-89e8-1db9283e8ca4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
64.64.112.0/24
173.239.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:f9:83:17:b2:58:fd:14:a2:12:ce:86:06:40:22:d3:ab:89:
9b:98:ca:65:01:6d:d6:c3:2e:94:55:77:8d:2c:ed:38:8e:34:
d7:ce:2c:e5:cb:27:0f:6a:c9:15:e2:2e:8a:f4:2a:ec:91:94:
bc:e7:80:e3:96:b6:7f:47:e8:db:56:96:0d:8d:6d:e2:58:d1:
53:c6:1f:cb:2f:fa:62:a6:46:8c:3c:be:c1:43:f4:84:de:d0:
ab:38:31:fc:25:93:2c:6f:7d:3d:f5:cb:fe:a5:02:bf:2c:17:
e7:a9:f4:c5:c1:0e:86:98:03:85:44:95:97:73:1e:d0:08:1a:
06:6a:a6:e8:a3:da:64:b7:8d:f3:bd:15:29:77:5c:07:af:72:
42:48:19:b6:29:bd:61:47:22:d2:f0:1c:54:7b:f2:66:5d:0a:
5f:2e:d6:82:b9:6d:5e:6b:13:4e:7b:10:62:6f:b8:dd:f1:4c:
71:33:47:2e:d7:30:d5:13:a1:90:54:4c:cd:66:1a:9d:4a:25:
b4:a3:ab:7d:01:3c:8f:f4:84:29:1e:84:7c:db:3f:31:93:56:
a5:a0:23:8d:79:f9:67:b7:79:70:f4:8e:40:4d:b3:6f:be:23:
58:eb:18:7e:11:7d:39:9c:b1:9f:45:3b:aa:89:56:1c:c8:9d:
b8:12:30:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:57:16 2026 by rpki-client