
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/516e72f9-ee03-33d3-8fcc-32a077cc5f0b.roa
File: 516e72f9-ee03-33d3-8fcc-32a077cc5f0b.roa (raw, json)
Hash identifier: BF6WxJwA+Gs7ZlvKdF0UdYuLs2Lw9PD8RUsiVnquT+k=
Subject key identifier: 78:58:CD:4B:3B:BD:6B:FC:7E:96:84:3D:B2:31:FB:AA:F9:11:4B:99
Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial: 010D0C9F4328584F20F7B6CB0CB30FA4C45DDFC0
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/516e72f9-ee03-33d3-8fcc-32a077cc5f0b.roa
Signing time: Thu 10 Sep 2026 13:00:12 +0000
ROA not before: Thu 10 Sep 2026 13:00:12 +0000
ROA not after: Wed 09 Dec 2026 14:00:12 +0000
asID: 7029
IP address blocks: 64.16.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:20:f7:b6:cb:0c:b3:0f:a4:c4:5d:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
Validity
Not Before: Sep 10 13:00:12 2026 GMT
Not After : Dec 9 14:00:12 2026 GMT
Subject: CN=8ec8a2e3-f0f1-4e37-a85a-9a36096ae835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0f:39:8f:2d:35:51:23:ee:4b:e3:f9:02:70:
e6:f9:eb:44:49:0f:00:65:28:e0:df:3a:4f:81:1a:
e9:03:42:cd:08:83:86:48:d8:05:82:ac:9d:cb:79:
df:a5:ff:e7:8e:a0:14:1e:ab:59:8c:f9:96:61:05:
36:62:c1:bd:bb:76:f3:e5:ef:f2:22:5a:00:1d:18:
30:38:14:7e:4a:4b:ef:15:29:e2:cd:6a:38:17:49:
ab:20:70:ed:68:49:7f:f8:75:60:4b:74:7b:17:bc:
c6:d9:c8:31:a0:92:45:42:99:36:8c:af:50:00:5b:
cc:75:83:9f:d5:22:63:25:2a:4f:1d:f0:89:c0:f0:
6b:17:9a:a1:5b:35:26:72:50:87:95:b8:79:88:34:
e4:e9:39:67:95:81:8c:98:ff:93:76:2d:10:23:1d:
f8:85:9c:22:b1:53:3d:ba:6f:0e:cb:08:d5:6f:a9:
5d:02:61:be:1b:64:5e:e4:6b:34:48:42:05:5b:d1:
0c:99:e9:5a:6e:6a:8f:e3:32:71:c1:12:5d:98:8a:
61:8c:6a:43:59:5e:e4:54:6a:7f:44:e7:25:1a:94:
19:ae:39:30:f0:18:11:3a:cb:8e:63:3e:9c:55:34:
00:48:ce:05:12:2c:96:e5:c2:71:d3:3f:e4:d4:d2:
f4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:58:CD:4B:3B:BD:6B:FC:7E:96:84:3D:B2:31:FB:AA:F9:11:4B:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/516e72f9-ee03-33d3-8fcc-32a077cc5f0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
X509v3 Authority Key Identifier:
keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
sbgp-ipAddrBlock: critical
IPv4:
64.16.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:1a:29:d2:92:37:85:01:ab:24:b8:12:b5:28:67:c9:59:bf:
cb:58:14:54:93:3e:ee:5e:69:21:80:03:17:14:10:30:ac:08:
5b:8d:40:0a:62:97:f1:83:54:d8:aa:be:56:a0:03:b0:57:9e:
fc:e6:e7:28:f1:48:64:92:f4:f1:55:b0:b5:e2:0c:df:68:8d:
e3:47:41:60:bd:0c:9f:26:7c:6d:fd:54:12:d6:4b:4b:f7:b1:
2d:5f:97:12:19:bd:d7:1a:37:d6:bf:be:3d:e7:a5:6a:00:4b:
f1:b8:50:d1:a9:11:da:bc:dd:74:5e:02:13:60:5e:97:36:5f:
02:9c:ef:c1:39:8e:26:8d:94:6d:b0:13:80:52:86:1d:d7:ce:
19:26:47:14:ad:53:b7:85:dc:55:e6:ae:0d:1e:2c:ee:63:ad:
db:71:b4:79:a1:64:2f:c6:67:e5:63:cb:72:e3:27:f1:d3:3f:
50:2c:4f:2f:00:b5:63:01:fa:1a:45:c2:25:36:07:e5:3c:4a:
5a:86:14:fd:41:03:83:bd:c5:3b:62:9a:4b:0a:a6:81:24:d3:
b6:89:23:c0:ac:57:9d:97:a3:e1:56:39:95:ee:79:e7:61:8a:
f8:5e:49:4f:61:16:ea:30:5b:54:28:eb:0f:05:86:07:dd:f0:
6b:76:66:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:40:10 2026 by rpki-client