
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/324f9e4d-6cf5-3763-bd0a-70def32e56d3.roa
File: 324f9e4d-6cf5-3763-bd0a-70def32e56d3.roa (raw, json)
Hash identifier: KiuDSHw+X/dIuLVSJX9NGI9iHoxtaoHwV7+BzGaBh28=
Subject key identifier: 07:58:EF:2D:2B:4B:3D:AF:76:66:16:80:ED:28:33:CC:61:1B:46:5E
Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial: 010D0C9F4328584E709F7173FFC46516F4185500
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/324f9e4d-6cf5-3763-bd0a-70def32e56d3.roa
Signing time: Thu 09 Jul 2026 09:00:13 +0000
ROA not before: Thu 09 Jul 2026 09:00:13 +0000
ROA not after: Wed 07 Oct 2026 09:00:13 +0000
asID: 15296
IP address blocks: 199.216.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:70:9f:71:73:ff:c4:65:16:f4:18:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Validity
Not Before: Jul 9 09:00:13 2026 GMT
Not After : Oct 7 09:00:13 2026 GMT
Subject: CN=18e263d8-d75d-488f-8606-650cc2dd445d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:1b:1b:22:15:c3:32:65:0c:ff:9b:75:d0:
6c:cc:ee:85:36:7d:ba:50:b6:ae:55:9a:b6:73:04:
ee:1d:10:17:ff:94:d0:6f:98:80:26:88:73:b6:53:
19:f3:d9:dc:53:d0:4b:4c:92:bb:91:43:7e:65:09:
09:1d:37:03:99:b8:bf:83:80:6d:71:f8:bd:c1:0b:
bf:b4:e1:62:4e:c6:e4:ee:da:47:b2:bd:77:ae:d2:
f4:57:ce:80:d3:8e:50:ef:f4:08:91:64:11:b6:b9:
9b:47:68:0c:7a:5b:53:58:ba:0b:3f:ea:a0:8e:f7:
3d:e1:8f:25:30:81:f2:53:cf:bb:fa:eb:8e:08:bb:
ab:97:ec:d0:a7:19:ce:50:d9:7a:0c:d8:55:e3:98:
7a:66:14:bc:49:09:82:72:e3:38:49:7b:fb:f7:0a:
cf:4a:51:03:5e:b2:9a:92:09:5a:6b:cc:02:ae:42:
1c:dd:43:9c:c6:f6:fe:d9:00:c0:ee:56:68:41:bd:
09:66:6b:9a:68:03:f7:25:14:d2:32:55:ee:bc:14:
0f:8b:0b:b5:4c:a2:72:05:c8:89:13:ca:74:2a:e4:
0a:b4:0b:21:61:cd:fe:65:8e:23:d4:c4:af:6c:29:
26:f5:41:fd:c4:f1:f6:34:ce:5f:3d:55:8d:af:d7:
91:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:58:EF:2D:2B:4B:3D:AF:76:66:16:80:ED:28:33:CC:61:1B:46:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/324f9e4d-6cf5-3763-bd0a-70def32e56d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
X509v3 Authority Key Identifier:
keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
sbgp-ipAddrBlock: critical
IPv4:
199.216.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:c3:f2:ab:98:56:ea:71:9e:9a:99:37:53:1d:83:85:09:bf:
0e:07:7b:c5:94:73:4b:6a:05:73:a9:ee:10:80:38:d5:32:2d:
8c:19:b6:b1:f2:43:d2:8e:0a:65:f8:ef:0e:16:49:91:3e:cc:
8d:00:f1:e4:01:2e:2f:43:a4:dd:cc:b8:24:91:b7:e2:eb:7e:
3f:ed:4d:38:e7:1c:03:1d:75:b8:d7:60:af:6b:04:45:43:0a:
f1:cd:2b:83:be:50:1a:d6:29:8d:ad:7b:76:e7:a5:b4:d2:4f:
fb:b9:fc:f9:83:2a:73:87:31:27:1c:94:ac:b4:3e:78:96:4d:
4c:f3:f4:76:1e:7e:32:51:8c:ce:eb:20:74:4d:c1:26:9d:92:
08:e0:1c:0b:fe:0b:19:09:37:3e:2b:f9:cf:20:d4:e8:98:19:
44:09:c2:ae:9e:61:56:bb:a8:96:7e:93:6c:04:c1:74:ff:15:
ce:b4:01:10:6f:f7:3a:7f:a3:58:a1:3c:ad:2a:d3:30:54:7f:
d7:a5:7e:70:72:41:aa:55:95:26:82:c4:6e:c1:a5:7b:68:70:
d7:24:43:f6:64:64:03:3f:61:2a:47:c1:c3:9e:0f:73:24:db:
b1:30:d0:0f:a8:c5:c8:26:cd:d6:0d:37:e0:ca:71:e8:c3:d0:
61:ea:bb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:56:44 2026 by rpki-client