
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/ce254da4-490d-3ee0-8f5a-262bf2ac6c6a.roa
File: ce254da4-490d-3ee0-8f5a-262bf2ac6c6a.roa (raw, json)
Hash identifier: xN7ixAPrF95KENtn936ekO8t+j428Ox2dU7f8rk3m10=
Subject key identifier: 9E:38:79:0C:F1:52:B1:42:BE:2E:C8:AA:E5:0F:78:A5:05:E9:E2:CA
Certificate issuer: /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Certificate serial: 010D0C9F4328584DC565C0FD2B0A2EE2A9AC4000
Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/ce254da4-490d-3ee0-8f5a-262bf2ac6c6a.roa
Signing time: Sat 09 May 2026 01:00:25 +0000
ROA not before: Sat 09 May 2026 01:00:25 +0000
ROA not after: Fri 07 Aug 2026 01:00:25 +0000
asID: 16524
IP address blocks: 72.11.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c5:65:c0:fd:2b:0a:2e:e2:a9:ac:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Validity
Not Before: May 9 01:00:25 2026 GMT
Not After : Aug 7 01:00:25 2026 GMT
Subject: CN=c07c7df0-5376-47ec-87d3-c788fdddfc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:dd:51:0f:1f:99:fd:06:a3:0c:04:95:7c:
0a:bb:a3:38:ed:a6:92:0e:aa:3c:b5:1a:98:2c:45:
f4:b3:42:5f:25:8a:1f:89:e7:20:b6:ca:d0:b7:cf:
00:d5:99:8a:9a:ea:a7:b7:8d:31:95:56:45:df:df:
4a:37:1a:c6:f6:7a:d9:ae:a5:c2:63:ce:fa:7d:1d:
9d:cf:b5:61:a4:56:51:73:94:0e:bd:9b:ce:6d:ee:
d7:a9:e0:59:f3:f4:c1:4a:a7:77:1f:9b:18:ad:80:
f3:4b:fe:c1:ec:3e:76:65:ee:2f:c1:a8:ec:81:c6:
95:97:2f:92:91:2b:29:23:62:2d:00:36:33:25:1a:
d8:eb:99:4d:ab:a0:e8:5e:9b:0a:3f:bc:55:5b:90:
8b:f2:50:81:76:98:2d:af:72:b8:d9:c1:bf:80:d0:
db:3d:c4:87:2e:3a:8e:2d:18:54:4f:da:59:87:05:
32:6e:9c:1e:ce:06:7f:f8:89:11:7e:fa:a9:31:2a:
f8:09:d4:27:09:c4:09:27:df:af:be:4e:5d:fd:f4:
d9:1c:0a:4a:b0:c9:3d:f1:24:88:ed:80:d8:bc:b1:
99:92:19:1b:83:6e:25:7a:25:d1:92:e6:95:f2:41:
67:e7:e2:43:3c:59:29:c0:df:9e:82:c9:c4:b6:c4:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:38:79:0C:F1:52:B1:42:BE:2E:C8:AA:E5:0F:78:A5:05:E9:E2:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/ce254da4-490d-3ee0-8f5a-262bf2ac6c6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
X509v3 Authority Key Identifier:
keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
sbgp-ipAddrBlock: critical
IPv4:
72.11.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:2a:21:5e:bc:65:fa:ad:eb:ab:d6:bc:eb:16:7e:35:0d:0e:
5d:da:88:53:52:67:29:b6:45:46:fe:ee:11:8f:7d:dc:dc:f2:
6e:1b:a7:cb:cb:94:d4:73:5a:6e:3a:5c:90:b0:de:3d:bf:0b:
49:d1:ad:dd:22:3d:65:42:93:89:19:15:52:bd:12:9d:bd:94:
c9:76:d7:9c:b5:0a:04:ba:e6:7a:f6:41:44:6f:5f:5a:c5:1e:
ff:2b:f3:9f:a3:4e:80:14:5e:49:68:3e:b5:f3:75:e3:4f:60:
81:13:42:28:e3:19:c0:9d:a8:d6:3d:e7:b8:74:c4:ec:00:61:
be:91:b2:52:0c:d3:5e:6f:22:77:5f:3d:62:95:fa:27:42:cb:
0a:47:47:fb:90:c4:b5:f4:59:84:d7:fa:89:fc:06:05:c1:22:
7a:26:5b:43:bd:4a:ad:44:dd:c9:f5:2c:d1:a0:70:84:a8:64:
ff:d8:94:83:c9:99:02:74:b7:8b:bf:a2:7b:8b:0c:3b:a1:da:
1c:38:ee:52:45:25:17:02:d0:09:68:10:60:1d:d8:b4:b2:1d:
9b:7c:57:01:a6:17:72:ae:4e:26:c4:15:45:bd:14:ce:26:3e:
0d:63:99:5d:2c:08:52:59:fb:c2:36:53:38:24:0e:48:6b:05:
eb:23:c9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:12:25 2026 by rpki-client