
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7dfab49a-2ec9-3469-ba84-62cf12537d90.roa
File: 7dfab49a-2ec9-3469-ba84-62cf12537d90.roa (raw, json)
Hash identifier: uBbyDCkPZGq274S7v1ofo2Usylq1M5YEcNOQqHlWut0=
Subject key identifier: 50:13:53:0D:BE:05:53:BA:6D:A6:9D:24:F4:51:A3:3A:45:2E:35:29
Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial: 010D0C9F4328584F1897C201E73C7CDC0458D900
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7dfab49a-2ec9-3469-ba84-62cf12537d90.roa
Signing time: Mon 07 Sep 2026 13:00:12 +0000
ROA not before: Mon 07 Sep 2026 13:00:12 +0000
ROA not after: Sun 06 Dec 2026 14:00:12 +0000
asID: 397630
IP address blocks: 64.16.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:18:97:c2:01:e7:3c:7c:dc:04:58:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
Validity
Not Before: Sep 7 13:00:12 2026 GMT
Not After : Dec 6 14:00:12 2026 GMT
Subject: CN=a1573a2b-979e-4bcc-8ef6-328c8f0fe899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:a3:74:88:72:03:e6:22:0e:75:97:b5:37:
71:7f:e9:71:3c:13:71:68:57:39:12:9e:69:8d:c6:
fd:0a:f5:51:aa:f1:32:ac:59:c0:3f:3b:a3:74:69:
c5:ea:0c:a2:8b:a1:82:21:cd:d5:15:58:9d:58:14:
b1:df:b6:7c:d3:42:2c:d0:ea:fa:e2:a2:e4:1f:90:
aa:79:1e:73:43:73:f6:56:cb:be:a6:0d:8d:7c:8f:
69:a6:69:76:49:0d:13:b2:b7:c5:28:7a:1e:4f:0d:
ba:20:b6:4d:37:90:14:3e:a6:01:c9:ba:5d:21:52:
82:cb:77:b1:b0:ae:4f:9a:d1:45:5a:48:2c:5e:a1:
3c:04:8e:65:8f:60:32:82:02:16:e5:ed:1c:fb:34:
48:78:04:ab:09:20:ae:1c:38:be:7c:92:0c:59:94:
ac:c3:6f:d2:e8:fb:c5:17:61:0f:92:1b:bc:4a:63:
d5:9d:f6:b2:ec:17:2b:bc:b3:37:a5:39:fe:fd:5f:
85:4e:4e:c8:d5:af:02:b4:e8:2d:39:ca:ca:af:16:
00:f7:5c:53:08:b4:f0:0b:48:8b:ce:ce:92:93:41:
8e:80:09:d9:bb:6b:63:a2:2b:98:1b:49:63:36:42:
1d:80:4b:d4:67:5b:37:7a:05:62:b8:f2:5b:75:c3:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:13:53:0D:BE:05:53:BA:6D:A6:9D:24:F4:51:A3:3A:45:2E:35:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7dfab49a-2ec9-3469-ba84-62cf12537d90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
X509v3 Authority Key Identifier:
keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
sbgp-ipAddrBlock: critical
IPv4:
64.16.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:8f:39:4f:af:0e:87:07:e0:0f:13:f2:05:0d:24:78:64:06:
a8:3a:1e:e5:bf:d4:ef:81:9f:44:c6:e8:e6:ed:0c:51:2d:82:
12:e0:97:4f:9b:28:31:7d:9a:a7:3a:0c:aa:fe:50:53:c2:44:
bc:51:e4:41:f9:b4:4b:fb:2d:ae:13:64:93:cc:24:db:50:ed:
2e:49:40:a1:43:99:d8:cf:e4:58:3e:72:e0:3c:48:f0:a2:0f:
ba:0b:1b:76:fc:cf:55:36:8a:89:41:87:45:ce:1f:6e:60:3c:
40:60:aa:e3:af:04:e9:1e:8e:1d:d1:ed:6c:5e:cf:19:e3:98:
dc:3e:2e:6d:fc:f0:dd:7d:2e:fe:d9:f7:5f:ff:02:e3:d8:62:
ef:1c:86:87:59:57:94:33:f0:8d:28:65:d2:91:13:9c:2b:2d:
df:f3:32:36:c2:64:5c:a6:fd:aa:20:10:29:61:00:6f:d1:1b:
53:06:ef:2b:39:14:da:f7:b7:23:f4:06:b8:07:82:e5:9c:c0:
58:43:65:fa:3b:24:60:5e:bd:2a:e3:c2:a2:1c:d3:d7:8b:7b:
ce:5f:58:c3:4f:ed:2f:d2:8d:e4:65:60:06:d6:78:f9:9a:46:
1a:3c:9a:d5:28:7d:c4:20:d8:d8:de:68:96:58:63:21:4f:f8:
79:c9:1f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:35:01 2026 by rpki-client