
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/641dc7ab-2e97-4a45-ad4f-12f5134d7ae8/6b9050ed-b31a-306e-8c22-9cdfcc700699.roa
File: 6b9050ed-b31a-306e-8c22-9cdfcc700699.roa (raw, json)
Hash identifier: 2TZ3IxO0rnvfkpqp4nSaG4KMQOrFi4UMnkHNOv9C9zw=
Subject key identifier: 50:8F:8D:D3:C6:4B:D5:7A:82:32:1F:4B:06:59:3C:D8:BF:49:AF:44
Certificate issuer: /CN=641dc7ab-2e97-4a45-ad4f-12f5134d7ae8
Certificate serial: 010D0C9F4328584F49755DEABCD0D1E59F2BFF00
Authority key identifier: 89:67:B2:A4:07:2E:B2:8A:46:A1:AA:AF:FC:44:ED:4A:F2:B1:B5:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/641dc7ab-2e97-4a45-ad4f-12f5134d7ae8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/641dc7ab-2e97-4a45-ad4f-12f5134d7ae8/6b9050ed-b31a-306e-8c22-9cdfcc700699.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 31914
IP address blocks: 139.64.216.0/23 maxlen: 24
162.249.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/641dc7ab-2e97-4a45-ad4f-12f5134d7ae8/641dc7ab-2e97-4a45-ad4f-12f5134d7ae8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/641dc7ab-2e97-4a45-ad4f-12f5134d7ae8/641dc7ab-2e97-4a45-ad4f-12f5134d7ae8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/641dc7ab-2e97-4a45-ad4f-12f5134d7ae8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 02 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:5d:ea:bc:d0:d1:e5:9f:2b:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641dc7ab-2e97-4a45-ad4f-12f5134d7ae8
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=91e3a312-2ba2-4fa2-b720-91b8c6a1ec20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:81:0b:ee:5d:6f:eb:59:fb:76:cb:89:34:66:
72:b5:aa:e9:d5:4a:e4:a4:d1:6b:90:eb:07:7b:e1:
00:63:82:52:dd:d2:00:2a:57:c3:ed:ec:76:77:e5:
d6:bd:53:c0:9c:0c:6e:32:44:d6:9d:cd:26:a0:0b:
03:1a:0c:17:ce:2a:91:e2:dd:69:43:94:ef:f7:f7:
81:f6:08:5e:c9:6b:31:17:ad:22:c6:a1:34:1b:ed:
47:47:df:ea:93:b7:33:dc:a5:b6:55:34:a9:53:f9:
63:32:9c:7b:53:11:e6:50:13:56:3b:ab:a6:01:6a:
28:1e:f7:f5:71:56:83:55:81:6a:66:57:ee:d1:9e:
f4:cd:5f:d5:c0:df:08:79:5f:98:8e:43:06:98:1f:
6c:06:35:4b:84:9d:7f:4b:c7:bb:e9:a8:c1:34:46:
3f:d8:86:22:9f:dd:53:fa:54:dc:1a:78:71:9d:50:
fd:61:6b:8b:ae:7f:13:29:f7:fd:92:d9:48:a7:9e:
42:0b:1a:5c:3a:63:24:6a:4d:f8:b0:ef:03:3d:5f:
6a:ac:33:90:11:d8:ce:18:81:33:f3:c9:6f:c9:01:
cc:87:45:5e:0e:8b:a3:26:c3:d1:f6:dd:d0:bf:85:
2f:4f:c8:9f:12:55:f9:bc:96:a0:a7:7b:e8:c9:92:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8F:8D:D3:C6:4B:D5:7A:82:32:1F:4B:06:59:3C:D8:BF:49:AF:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/641dc7ab-2e97-4a45-ad4f-12f5134d7ae8/6b9050ed-b31a-306e-8c22-9cdfcc700699.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/641dc7ab-2e97-4a45-ad4f-12f5134d7ae8/641dc7ab-2e97-4a45-ad4f-12f5134d7ae8.crl
X509v3 Authority Key Identifier:
keyid:89:67:B2:A4:07:2E:B2:8A:46:A1:AA:AF:FC:44:ED:4A:F2:B1:B5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/641dc7ab-2e97-4a45-ad4f-12f5134d7ae8.cer
sbgp-ipAddrBlock: critical
IPv4:
139.64.216.0/23
162.249.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:4f:b9:fa:ec:61:6b:39:ec:47:8f:b2:b0:6c:b9:69:4e:b3:
8a:8d:cf:41:ca:ce:7b:98:d4:c3:e8:a9:6c:95:bc:16:59:6b:
7d:ff:47:98:2c:e6:1e:b0:3f:e0:a9:e7:2d:a5:33:be:79:41:
34:1f:45:44:9d:f5:73:6e:4c:ad:ad:63:6a:91:4b:0a:86:94:
6a:f7:70:a3:fa:25:28:ca:57:bc:08:c8:41:f9:ff:4f:ee:a9:
d2:a6:36:92:a6:75:0b:73:eb:c5:40:94:b4:3f:43:ca:d7:3f:
18:22:65:e7:81:58:1e:af:7a:ee:53:12:c1:5e:4f:21:47:8e:
b7:16:af:d6:f1:93:d4:8a:e8:4d:51:6f:7a:14:fd:4b:58:79:
09:23:13:7c:c3:a2:64:ec:64:1b:41:d1:96:6d:d8:8b:1e:dc:
2d:22:c5:1d:da:03:ac:03:fc:4d:4a:9a:77:a8:c1:3d:72:a7:
59:5c:1f:52:93:ff:96:94:5e:7a:73:08:58:24:10:4b:a2:af:
e5:ec:68:19:84:c8:5c:0a:2d:1e:af:69:09:13:41:11:f8:4a:
c0:c8:1f:da:b4:50:86:96:9c:cb:27:67:8b:4d:3e:dc:4d:b6:
8b:47:5c:e1:92:b4:ac:96:45:a2:e9:59:13:05:d4:e7:02:68:
ed:66:4f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:56:46 2026 by rpki-client