
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/cbecae29-380d-31ed-a347-201bb4b0682d.roa
File: cbecae29-380d-31ed-a347-201bb4b0682d.roa (raw, json)
Hash identifier: DXtbU99+lQCoXdTRBKgXUpw+/0Iu0DEXX+NbIEdnwbw=
Subject key identifier: 74:D0:55:6A:87:21:77:39:4F:F2:60:57:EF:44:BC:3F:FD:FA:39:64
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328584F4C3DC2E275103A4AF1ABC7A0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/cbecae29-380d-31ed-a347-201bb4b0682d.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 36492
IP address blocks: 64.9.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:c2:e2:75:10:3a:4a:f1:ab:c7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=ddd44baa-e6c0-457a-9b24-f6475377e38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:01:fd:82:c3:37:f2:7b:1f:3e:b7:07:a9:
19:00:44:e8:6e:12:f6:fe:15:56:e6:ca:a4:f7:66:
a3:d8:21:05:23:cf:53:3d:bd:14:95:9f:d6:36:64:
07:53:90:41:5e:93:b4:c2:61:88:3e:8f:cc:db:2a:
7e:25:ba:79:6b:3c:71:51:fb:25:1a:68:e1:ed:0d:
d7:9b:4f:1e:e3:15:2e:ae:3d:61:48:4d:9c:01:cc:
97:6c:11:9f:04:97:12:ca:cd:46:f7:88:8a:d5:fc:
91:f5:35:19:d1:b2:01:3e:70:88:58:4c:67:8a:94:
88:b9:93:5d:43:86:3e:dc:f8:19:db:8b:02:32:c7:
e4:b6:b2:5e:1e:73:f7:50:e5:3d:d5:84:35:b5:8e:
15:dc:b8:5a:a1:54:ea:54:c7:ba:77:d4:74:54:79:
4b:4e:c9:27:92:f6:03:d6:31:a1:0e:2c:48:f5:e3:
56:b7:b1:4b:47:5c:02:6b:5b:a9:c4:17:2d:3c:6e:
9c:a6:a5:f1:d6:e9:89:10:72:7b:c8:08:b4:9c:4f:
4d:f7:0e:b6:87:71:a5:54:38:07:81:85:c3:9c:c7:
d2:db:6c:da:7c:9c:5f:77:29:c0:4a:15:fe:77:fa:
bc:d8:71:79:10:d3:2a:a4:4d:e8:1a:2f:5c:83:60:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D0:55:6A:87:21:77:39:4F:F2:60:57:EF:44:BC:3F:FD:FA:39:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/cbecae29-380d-31ed-a347-201bb4b0682d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
64.9.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:5b:ec:c8:b1:49:14:9c:de:0f:6c:59:bf:d4:9b:af:2f:43:
0a:0a:68:6d:32:b7:38:45:a1:74:ff:bd:f0:fd:b7:eb:ee:41:
80:ce:ac:fb:63:33:9b:5f:c7:ba:cd:9a:3a:9e:57:82:74:92:
78:5d:9d:a4:1f:2c:60:ee:8f:5a:1f:eb:11:31:35:59:cc:6e:
fe:08:69:d9:79:ef:c2:53:3c:83:9e:02:61:1e:2a:53:ea:ea:
81:c9:7a:78:91:8a:d8:a9:d7:53:ce:cb:96:05:01:f4:7f:13:
cc:2a:ce:ab:31:96:32:86:84:86:11:e8:c6:9e:c5:29:77:1e:
05:bb:15:0f:ec:7e:71:69:1b:1e:d0:92:e9:6c:9d:5e:c0:62:
90:7d:7a:a8:ea:bb:79:5e:3c:bc:cd:83:71:9e:3b:7c:d5:01:
ec:0b:4b:e0:35:eb:56:eb:ac:85:ad:e6:7c:46:fd:06:cc:a4:
99:f0:53:3c:49:62:5a:cf:f6:8d:78:c8:17:9f:97:2a:20:51:
aa:e9:1b:ee:6f:d8:98:54:71:ee:68:9f:83:40:21:d6:26:7e:
6e:3f:61:a1:89:3e:e2:b7:61:e4:11:95:46:10:a8:54:c1:db:
0a:ed:bc:cf:6b:bc:81:63:fc:fb:6b:76:74:fc:e2:f4:e2:33:
7f:1e:32:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:25:23 2026 by rpki-client