
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9a686e33-9264-3e11-a689-8c32eb261e34.roa
File: 9a686e33-9264-3e11-a689-8c32eb261e34.roa (raw, json)
Hash identifier: 4+MnsjOcva7+noMHjAyaQqQx0hHnbSxoWRe0NF0vUEU=
Subject key identifier: D8:56:95:E2:08:20:5F:A3:F7:CC:36:FE:5F:30:80:7E:F0:5C:26:8F
Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial: 010D0C9F4328584D9E1ECC4AB4362171BAFFF180
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9a686e33-9264-3e11-a689-8c32eb261e34.roa
Signing time: Fri 24 Apr 2026 23:21:21 +0000
ROA not before: Fri 24 Apr 2026 23:21:21 +0000
ROA not after: Thu 23 Jul 2026 23:21:21 +0000
asID: 7029
IP address blocks: 64.16.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9e:1e:cc:4a:b4:36:21:71:ba:ff:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
Validity
Not Before: Apr 24 23:21:21 2026 GMT
Not After : Jul 23 23:21:21 2026 GMT
Subject: CN=7bf408d7-c645-46ab-ba49-647ec926c5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:af:47:5f:0d:83:3e:13:44:0b:93:e3:fb:
92:28:6b:98:e6:2d:56:f8:d5:50:95:d3:5a:92:dc:
f5:d2:a4:52:40:2d:1b:50:78:8d:15:fd:01:f0:f0:
c2:fd:a4:21:69:0d:83:d7:b8:fe:6c:41:77:12:26:
58:6d:b1:a8:7f:29:3f:96:1d:cb:7d:37:88:3c:45:
7b:e7:4c:2a:50:e2:e8:ea:11:88:e5:38:50:d0:d3:
6b:45:a9:73:ba:df:da:b1:f4:94:42:ae:cd:27:e4:
d5:e8:64:63:14:e0:06:fd:3d:b6:82:2c:e0:39:f0:
67:27:9f:06:f1:76:a3:70:a5:4b:d2:bc:38:f4:05:
6a:28:a3:1b:4d:01:58:36:18:4c:d8:87:2c:05:27:
0f:98:be:ac:f0:31:a9:90:c1:61:3b:36:66:c8:00:
4c:d8:67:25:fd:a9:5b:85:a1:f4:aa:28:21:1a:4c:
21:a9:7e:a7:b9:ba:45:44:e0:0f:e7:c8:6f:30:fd:
a0:ba:5a:16:0b:b1:24:e3:e2:09:4a:fa:f4:e0:26:
49:b2:15:c2:c9:bf:36:ed:da:1f:af:7e:50:28:c9:
1d:b6:43:81:80:0b:67:5c:2a:2d:c1:4c:88:33:c9:
03:a3:d7:c8:53:f9:39:a7:36:0b:d8:d0:e3:8f:23:
24:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:56:95:E2:08:20:5F:A3:F7:CC:36:FE:5F:30:80:7E:F0:5C:26:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/9a686e33-9264-3e11-a689-8c32eb261e34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
X509v3 Authority Key Identifier:
keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
sbgp-ipAddrBlock: critical
IPv4:
64.16.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:0c:72:e0:92:63:8d:06:66:8e:76:3c:b5:d0:7f:18:cc:ab:
99:11:a0:65:35:4f:42:cc:07:bc:5e:c3:de:51:e0:6c:cc:c0:
8f:e6:9e:a8:fc:fd:14:d8:38:de:ad:0b:73:f1:4d:4a:37:02:
2f:70:c6:87:1d:81:86:c5:e8:36:5f:a3:ea:07:13:cc:5b:e5:
28:be:4f:a4:88:8f:fe:30:d4:b3:5e:34:7f:b3:f1:2d:45:31:
a3:bd:d0:6b:55:15:df:c7:c4:67:39:f6:6e:18:95:f8:87:cf:
08:ac:1e:d5:63:53:65:d1:c8:8b:65:a5:67:a2:11:07:bb:04:
96:55:4f:71:ca:bd:6b:93:0f:b9:f0:a2:89:1f:2c:2a:be:bf:
ce:14:88:61:d8:ab:72:e2:58:08:fa:db:d3:16:0b:81:c3:ea:
4c:7e:b8:9b:64:9f:f4:83:b2:73:6a:37:96:22:97:6e:8c:96:
4f:86:6a:b4:03:6d:2a:05:07:8a:bd:0d:b5:bf:a0:32:7a:59:
0e:89:a4:f7:42:d0:8f:93:be:ca:7c:54:99:18:a8:94:ab:20:
80:1c:be:ac:e9:d9:db:71:d7:0b:f6:88:16:c3:67:1f:0b:b0:
43:85:24:f4:d6:30:8f:4a:fa:41:88:8f:b9:c6:c4:61:c3:f5:
5a:de:11:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:07 2026 by rpki-client