
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS7011.roa
File: AS7011.roa (raw, json)
Hash identifier: onbB2aI1Xj4PI1qO5ggd4pvJ9AeT2Xj657EoxsWkV5M=
Subject key identifier: F3:C6:92:29:60:DC:32:A3:98:EA:71:38:17:18:CC:D5:E1:84:31:E5
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 0C82A5C8542B163098E428F115CA746DA2C37780
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS7011.roa
Signing time: Sun 12 Jul 2026 19:53:19 +0000
ROA not before: Sun 12 Jul 2026 19:48:19 +0000
ROA not after: Sun 11 Jul 2027 19:53:19 +0000
asID: 7011
IP address blocks: 74.39.134.0/24 maxlen: 24
74.40.44.0/24 maxlen: 24
74.44.1.0/24 maxlen: 24
173.84.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 15:55:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:82:a5:c8:54:2b:16:30:98:e4:28:f1:15:ca:74:6d:a2:c3:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Jul 12 19:48:19 2026 GMT
Not After : Jul 11 19:53:19 2027 GMT
Subject: CN=F3C6922960DC32A398EA71381718CCD5E18431E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f5:ca:9f:9d:16:65:43:f0:92:ca:51:b3:3f:
ad:53:4c:1f:bb:e1:b0:53:f1:b2:0c:9e:ba:91:3b:
5f:d3:96:0d:5f:fa:6e:d8:86:d7:0b:d5:5b:20:a5:
a5:35:50:80:d2:4f:5e:e4:09:fb:51:68:08:d2:11:
55:3b:30:13:bf:f3:c7:c9:74:27:ec:1d:0a:41:ce:
50:8e:7e:ec:14:87:b2:3e:09:f9:27:39:be:7b:99:
77:15:65:21:68:f5:5c:d0:f2:09:39:f9:8b:19:a2:
25:5b:95:98:2f:79:14:9e:60:2a:4b:db:3c:42:12:
0e:60:d0:53:e3:8a:9b:f3:34:db:58:f0:89:c3:f7:
8f:04:5d:18:4b:b3:d8:00:53:f1:df:08:ed:47:21:
e1:d5:0f:72:de:be:09:7c:02:b8:45:8c:d1:b3:e7:
03:4b:e5:23:7f:be:0f:74:24:dc:86:84:cf:7e:1c:
98:5f:31:28:dc:38:c9:be:06:3a:02:56:65:87:dd:
31:a9:8a:76:69:0b:85:bd:4f:c0:a0:01:80:8c:5e:
4f:74:fc:19:12:30:31:67:56:1d:d7:26:72:a6:6e:
48:1a:20:dd:7c:29:fc:fd:6f:0e:ae:95:72:bd:04:
d7:bb:a8:19:5e:c6:65:b1:83:9e:a2:5c:4d:bc:ab:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C6:92:29:60:DC:32:A3:98:EA:71:38:17:18:CC:D5:E1:84:31:E5
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS7011.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.39.134.0/24
74.40.44.0/24
74.44.1.0/24
173.84.233.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:0e:91:65:6a:70:8c:a6:e6:88:00:f1:11:3a:0f:81:66:fe:
70:fe:82:b8:23:4c:27:89:ea:48:99:4d:50:dd:ea:f5:93:c5:
1e:76:8e:c6:be:56:28:2e:6b:b9:37:04:00:3c:6c:a1:37:a4:
68:7c:ca:80:08:8a:d6:08:ef:64:e9:d4:27:77:8e:da:f4:60:
f4:9f:0c:83:c9:ae:7f:0f:d8:18:a8:a9:a9:3c:7f:d1:64:56:
95:b4:39:82:ad:4d:a4:fa:03:4a:2c:2b:18:35:31:19:b4:cd:
37:d9:62:4f:17:3c:32:31:8b:e5:d4:fa:67:ee:0e:4a:e6:0e:
e7:94:89:8d:a2:3b:a6:c7:4d:d4:cc:8c:c0:45:97:b5:56:bb:
b9:00:09:dc:3a:6e:d1:86:b8:4d:dd:0a:1f:bd:c2:cd:a0:72:
e7:62:a1:1b:a6:80:9e:83:9d:80:40:33:b3:39:bc:d9:68:f5:
38:58:cf:b9:58:af:80:2f:bf:45:e1:4c:a0:76:65:ab:c3:39:
a5:be:d5:2f:5e:bb:2b:fd:32:b6:40:a0:fb:45:15:72:e5:96:
64:88:5f:b7:d4:a6:04:3b:30:01:24:b6:72:30:7e:03:ea:b6:
d0:da:4a:8d:ee:ec:59:24:51:0f:e8:b8:47:a0:63:21:57:00:
3e:dd:2e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:13:54 2026 by rpki-client