
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/985a3156-438b-347e-97b3-dbc392e8a781.roa
File: 985a3156-438b-347e-97b3-dbc392e8a781.roa (raw, json)
Hash identifier: nmfgGX810imziFZsBY3UqHZk0MepT29MTtmWf/f1ajs=
Subject key identifier: 4D:55:A3:55:9F:66:58:42:D7:58:2B:95:52:D6:47:60:ED:39:3D:52
Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial: 010D0C9F4328584D9E1E98011F8320B5B0773A80
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/985a3156-438b-347e-97b3-dbc392e8a781.roa
Signing time: Fri 24 Apr 2026 23:20:56 +0000
ROA not before: Fri 24 Apr 2026 23:20:56 +0000
ROA not after: Thu 23 Jul 2026 23:20:56 +0000
asID: 7029
IP address blocks: 64.16.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9e:1e:98:01:1f:83:20:b5:b0:77:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
Validity
Not Before: Apr 24 23:20:56 2026 GMT
Not After : Jul 23 23:20:56 2026 GMT
Subject: CN=db8ecbbb-80e5-4f1c-ac19-05c27b1885d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:50:bb:a9:41:73:b6:02:2c:fd:71:be:9f:72:
51:a4:67:de:01:38:bc:bd:cc:19:7c:bf:5b:3c:26:
f5:94:a5:06:82:eb:f7:c1:c8:ec:e2:17:14:28:3c:
bb:a4:f8:6c:53:c4:d7:0a:3a:51:5a:c8:c9:d9:41:
48:1a:b0:46:bd:e5:60:04:fa:81:5f:3c:7b:6a:7c:
cd:8e:d7:da:4a:bb:9b:43:c9:c2:49:c9:1f:d1:0a:
d3:89:6e:85:06:8a:8d:79:80:84:c8:d4:92:9d:c0:
d8:b8:14:14:16:2b:17:e1:54:27:48:a1:fa:fa:96:
0f:1d:6b:8c:f3:bd:f5:a0:ec:69:bd:ed:44:21:d9:
af:ae:db:6d:fc:b7:fc:f6:bd:ed:00:26:3f:c3:fd:
31:32:db:b0:00:7f:3d:67:76:e9:d2:82:9b:ef:3e:
29:bc:26:2f:fc:cd:c0:aa:29:f1:ea:17:52:7a:38:
96:a0:16:aa:0b:ab:c1:0a:08:0b:bb:dd:98:ed:34:
66:03:6c:2f:9b:8e:8c:a2:bb:c8:5e:61:9d:97:84:
f3:dd:8f:06:d4:f6:26:70:3e:2a:cb:e0:80:78:ee:
f3:a6:e5:01:92:9e:f1:ac:d1:12:2d:c6:41:ab:9a:
b1:2b:70:97:ea:f1:a7:8d:27:ff:c8:42:03:42:5d:
4f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:55:A3:55:9F:66:58:42:D7:58:2B:95:52:D6:47:60:ED:39:3D:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/985a3156-438b-347e-97b3-dbc392e8a781.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
X509v3 Authority Key Identifier:
keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
sbgp-ipAddrBlock: critical
IPv4:
64.16.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:92:7e:f2:04:b6:26:59:eb:63:0c:6e:6a:9b:9e:db:d4:22:
8a:e9:50:7f:f8:49:74:70:1a:7a:2f:3d:3f:66:ba:d7:48:b5:
61:02:78:6b:f6:ee:78:49:e1:a8:e4:00:92:02:21:14:33:01:
ad:c9:9c:e0:c8:52:09:d6:c2:54:57:d9:ae:e9:b2:dd:6b:29:
37:d2:97:1e:47:85:15:e7:63:30:5e:ad:14:5f:25:04:e9:80:
1d:06:46:78:f3:8a:b3:a2:d7:ad:e0:c8:6e:59:3d:af:c0:01:
e6:24:10:e8:c8:cc:46:a3:77:ea:2b:42:cf:3e:56:3f:a7:ca:
6d:6a:7d:a1:8f:5a:c5:89:ea:f2:46:ab:e6:d3:a1:f2:43:9a:
3e:e1:8b:db:d0:f8:48:3a:ce:2e:e9:dc:00:47:7e:c8:1d:0b:
a7:16:3f:a3:f2:1c:52:3e:dd:5c:18:47:80:49:6c:67:db:45:
6f:2c:18:ed:59:99:df:4f:31:04:55:b5:9d:c4:fa:84:a5:46:
5b:29:4a:8a:69:e9:93:04:e9:30:8a:94:1c:c7:55:7e:3f:c1:
39:5f:dd:55:f1:e9:42:b4:9b:5c:36:a6:8b:a4:15:3f:84:cb:
1d:17:e3:02:28:7b:2a:c4:49:af:33:76:5a:ea:d2:9f:6e:4b:
3e:d9:85:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:06:13 2026 by rpki-client