
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/65ba6040-2dea-3276-a591-a49c78752230.roa
File: 65ba6040-2dea-3276-a591-a49c78752230.roa (raw, json)
Hash identifier: pqLm46xMCHkXuIl5/TudM0CTxvzGSLB4ClWkLQpa+jc=
Subject key identifier: 53:F3:E3:3A:3E:36:EB:C1:63:B3:83:B8:AC:3B:10:71:BB:4F:DE:D2
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328584F4C3D85660A6A082B0C5D1A00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/65ba6040-2dea-3276-a591-a49c78752230.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 36492
IP address blocks: 64.9.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:85:66:0a:6a:08:2b:0c:5d:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=deb3a1ae-6e0b-4792-806d-c7c9e1e823f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:36:3f:37:21:41:a4:90:4a:5a:fd:61:76:d4:
ed:07:d0:a2:3d:07:71:ea:91:10:52:f4:09:71:0f:
5b:28:9e:21:c7:26:df:db:21:0c:89:3e:15:19:0e:
1a:55:0d:b7:58:87:27:db:b3:f3:19:14:81:bd:6d:
21:77:1c:f0:b0:39:d4:78:46:a1:2f:4b:a6:28:09:
f3:f9:b1:61:06:bc:9e:78:7c:3c:25:7d:1e:42:bf:
58:96:98:74:7b:53:f8:2b:3f:95:ad:48:7b:2a:67:
b8:d4:71:9e:68:0c:82:3b:4a:34:b0:ca:5d:71:c0:
45:3a:82:31:c6:fb:3e:5e:5a:ac:a6:a2:27:48:78:
dd:0b:21:0a:13:00:b1:a1:46:ff:b2:7d:00:69:53:
d6:db:31:0b:71:39:f4:84:a7:28:bc:c0:99:04:eb:
7a:74:e9:61:11:81:27:57:c7:aa:1a:8c:3a:27:69:
55:ee:b1:95:86:b8:b2:7b:0b:1c:d4:ba:18:ed:bd:
07:05:66:5c:1b:f0:57:0f:0f:23:73:af:9f:81:a7:
ca:43:a9:17:e9:46:ee:06:04:ee:ab:fc:77:5a:f7:
52:98:7c:f2:91:ef:0b:f1:ef:7e:75:74:7a:19:b6:
64:f9:a9:b3:18:81:34:b7:f0:13:bd:2b:01:df:75:
34:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F3:E3:3A:3E:36:EB:C1:63:B3:83:B8:AC:3B:10:71:BB:4F:DE:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/65ba6040-2dea-3276-a591-a49c78752230.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
64.9.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:0b:68:13:07:a8:e8:19:71:98:a8:a0:db:6b:b6:e8:66:e9:
f7:ef:10:4f:e6:2a:48:2c:2e:fd:8f:a8:21:32:31:7a:54:34:
b7:07:0e:3c:4b:09:ee:4a:9a:47:92:c5:86:f5:88:51:70:55:
6a:94:32:da:f1:3b:f2:47:17:e4:25:36:02:93:9c:16:fb:dc:
b9:79:ff:19:3b:90:fd:07:cc:d3:ff:27:aa:5c:23:f1:65:5b:
93:e7:0b:b7:06:bb:1d:61:e5:1c:f3:dc:8a:e5:99:9f:cb:e1:
e5:13:b4:27:42:c8:2e:d0:af:f8:66:ef:bd:e6:c5:9c:70:97:
4d:21:ea:2e:2c:da:06:a8:57:ef:6c:72:2e:d4:64:90:b3:69:
12:73:fb:81:5d:85:26:83:65:9f:35:bd:ab:3e:b6:69:ca:fd:
56:39:a1:b7:44:ef:75:99:19:93:a6:cb:a4:e5:42:0a:5b:86:
e3:10:14:0d:3e:72:ca:a2:cc:92:63:a2:50:e7:4a:d3:d1:f0:
87:eb:5e:5f:be:2c:ed:8b:29:79:77:dd:16:14:b6:33:41:d8:
b0:be:ee:f0:80:48:74:d0:2b:10:a3:3a:41:71:bf:9d:5d:73:
c1:70:e6:24:51:94:ce:dc:43:60:0e:72:30:03:b5:30:ad:19:
ca:a9:63:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:47:47 2026 by rpki-client