
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/68872726-a853-3323-ab31-c8efeec5cb62.roa
File: 68872726-a853-3323-ab31-c8efeec5cb62.roa (raw, json)
Hash identifier: s6VmA05WP7ULvAKEL/uM2rljEi3XuPjwQ2XmmJxSbec=
Subject key identifier: 01:D0:1C:25:86:29:D5:63:A4:6E:6C:E3:B7:A7:ED:78:BA:CA:6E:08
Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial: 010D0C9F4328584E7E94D8013F24FC16BB21BB00
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/68872726-a853-3323-ab31-c8efeec5cb62.roa
Signing time: Tue 14 Jul 2026 09:00:12 +0000
ROA not before: Tue 14 Jul 2026 09:00:12 +0000
ROA not after: Mon 12 Oct 2026 09:00:12 +0000
asID: 20001
IP address blocks: 64.16.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7e:94:d8:01:3f:24:fc:16:bb:21:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
Validity
Not Before: Jul 14 09:00:12 2026 GMT
Not After : Oct 12 09:00:12 2026 GMT
Subject: CN=ccccbd10-853e-4811-8c7b-d19790900bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:ce:d8:09:53:19:ed:dc:38:63:5b:e4:48:
d0:8c:07:50:83:13:8b:84:8b:52:7b:76:19:c1:c1:
56:4b:14:b9:f7:cd:df:75:51:15:3b:a4:99:96:37:
86:db:ad:bb:10:f9:23:1d:fc:1d:1e:16:3d:31:22:
c4:49:46:c7:b9:6a:9b:fd:73:fc:a6:e3:be:23:b0:
87:a7:b7:39:fb:0c:67:bd:9f:08:3b:fd:e6:c0:f2:
dc:b0:bf:47:d9:4b:08:19:53:09:96:ac:44:e1:ed:
1a:b1:3b:9f:f7:7c:bc:96:61:09:d7:c7:02:d7:28:
b8:64:91:f3:cc:82:d9:e8:65:94:93:89:59:53:2d:
c2:20:28:c3:07:aa:17:80:ea:53:84:6c:9d:09:14:
4e:5b:ea:0b:a8:67:e6:de:38:79:d9:9e:15:4e:50:
af:3c:2c:57:f2:ae:44:d5:02:1a:da:e3:7c:cb:01:
8e:67:a8:45:f4:d3:6b:78:d8:c6:22:b6:75:cf:40:
f4:c0:bb:97:bf:49:c3:11:42:0a:5e:9d:f5:03:9f:
84:82:5a:82:15:9f:c5:2f:db:eb:eb:c3:38:41:0c:
c2:42:bf:99:5d:eb:97:f6:98:d2:e0:02:99:bc:6c:
47:0a:0f:3e:d1:86:2c:d3:27:4e:8b:27:84:3d:b0:
cd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D0:1C:25:86:29:D5:63:A4:6E:6C:E3:B7:A7:ED:78:BA:CA:6E:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/68872726-a853-3323-ab31-c8efeec5cb62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
X509v3 Authority Key Identifier:
keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
sbgp-ipAddrBlock: critical
IPv4:
64.16.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:79:f5:e1:25:ed:bc:43:d1:a9:24:a3:a8:30:2f:ce:5a:62:
9c:dc:60:db:f7:6d:fe:14:81:22:e3:78:61:f2:7b:1c:48:b1:
03:f6:c6:df:67:d3:81:e1:b9:1b:b6:b8:80:e8:19:04:aa:35:
f6:4b:07:58:2e:e5:62:7d:3f:c6:48:eb:6d:45:7c:1c:32:b4:
a0:20:14:da:04:be:0c:0b:1f:1b:bc:ef:b6:8d:8b:bd:80:10:
3b:90:22:14:29:00:0c:f0:12:6d:8f:8d:7f:8f:00:c2:81:33:
0e:d6:5e:60:8a:0c:31:30:0b:5f:a7:aa:ad:e6:a6:0a:d7:f7:
a7:52:ad:dc:28:ff:47:87:2e:f1:94:12:c0:11:35:ef:29:60:
9e:0b:19:4c:15:ca:70:2a:21:8a:1b:e9:dd:1e:68:6f:3f:e6:
44:ea:84:2d:71:6c:f8:7f:d4:96:2c:b0:09:a8:56:8d:e9:25:
78:17:07:61:50:f0:a8:74:86:40:0f:e3:4f:4c:16:c0:b1:61:
df:b9:a6:ed:58:ba:d6:e2:10:2e:f1:02:9b:7f:a3:92:50:68:
96:41:ee:54:c6:bd:b6:97:c4:45:9e:0a:cc:ac:1b:c8:6c:ca:
25:b7:ae:3f:5c:7d:cc:45:9e:2e:65:3b:83:ea:fa:2e:1e:ee:
d8:ca:1b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:25:43 2026 by rpki-client