
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ee337bec-1416-3f18-a9d5-4e91fec244c1.roa
File: ee337bec-1416-3f18-a9d5-4e91fec244c1.roa (raw, json)
Hash identifier: isb54o3KyMpfHl9/h4QgEr4Baa01th21sds9hXZIvMc=
Subject key identifier: 68:B3:45:26:56:0F:6E:F7:8E:4D:B9:1C:37:90:AD:28:6B:CE:BB:DD
Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial: 010D0C9F4328584D9E1EFDAEA47DF1B401C03A80
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ee337bec-1416-3f18-a9d5-4e91fec244c1.roa
Signing time: Fri 24 Apr 2026 23:21:44 +0000
ROA not before: Fri 24 Apr 2026 23:21:44 +0000
ROA not after: Thu 23 Jul 2026 23:21:44 +0000
asID: 20001
IP address blocks: 64.16.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9e:1e:fd:ae:a4:7d:f1:b4:01:c0:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
Validity
Not Before: Apr 24 23:21:44 2026 GMT
Not After : Jul 23 23:21:44 2026 GMT
Subject: CN=1e79f671-1b42-4ff9-ae85-cca46e98cfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d0:75:73:0a:6c:77:3e:9c:c9:aa:08:ff:a4:
dd:d6:0b:9e:e3:17:38:31:60:f1:60:51:1b:1d:3b:
68:da:46:cd:a2:8a:82:40:3f:d9:6c:74:ab:37:76:
3e:0c:74:30:da:47:e7:d8:14:c3:94:db:26:e0:8f:
2b:a8:8e:bc:cb:ac:bf:5a:e8:0e:0a:ca:a9:54:c9:
c2:73:8d:e8:39:3e:bd:41:c3:bb:93:1c:c1:b9:4b:
d1:12:98:0f:3d:03:9a:46:1a:b6:a4:b6:d7:c1:a8:
a1:a8:88:2d:ab:77:cd:3d:b0:25:3e:26:30:15:37:
42:f1:ee:96:20:3d:bb:c0:d1:15:aa:40:09:27:87:
d3:fc:e0:2b:25:52:5c:e2:00:40:6f:1d:9d:2d:4f:
cd:2b:16:2e:29:ca:a9:a6:7f:e3:d4:be:97:17:99:
4a:bc:31:d3:15:51:47:81:67:dc:0d:8e:a8:68:d7:
4c:e7:80:79:8f:9e:5f:ab:ed:5c:b7:4e:28:da:c6:
04:7b:e3:c9:6e:38:cc:d0:e9:c3:36:d8:f7:4c:9b:
8c:2d:9d:f0:e9:45:7e:21:35:0c:d1:cd:15:62:ce:
64:a6:62:f2:87:9f:88:03:90:a8:96:98:79:5f:2a:
86:bc:49:a5:ce:19:6e:9b:9c:ec:ea:c4:04:68:94:
0d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B3:45:26:56:0F:6E:F7:8E:4D:B9:1C:37:90:AD:28:6B:CE:BB:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ee337bec-1416-3f18-a9d5-4e91fec244c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
X509v3 Authority Key Identifier:
keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
sbgp-ipAddrBlock: critical
IPv4:
64.16.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:68:44:0e:05:54:64:68:ca:01:06:b3:8c:7c:0d:a9:15:a6:
ab:f7:1e:80:46:8a:4a:ef:df:57:57:fa:f8:cc:5e:4f:6f:2d:
ca:9a:f3:b1:85:2e:dc:22:b3:8f:5f:0e:f5:db:4c:00:93:8f:
ac:a6:7b:63:b8:49:c2:b8:38:02:c7:d8:91:89:c8:b9:97:cc:
c7:6b:f8:68:74:69:aa:13:eb:ce:63:5a:be:30:a3:2a:a6:a5:
1e:ce:1f:97:63:ce:27:4c:5a:5d:6e:d2:48:39:80:2a:63:20:
ed:58:1f:9f:8e:1d:50:a7:12:87:a7:a4:90:74:4a:4c:9d:9c:
33:ba:fe:12:01:b4:ab:9f:22:dc:ea:b4:74:ec:05:53:8d:32:
5c:96:7e:6f:a5:d5:a8:9f:62:77:e8:1b:5a:e8:8a:09:1f:52:
ac:e2:35:71:c8:72:d6:0f:8b:04:08:fd:f4:50:95:14:39:03:
ba:da:55:b1:ba:76:0c:ce:fc:da:e9:57:41:52:8f:39:df:9f:
e4:b7:e8:90:ff:a7:76:48:c7:c8:53:74:8e:85:7d:ae:30:78:
87:56:5d:a3:a3:28:60:01:3f:59:b1:8a:a4:21:e4:bc:54:46:
01:57:2b:8d:3b:d0:98:f8:d4:d9:2d:02:a6:d0:df:24:e2:8d:
53:53:bd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:32:52 2026 by rpki-client