
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e0231ca2-d28c-3c3c-b66d-9f915e726494.roa
File: e0231ca2-d28c-3c3c-b66d-9f915e726494.roa (raw, json)
Hash identifier: lxex8o6rmR0MpPSR89GZtDYdUBslezy837jr95tXEbQ=
Subject key identifier: 8A:0F:43:1C:EC:D0:C1:DB:E4:1C:B8:5C:B6:40:AB:BA:4B:08:94:96
Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial: 010D0C9F4328584F20F79FAC616803FFE0347E40
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e0231ca2-d28c-3c3c-b66d-9f915e726494.roa
Signing time: Thu 10 Sep 2026 13:00:12 +0000
ROA not before: Thu 10 Sep 2026 13:00:12 +0000
ROA not after: Wed 09 Dec 2026 14:00:12 +0000
asID: 7029
IP address blocks: 64.16.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:20:f7:9f:ac:61:68:03:ff:e0:34:7e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
Validity
Not Before: Sep 10 13:00:12 2026 GMT
Not After : Dec 9 14:00:12 2026 GMT
Subject: CN=28e5f09e-d926-40e4-aa35-76a06363ef4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:5b:45:35:47:45:58:45:e3:58:04:ea:93:
0f:cb:c4:f3:f7:59:ca:d6:c5:d1:6c:65:4b:ed:06:
06:d4:f2:d2:0f:a2:5d:e9:f4:a2:01:b3:86:fd:a5:
cc:7d:9a:e4:a9:9c:d5:fe:93:5f:70:d3:20:2a:31:
51:c7:d3:51:d8:44:25:8e:74:04:1b:47:92:d8:53:
9a:46:f3:78:a1:04:ee:c3:50:2e:40:57:8e:0e:32:
b6:2e:2c:80:a5:52:e2:8e:ff:3a:3c:76:9c:1d:c6:
3e:4d:2c:03:e1:74:48:28:fa:b9:ec:5d:c5:a3:75:
1b:d9:6e:5a:94:2f:2b:99:0f:53:9e:83:d0:73:2b:
f1:01:bd:03:fa:2d:8f:b4:78:b7:cc:41:46:13:23:
09:24:6c:a8:fa:5d:95:eb:09:79:83:18:da:da:ea:
d0:b2:b4:c3:38:46:24:72:ac:74:f4:f3:a4:c1:57:
69:5c:8b:e7:7d:78:63:52:57:35:59:ee:80:c5:01:
36:ca:35:93:2f:d1:a1:95:ee:18:3d:ce:64:42:e6:
be:c8:08:e1:bc:20:1f:97:02:86:91:f6:8d:a4:e2:
8e:bc:4c:3e:f6:ed:27:fb:97:fc:3f:44:f0:10:2d:
8a:0c:34:34:e7:72:f5:41:22:e4:b8:06:d4:bb:9d:
dd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0F:43:1C:EC:D0:C1:DB:E4:1C:B8:5C:B6:40:AB:BA:4B:08:94:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e0231ca2-d28c-3c3c-b66d-9f915e726494.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
X509v3 Authority Key Identifier:
keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
sbgp-ipAddrBlock: critical
IPv4:
64.16.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:54:da:f9:5a:90:6f:bc:4a:ed:81:12:b0:c9:cb:b7:d0:61:
a7:f5:6d:05:24:a4:9e:b2:dc:2e:e4:14:59:64:e0:3a:3e:c3:
21:6d:d0:50:20:f9:a9:01:50:25:73:48:fe:bc:4a:47:95:fd:
d3:ed:06:b0:02:f6:87:7b:fa:58:c4:84:3d:1a:30:ff:66:78:
87:9b:23:0e:1a:2e:f7:41:e6:2d:c1:cf:d4:a4:ab:c9:84:b1:
f6:cf:b8:f2:b0:37:ac:a2:95:18:20:11:ee:07:48:f8:51:8e:
50:94:3f:fb:a7:24:ba:51:ae:58:87:53:c7:57:1a:40:78:f3:
f7:a0:65:00:67:b5:2b:3b:da:18:48:0b:b9:0e:87:00:04:64:
21:12:f0:c4:60:f1:88:03:33:3a:60:8f:99:8e:72:b6:5e:b5:
cc:ad:38:03:7d:c5:e9:f2:4a:c6:0f:a4:7d:88:3e:d0:cc:0f:
87:cf:f8:be:98:81:e8:e6:9c:fa:25:79:cd:4e:7c:69:69:20:
a4:81:a1:f4:f9:7c:07:3a:8a:39:a0:6c:d7:22:d0:fb:81:22:
e2:49:65:07:9a:b7:fb:7f:81:f8:14:72:39:cb:b6:b2:7f:c2:
f4:be:17:c3:19:ec:84:6f:65:12:34:3c:af:2b:d2:c6:e7:d1:
2e:d8:61:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:52:44 2026 by rpki-client