
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/29b0a77c-0492-339d-aa9c-b106f0acf458.roa
File: 29b0a77c-0492-339d-aa9c-b106f0acf458.roa (raw, json)
Hash identifier: tRL60DVu+LP2QAj/U81nk4XMRP5gt0EcvryDW8pZqLw=
Subject key identifier: 65:A5:47:74:F3:35:E3:3C:B4:E7:C6:4B:95:C7:0C:5E:A6:1B:CA:EC
Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial: 010D0C9F4328584F4987C40C0BC8035998698700
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/29b0a77c-0492-339d-aa9c-b106f0acf458.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 15164
IP address blocks: 138.199.100.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:87:c4:0c:0b:c8:03:59:98:69:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=697db633-572b-42b0-8d8a-975f88dd25bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c4:7d:ca:0f:69:14:3a:22:5a:60:4e:6e:ef:
6e:43:f9:47:05:63:95:7e:0e:f1:b2:e8:7e:66:44:
63:18:7e:2b:d5:92:b4:c0:02:f4:96:ea:c8:6b:e3:
12:dd:29:09:ab:3c:f3:34:ab:7b:9a:64:b7:72:2c:
9b:f8:22:a0:9e:11:4d:00:57:98:cc:f3:69:19:0e:
50:69:a3:62:3a:33:e5:6e:d0:c0:c9:50:08:64:22:
17:07:da:60:13:da:6a:d2:57:ac:17:bb:75:70:ac:
f7:85:34:72:59:60:2d:3a:5a:b7:7e:01:7e:42:81:
06:5c:c2:8d:12:87:a9:10:c2:02:bc:d3:c1:7a:c5:
dc:7d:65:17:d2:38:e3:9f:1c:04:43:c9:3f:ab:7d:
9e:ff:fb:81:23:d1:f5:5e:d4:2d:2e:a3:b0:c7:f5:
5b:eb:46:55:80:fe:2f:dd:e0:91:75:ff:6a:fa:30:
f1:62:7b:d9:ff:90:7c:b1:05:c6:7e:1e:8e:de:c2:
e3:98:46:fa:0a:40:ab:1a:21:c5:eb:86:ab:73:32:
29:ab:eb:e8:c8:33:e3:76:61:3a:84:f7:ba:8f:f3:
f1:6a:8d:ef:5d:97:ef:09:6a:80:0b:bb:34:c5:85:
17:6d:e1:0e:4e:5b:fe:31:a5:75:45:97:5e:4c:07:
05:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A5:47:74:F3:35:E3:3C:B4:E7:C6:4B:95:C7:0C:5E:A6:1B:CA:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/29b0a77c-0492-339d-aa9c-b106f0acf458.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
X509v3 Authority Key Identifier:
keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
sbgp-ipAddrBlock: critical
IPv4:
138.199.100.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:66:da:6b:87:b4:8c:36:e9:ba:0c:11:63:73:1b:0c:de:10:
0f:80:53:e1:c3:d4:4e:90:e6:a3:9f:ad:eb:2a:b9:f8:ef:db:
22:70:74:7f:4c:53:3f:dc:3b:43:3c:8b:f1:ff:b6:23:c0:49:
d8:11:a8:4a:77:fb:4b:aa:41:30:f9:5f:f8:eb:27:67:f0:cc:
bf:86:a9:86:04:dd:0d:94:63:35:69:c9:5c:49:d2:07:fc:cb:
8b:ae:4e:f6:f8:97:fd:30:4b:22:f4:b4:5c:3d:72:a5:95:88:
b2:df:ea:c9:6b:c6:76:e0:36:c4:cb:51:50:4c:24:bf:96:c6:
92:b9:07:6e:29:09:9d:78:4d:c0:6c:06:1e:5c:65:99:a9:e0:
87:73:c4:df:4a:0b:28:d0:04:65:a9:9c:0e:83:aa:05:2e:a0:
90:2d:00:e8:05:66:f4:ee:3e:93:3b:8f:0b:0f:c4:22:97:b2:
31:45:c8:fd:13:49:d7:76:75:68:7e:28:00:76:2e:7e:f6:92:
51:4a:74:96:77:a2:53:26:51:eb:64:6c:bb:c0:72:78:29:c7:
94:02:c4:94:1b:c0:c0:d4:82:17:1a:d3:99:db:87:ce:a6:b7:
70:a0:90:f0:94:ea:83:0b:d4:65:03:58:e5:ab:43:74:14:91:
4f:d0:b5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:35:37 2026 by rpki-client