
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/71ac1e75-f2ea-36f4-ad2f-08164d1cb6a0.roa
File: 71ac1e75-f2ea-36f4-ad2f-08164d1cb6a0.roa (raw, json)
Hash identifier: YYoh895Wa4/xA0AIoCisp2cgut1I6E+XXhPno0vTGZA=
Subject key identifier: ED:0C:DF:8D:3C:D9:5C:6E:11:11:01:21:63:F6:29:87:B9:10:42:91
Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial: 010D0C9F4328584E7634F5797F5B8CF813FE0380
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/71ac1e75-f2ea-36f4-ad2f-08164d1cb6a0.roa
Signing time: Sat 11 Jul 2026 09:00:12 +0000
ROA not before: Sat 11 Jul 2026 09:00:12 +0000
ROA not after: Fri 09 Oct 2026 09:00:12 +0000
asID: 20001
IP address blocks: 64.16.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:76:34:f5:79:7f:5b:8c:f8:13:fe:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
Validity
Not Before: Jul 11 09:00:12 2026 GMT
Not After : Oct 9 09:00:12 2026 GMT
Subject: CN=c11557a9-657d-49f8-9bc3-26b2255f0da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fa:6a:6b:2c:dc:b7:51:ba:8d:d2:fc:34:91:
d6:04:d1:98:a3:f9:45:93:d2:e9:8e:3e:b3:cc:d3:
e6:ae:11:e2:61:29:c2:c3:27:3e:44:37:74:13:fe:
e1:1e:45:2e:e9:d3:9d:1c:98:95:eb:15:9a:ee:20:
6f:88:e1:a2:52:85:11:4f:53:e2:92:eb:ac:3a:ea:
8d:9d:8c:dc:c9:45:64:14:90:cc:13:18:55:9b:c4:
03:eb:f7:fb:bc:97:cf:69:78:6d:d7:43:de:64:b4:
9a:09:2b:63:ae:89:e9:53:00:a4:bf:08:b3:1d:76:
07:74:25:b7:32:1b:66:5f:bc:40:21:f3:ae:47:4b:
34:a5:98:0d:34:e5:52:f5:3b:0c:19:f9:95:7e:f4:
37:fd:8b:d6:6d:95:c2:67:5c:9d:01:cf:50:46:10:
71:7a:84:67:5d:dd:96:56:a3:e5:cb:b4:09:ab:43:
28:3a:97:95:66:3e:af:e0:69:96:a8:04:26:93:5a:
56:a9:15:eb:6c:1e:88:3d:0c:e4:81:48:6a:76:d6:
68:7c:e9:fa:b6:10:2e:56:69:91:82:3c:17:f4:ff:
7f:ba:34:0a:d1:d0:46:f5:46:b5:eb:b3:87:fc:16:
9e:7f:20:cb:e9:ab:95:0e:91:4c:c5:48:ff:d6:c9:
f2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0C:DF:8D:3C:D9:5C:6E:11:11:01:21:63:F6:29:87:B9:10:42:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/71ac1e75-f2ea-36f4-ad2f-08164d1cb6a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
X509v3 Authority Key Identifier:
keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
sbgp-ipAddrBlock: critical
IPv4:
64.16.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:b9:cc:aa:ba:0a:ef:f4:64:0c:6a:22:fc:43:25:a1:b1:32:
9f:1f:68:4e:8d:21:ca:5f:7f:c7:d9:48:ec:43:df:c2:c4:71:
50:35:0f:95:35:d6:1f:3d:37:28:d7:94:de:07:41:8e:9b:15:
3b:88:4e:72:5c:eb:3e:39:96:c3:be:ea:99:1f:53:0a:25:4a:
07:67:30:c4:a9:2e:06:2d:55:4b:20:62:c3:2a:82:75:1f:07:
e0:47:b2:4c:ae:3e:59:12:fe:b3:a9:a3:8c:10:fc:f1:1c:ca:
80:90:b2:51:9c:14:1a:9c:fe:55:f2:c7:7b:8c:7c:7a:33:aa:
8d:a2:79:4c:ba:74:99:81:e3:fd:85:9c:5b:d3:d7:4c:84:62:
df:50:92:f5:22:96:b3:d6:5e:3e:a0:2f:f0:90:5c:85:39:b4:
93:49:d0:c7:cd:88:e1:e9:b5:4c:b9:46:a0:05:a5:7b:dc:5c:
ae:2f:99:5d:58:12:bb:69:63:c2:20:f7:62:15:59:ad:06:90:
b7:06:32:02:59:10:6b:61:25:06:dd:f2:65:e8:64:0a:60:b0:
60:85:e6:42:5f:7c:25:ea:c9:4e:02:1b:a2:c0:6f:67:03:8b:
d2:49:9c:ef:79:fc:46:0f:2d:a8:9e:19:f5:45:bf:12:08:d8:
83:7f:57:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:24:45 2026 by rpki-client