
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/efff9402-f2ac-3c85-8a20-b8c2dc331eea.roa
File: efff9402-f2ac-3c85-8a20-b8c2dc331eea.roa (raw, json)
Hash identifier: Uy+WUliqSqcghkx1qSt6QMurRlmBtOAEMsmo+JLKEZg=
Subject key identifier: 96:25:77:20:99:CB:0D:3F:6F:D5:66:34:6C:2A:FD:59:66:02:D8:B0
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328584E059BC04CCC37520321D710E0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/efff9402-f2ac-3c85-8a20-b8c2dc331eea.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 36492
IP address blocks: 136.22.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:c0:4c:cc:37:52:03:21:d7:10:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=f4ff9903-4807-4f8f-b866-c67d5669a1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:30:c5:b2:e9:50:20:14:cd:b9:2e:14:f7:
a0:eb:cb:e3:9c:ff:3a:4f:84:32:73:f2:25:c8:67:
f1:13:ad:62:84:e9:26:42:12:d5:d7:0b:56:71:15:
a0:4d:af:4f:34:99:89:59:16:4e:62:94:14:1b:4c:
29:e0:b6:bb:57:e9:b7:d1:7a:cd:7b:ac:f3:6b:a4:
26:c5:a6:cc:8a:0d:6d:67:57:a9:82:11:06:ab:02:
3b:37:cd:04:9f:40:ea:40:fc:22:41:e6:e5:74:6c:
0f:23:cd:4c:fb:3a:0a:0c:28:d0:f3:ee:44:a9:c3:
1a:bc:df:6c:8d:15:c0:48:26:54:e3:5c:74:52:da:
55:c9:03:5b:c6:1d:5c:dd:57:92:72:28:62:0e:00:
e3:b4:67:32:c8:01:eb:77:3e:15:62:a0:06:09:4c:
b8:b8:50:a7:4d:f9:db:5d:1a:59:1d:74:7a:c7:29:
4d:1d:c2:21:d7:5d:62:4f:fa:17:df:bb:e9:8b:9b:
ea:ab:39:cd:54:5a:be:77:53:53:d4:d7:8e:ed:c9:
e8:cd:99:f5:31:f7:f1:dd:4f:16:af:9b:2c:40:7a:
2d:68:4d:f8:de:92:2b:2e:1b:11:d9:ce:9c:15:67:
f9:01:e2:c2:4e:5e:45:67:c4:f9:a2:00:a4:49:04:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:25:77:20:99:CB:0D:3F:6F:D5:66:34:6C:2A:FD:59:66:02:D8:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/efff9402-f2ac-3c85-8a20-b8c2dc331eea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:2c:54:60:0c:e0:b1:92:a6:dd:3b:4b:0c:8b:fe:9d:03:80:
e5:b6:f6:66:7f:ed:d1:8f:54:07:d2:a6:37:01:e0:16:80:55:
ae:b1:9c:de:ad:db:d7:47:bd:61:48:87:65:d8:bf:40:91:eb:
c6:c4:cd:ed:3b:35:57:f8:1e:34:3e:5b:51:ed:95:90:0b:71:
02:ce:67:9a:c5:72:b5:d5:71:6c:f0:4e:c2:a9:40:e6:28:8d:
e8:b3:87:9a:f3:18:b0:56:ef:ae:e9:7e:6c:fa:83:10:38:78:
3f:b5:09:e0:2a:0a:b6:9f:87:54:cf:f4:d3:28:02:f5:a8:05:
76:23:cf:09:4b:86:20:9d:43:22:02:ba:be:ea:e4:d5:af:0f:
b7:ab:99:9c:e5:43:eb:b7:f1:e7:53:7e:46:84:48:96:4c:67:
11:a1:1d:0d:be:1f:68:31:55:1c:86:d3:dd:b9:ad:94:18:75:
82:0c:3a:77:c7:7d:65:a1:57:90:6f:b2:22:a5:95:d1:81:c6:
6d:b2:21:f6:53:20:d1:c5:02:79:a8:a4:8c:7d:05:2e:31:b2:
5c:c8:fe:66:66:32:0d:9b:4d:1f:e7:11:03:19:96:d8:d5:1f:
0d:5b:56:98:aa:42:3f:be:73:1a:c8:6e:33:f5:06:c2:78:44:
a4:2c:0c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:23:58 2026 by rpki-client