
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/f638de79-9344-3c38-b363-76b6ff4822ce.roa
File: f638de79-9344-3c38-b363-76b6ff4822ce.roa (raw, json)
Hash identifier: gUwgG+1nriZLnbYxWPUiWDJB1pk93J5HyESdb8HMVxQ=
Subject key identifier: 1E:5F:AB:C5:48:F3:77:A6:EE:3C:A9:53:48:67:66:D1:2A:57:58:0B
Certificate issuer: /CN=4b15b5cd-4c26-4ee5-85c9-521eeef73d1a
Certificate serial: 010D0C9F4328584F3781C0C71958FB660A6DCC20
Authority key identifier: E2:E4:E9:38:6D:35:64:52:30:47:98:FF:10:CD:3E:A0:D5:6E:C2:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/f638de79-9344-3c38-b363-76b6ff4822ce.roa
Signing time: Fri 18 Sep 2026 14:46:21 +0000
ROA not before: Fri 18 Sep 2026 14:46:21 +0000
ROA not after: Thu 17 Dec 2026 15:46:21 +0000
asID: 395685
IP address blocks: 64.246.224.0/21 maxlen: 24
64.246.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:37:81:c0:c7:19:58:fb:66:0a:6d:cc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b15b5cd-4c26-4ee5-85c9-521eeef73d1a
Validity
Not Before: Sep 18 14:46:21 2026 GMT
Not After : Dec 17 15:46:21 2026 GMT
Subject: CN=01b5ed82-63d1-4f57-bd47-7c93620d6dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:76:88:36:5e:ef:39:4d:34:a8:79:ec:b9:
84:61:84:d8:a4:2a:62:a0:fe:cd:d1:0b:c0:6f:c4:
e8:0a:0c:25:ec:e7:e2:27:64:bb:f1:d6:e7:dc:34:
d4:ea:29:24:15:2c:b6:3b:be:b6:64:d0:bf:92:f8:
b8:f2:e7:93:ce:a7:9c:d0:f8:a5:41:80:12:bc:70:
d6:d4:74:bf:75:3c:4c:48:b7:9f:68:e9:f9:1e:21:
fb:93:e9:68:35:5a:52:69:22:94:d7:3b:61:53:cb:
6e:c2:f6:b0:90:e5:19:19:c9:48:10:7a:67:8b:86:
10:68:4c:0d:04:cd:7e:5a:d7:7a:cd:a5:f7:d6:31:
a0:62:f6:d8:a5:bb:73:e9:ff:58:d4:f0:99:75:06:
1a:5d:e0:3a:59:c9:4d:a6:15:4c:5b:ab:ee:c9:7c:
f3:e0:30:06:3c:1b:f8:92:56:1f:16:e4:0e:32:4d:
51:a8:5f:5d:ce:15:9c:a6:f4:c7:5a:53:fe:3f:55:
1f:b7:3a:20:99:29:2c:61:41:4d:b5:7f:a4:92:d9:
57:20:65:f7:58:12:b4:0a:b5:3d:4a:eb:d8:94:6a:
a9:9b:6f:a2:10:db:ae:8f:38:a1:2d:39:f2:c6:26:
aa:ab:b6:ea:51:b5:c2:90:e5:db:8c:e7:3e:61:ec:
1a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5F:AB:C5:48:F3:77:A6:EE:3C:A9:53:48:67:66:D1:2A:57:58:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/f638de79-9344-3c38-b363-76b6ff4822ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.crl
X509v3 Authority Key Identifier:
keyid:E2:E4:E9:38:6D:35:64:52:30:47:98:FF:10:CD:3E:A0:D5:6E:C2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.cer
sbgp-ipAddrBlock: critical
IPv4:
64.246.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:6d:ec:f7:e1:39:0e:75:27:c0:fe:c7:af:63:11:76:a5:e2:
0a:97:ce:27:9d:42:72:d3:84:63:d8:c4:85:3e:41:00:a6:37:
fb:cf:2c:9b:53:3d:ad:91:66:02:e7:4f:7e:32:71:4b:f2:d2:
e8:18:5c:16:34:b0:16:e5:3d:b8:56:bd:fa:44:43:2d:75:d5:
9f:be:68:d2:34:34:d0:33:b9:3a:b9:02:1b:be:c8:f7:21:36:
2d:b2:91:d0:17:a3:78:3b:bd:20:30:c3:48:b9:6b:0c:aa:94:
e8:85:62:16:33:0e:21:fa:f7:9c:64:b9:a6:a9:49:e1:e0:99:
b4:41:c5:1a:d1:c9:56:4f:23:07:67:7a:1d:2d:56:f5:d4:8e:
8d:34:8b:24:f1:21:6c:08:8f:9c:1c:bd:20:2e:1a:47:aa:3d:
19:9e:fa:b6:a8:c1:17:b9:81:b8:33:c7:e0:63:3e:a2:85:58:
78:29:85:78:b6:cf:cb:21:6a:24:95:63:7b:fc:b5:b8:3c:59:
c0:a5:fd:cb:db:24:bc:96:2f:1c:9c:57:c7:59:32:82:42:e0:
fb:91:50:a8:b2:f9:4b:32:3e:14:17:c1:a4:70:13:43:a5:53:
0d:4c:c5:9a:36:41:45:c4:9d:05:55:60:ca:60:2f:98:b3:77:
7c:32:f0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:13:43 2026 by rpki-client