
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/716a8d26-15cf-38d5-bfc8-7081f6e667d9.roa
File: 716a8d26-15cf-38d5-bfc8-7081f6e667d9.roa (raw, json)
Hash identifier: TPyfb19G2ka5+O5VI1Bn90ARYvPEMYccF5MvcN6ytqM=
Subject key identifier: 26:B2:71:B0:16:91:32:E2:A8:6C:DD:85:C3:2A:71:7D:10:94:12:CA
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F4328584D2BDA201EE6B244E64D905400
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/716a8d26-15cf-38d5-bfc8-7081f6e667d9.roa
Signing time: Sun 15 Mar 2026 01:00:32 +0000
ROA not before: Sun 15 Mar 2026 01:00:32 +0000
ROA not after: Sat 13 Jun 2026 01:00:32 +0000
asID: 11090
IP address blocks: 216.137.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2b:da:20:1e:e6:b2:44:e6:4d:90:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Mar 15 01:00:32 2026 GMT
Not After : Jun 13 01:00:32 2026 GMT
Subject: CN=cd84fd86-50ec-4de6-bb08-b81e85164314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3e:88:4a:d0:48:a8:f9:7b:b1:d3:5b:09:d2:
b6:bf:ce:65:05:d2:19:f5:ac:6d:98:58:30:ba:2f:
3e:6c:b2:e5:8c:f7:3c:09:68:2d:75:9c:b3:56:60:
e6:58:ec:bc:3d:be:50:56:e1:63:52:16:d3:eb:c1:
8d:74:f3:4c:42:47:e2:d4:f8:ae:3a:ca:b3:63:84:
1a:11:e8:f8:6d:a7:7a:94:4c:8a:a4:d1:62:b9:5d:
df:86:4a:db:6b:47:00:ea:11:06:5c:a1:55:a2:16:
fd:da:97:92:b0:f4:55:54:d6:03:ba:2b:84:fd:3e:
77:12:6d:89:94:7e:4f:ac:4f:25:02:8c:81:69:88:
b3:2c:13:6e:9a:16:ac:53:6e:cb:6a:b4:1f:85:20:
77:0e:5b:3d:18:db:d3:f7:97:c1:37:4e:1c:39:c2:
de:52:e9:5c:5e:85:7e:1b:3f:72:ab:c6:dc:84:a0:
7d:b3:6d:ac:f9:6d:2b:d8:62:46:02:7b:6d:4c:66:
7c:ae:44:ad:ea:26:5b:8b:d0:13:d8:bd:96:9b:76:
7f:4a:af:79:52:73:e1:ed:9d:34:be:31:ca:b5:0c:
21:16:0d:9d:d3:1d:26:c0:c9:fc:09:60:2a:a9:f0:
74:a4:60:30:7d:10:b8:3a:ae:99:e6:a5:3f:c5:b9:
34:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B2:71:B0:16:91:32:E2:A8:6C:DD:85:C3:2A:71:7D:10:94:12:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/716a8d26-15cf-38d5-bfc8-7081f6e667d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.137.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:ee:d3:1a:75:3b:ff:21:51:24:0a:46:e0:1a:75:a4:67:85:
5b:9a:3a:b5:07:79:e2:46:a7:05:b8:99:6d:13:1e:7a:7a:1d:
7d:af:d1:38:d2:aa:e0:c6:f2:d9:5e:dc:81:3e:81:f9:04:ec:
40:b4:a9:50:1e:32:25:f5:41:3b:8a:96:e3:3e:d8:27:90:c7:
1a:61:89:8e:4a:d3:4b:8f:14:28:f5:00:bb:31:b5:75:d2:dd:
fc:04:50:fb:fa:69:79:2e:66:80:3c:6d:25:56:12:4c:d1:d4:
8a:eb:5f:c3:9a:1c:6b:b1:16:49:fd:25:45:15:7f:88:a5:a7:
4c:8c:d6:d4:0d:0b:cf:23:d9:c6:c7:07:b7:73:4d:44:9f:e7:
82:5b:d3:9f:57:54:22:f2:10:4b:be:3d:65:ed:a9:a8:49:f5:
97:37:56:08:38:45:53:5a:65:ee:2b:4e:66:ac:5c:47:39:e9:
93:7f:a6:9d:ac:17:01:17:b3:ac:f6:96:7f:ea:2c:3a:14:c9:
d2:cb:07:dd:6d:01:b9:c3:06:bb:74:cc:69:20:5c:ec:5f:05:
86:5a:fc:c4:ba:48:94:e8:ff:ba:1e:ac:31:39:1a:d8:43:0c:
fa:98:9f:43:2e:28:5b:09:c6:a3:64:7d:ef:ba:b5:c9:52:da:
37:59:df:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:02:24 2026 by rpki-client