
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/313be640-91e3-3bcd-94a3-a94cfd931fac.roa
File: 313be640-91e3-3bcd-94a3-a94cfd931fac.roa (raw, json)
Hash identifier: DnOkiAXKCa0KWADyBEJRGrVzXBTy6xNLsaogBIdT7nQ=
Subject key identifier: 91:4C:42:B6:C8:C7:30:3A:53:17:B2:92:40:DD:29:87:28:35:2E:BE
Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial: 010D0C9F4328584E7E94D24DE29F190D619D0980
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/313be640-91e3-3bcd-94a3-a94cfd931fac.roa
Signing time: Tue 14 Jul 2026 09:00:12 +0000
ROA not before: Tue 14 Jul 2026 09:00:12 +0000
ROA not after: Mon 12 Oct 2026 09:00:12 +0000
asID: 7029
IP address blocks: 64.16.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Jul 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7e:94:d2:4d:e2:9f:19:0d:61:9d:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
Validity
Not Before: Jul 14 09:00:12 2026 GMT
Not After : Oct 12 09:00:12 2026 GMT
Subject: CN=1be29102-5f31-4bb8-8394-75550f794a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a6:69:08:76:88:21:1a:22:43:13:40:f3:05:
e1:30:b6:f8:1b:aa:ad:58:1a:78:66:cc:c2:15:e4:
80:33:13:32:6d:24:bd:3c:c9:53:91:bf:07:74:ca:
e7:2f:0f:99:e9:7c:ec:8e:09:d9:70:df:31:5f:85:
8a:09:d8:ae:d7:4b:77:1b:95:dd:1c:fb:29:03:2d:
d5:79:a9:12:35:d8:3d:26:c9:5d:e4:da:50:38:87:
d4:da:c5:20:8c:72:dd:28:84:2e:47:07:59:f3:d5:
f1:77:ad:d1:ef:a6:bd:b4:f8:ae:e7:62:0c:c9:d5:
56:4e:68:a4:f4:53:56:55:28:82:be:83:e1:f0:76:
f5:aa:4f:56:3e:0b:10:b1:57:4a:96:96:fc:25:95:
4b:bc:2d:10:f3:20:4a:c7:13:b1:ff:74:50:64:cf:
d3:6f:64:00:4d:d8:b2:06:15:95:26:50:e2:52:c7:
88:25:c2:bc:23:c4:13:4a:4b:8b:b2:f7:00:2c:91:
c0:3f:b8:6c:c2:90:b3:e9:ac:6d:10:d1:f5:e4:20:
88:3d:28:c3:b0:3a:5d:7a:c2:0e:1d:93:7d:98:5e:
5f:b4:fc:27:dd:e2:52:cb:13:6a:78:bc:53:b7:0a:
6c:b3:5b:39:b4:54:e9:18:03:26:83:3b:26:af:e7:
18:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4C:42:B6:C8:C7:30:3A:53:17:B2:92:40:DD:29:87:28:35:2E:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/313be640-91e3-3bcd-94a3-a94cfd931fac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
X509v3 Authority Key Identifier:
keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
sbgp-ipAddrBlock: critical
IPv4:
64.16.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:81:fd:84:94:f1:8c:6f:68:5b:18:d7:5a:83:a2:fd:26:68:
f6:10:95:da:d1:1c:8a:f5:d4:64:b6:62:97:cb:99:6a:03:45:
0b:21:8e:f7:00:78:d0:01:d0:d0:47:7a:d4:92:de:29:18:35:
ec:b8:3b:ad:09:a8:57:99:5f:c8:c2:aa:27:db:7d:84:bb:56:
2c:ee:d9:aa:38:22:06:af:fe:c3:f3:a0:35:8b:85:95:44:6f:
6a:ad:f9:9e:b6:6a:08:a4:d8:91:a6:8a:43:d3:24:d5:d1:45:
8d:b4:cc:96:34:60:7d:21:9d:9f:1b:6d:94:30:0a:d1:a5:28:
6b:bd:7b:c4:08:87:73:ad:5a:dd:fc:0a:9c:83:60:c4:4d:3a:
8d:22:95:ac:6f:f5:0d:8b:2e:e1:2f:4a:f9:2c:6c:e6:ec:27:
a3:6f:bf:e6:a4:20:d1:aa:4f:9b:a0:a9:e2:f4:a2:cb:5f:09:
f7:02:03:1d:9b:d2:8c:cd:72:28:96:7b:90:bb:bf:43:7b:40:
d1:60:5d:33:93:67:ee:62:ed:18:fe:c0:bb:34:f9:59:09:01:
27:22:82:da:6a:39:9b:ab:70:40:43:94:58:f2:d7:f1:1d:3b:
fe:14:ad:50:bc:81:1d:54:f2:73:10:33:e9:d3:94:8f:c5:db:
8a:80:af:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:14 2026 by rpki-client