
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/64aa7a5c-3ab5-3089-8059-a54e0a17c027.roa
File: 64aa7a5c-3ab5-3089-8059-a54e0a17c027.roa (raw, json)
Hash identifier: i36CAZRD6mOTjyIfXviR6KIabwhQzTkAeqyf4EZi54g=
Subject key identifier: F8:68:E7:52:5C:DE:57:90:7F:5F:DD:42:69:93:CD:E7:3E:8A:5E:84
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328584F4984F4016623E017DA9D9F00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/64aa7a5c-3ab5-3089-8059-a54e0a17c027.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 36492
IP address blocks: 136.22.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:84:f4:01:66:23:e0:17:da:9d:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=bafdebd1-acfa-4332-a1df-d3959d83ece6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:50:88:72:6d:de:0b:d0:de:52:a9:62:c6:
aa:29:81:c5:21:10:ab:3a:0f:f9:c0:62:ea:68:f5:
3f:f0:5b:9c:78:d0:6a:af:c4:85:22:35:4a:b9:a1:
63:5f:0a:ba:3e:e7:e4:d1:c2:0d:bd:b2:89:c4:31:
eb:95:f5:59:76:e0:16:8b:55:56:d7:53:70:a5:94:
5a:9b:24:e2:2c:59:90:2b:2d:d9:07:0d:d1:fa:fc:
65:b9:ea:fe:12:ed:95:80:11:60:38:32:13:36:8f:
7d:5b:24:6b:4b:79:a7:08:7b:70:cd:c0:21:1b:70:
59:50:40:10:85:4f:06:b5:20:3e:1c:3f:3f:d3:2d:
66:95:8d:c5:d0:20:e6:7c:0a:65:3c:20:1b:94:1b:
34:e2:ae:dd:9f:77:92:ff:b5:61:b7:58:34:66:00:
12:c0:c7:75:11:68:ac:75:a7:8e:c9:83:f4:b1:26:
50:18:06:14:fe:71:75:d4:a7:bb:b4:32:3f:b3:71:
12:e7:23:e2:90:47:c1:40:aa:b5:71:eb:ac:2c:fd:
38:1b:f6:42:76:8d:a8:ed:92:4d:32:a8:5f:0b:34:
b3:ce:75:3d:dd:3b:f1:64:8a:d4:ce:42:58:22:f1:
3d:59:b7:5a:14:7c:65:49:5c:b4:8d:30:48:1e:c1:
49:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:68:E7:52:5C:DE:57:90:7F:5F:DD:42:69:93:CD:E7:3E:8A:5E:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/64aa7a5c-3ab5-3089-8059-a54e0a17c027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:bf:40:14:0b:9d:99:c7:5f:3a:aa:f6:9d:7e:78:ba:e3:3c:
c7:78:27:b1:63:ca:4d:45:c5:e1:91:c0:8b:9c:98:10:bb:9e:
f4:30:28:3d:89:03:41:49:17:1c:2a:e3:98:96:26:67:7d:80:
a4:3d:cd:74:22:4c:95:c0:52:f5:6d:7c:73:37:6c:eb:4d:ed:
6e:11:a6:c6:86:2f:c1:df:ce:1e:a4:e0:e6:70:3d:e9:09:27:
ad:e7:d9:ba:53:44:94:bb:1d:ad:73:9d:2e:6c:8d:56:19:b0:
ed:a1:1a:7b:26:31:20:05:d0:2a:95:7d:3a:c5:92:57:36:66:
6d:15:a2:21:3a:38:36:91:ec:3c:7f:70:d4:52:78:b7:30:b1:
0f:13:66:6b:a6:23:fa:ae:4d:47:a3:52:c4:b6:4f:43:7f:21:
12:55:7a:11:9f:13:3a:e8:ef:a7:76:d6:63:af:0f:b8:7a:cc:
04:98:e7:91:63:47:79:b7:91:68:80:68:33:3c:81:71:a4:38:
b1:3c:b4:77:36:8a:20:54:93:ae:31:db:63:82:4a:73:ca:8e:
82:2b:56:12:83:f7:55:df:28:45:4d:d7:b5:f0:6e:15:ab:a5:
52:3a:bc:49:09:09:2b:35:3d:e9:24:66:7d:41:0f:73:8d:24:
08:b2:5c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:32:01 2026 by rpki-client