
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/e8a359e6-b837-3dbf-b00e-3aa64ee4d604.roa
File: e8a359e6-b837-3dbf-b00e-3aa64ee4d604.roa (raw, json)
Hash identifier: nzjxMl1bFpc8Ka2iE1ll1+CZdumWWf9uF2u4IrJ0ibU=
Subject key identifier: 8A:13:F3:69:1F:A1:87:37:2F:67:93:A0:22:D4:9A:51:FA:AF:8F:85
Certificate issuer: /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Certificate serial: 010D0C9F4328584DC565C12B3CEC2C7A567DE980
Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/e8a359e6-b837-3dbf-b00e-3aa64ee4d604.roa
Signing time: Sat 09 May 2026 01:00:25 +0000
ROA not before: Sat 09 May 2026 01:00:25 +0000
ROA not after: Fri 07 Aug 2026 01:00:25 +0000
asID: 16524
IP address blocks: 72.11.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c5:65:c1:2b:3c:ec:2c:7a:56:7d:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Validity
Not Before: May 9 01:00:25 2026 GMT
Not After : Aug 7 01:00:25 2026 GMT
Subject: CN=cf80383e-c9a1-4d0d-a7f8-ea89c91d15a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:e7:2b:8a:c9:64:26:16:f1:08:b0:fa:b5:
36:c6:13:cc:c1:a7:e5:1c:3c:92:d5:92:82:ea:ad:
53:c5:50:21:cf:7d:7c:8a:3f:48:da:17:64:c5:83:
31:05:e0:7f:46:41:55:d1:47:e5:60:94:33:5e:b5:
88:cd:18:5c:c2:5d:7d:9f:2e:35:be:85:d9:eb:3e:
c0:a7:53:f2:a4:b8:8d:d4:cb:6e:56:9e:36:6f:d2:
4f:51:b1:15:47:3a:9e:9b:e0:4e:1a:9e:8d:59:63:
32:a1:7b:aa:73:6b:ec:bd:fd:d4:eb:3e:38:b6:86:
fc:79:ef:c8:77:33:f5:1b:e4:d3:c8:a1:92:50:3b:
23:73:37:ae:ef:03:46:7f:84:f2:7a:66:75:2d:26:
14:b7:4f:32:b9:43:ba:94:5b:2a:de:a4:21:43:88:
a3:f5:e5:c8:85:2c:3f:69:72:21:e5:a7:d3:c0:6d:
8f:7d:5a:98:b0:12:92:82:7f:fe:25:15:06:b0:75:
48:8e:58:44:dc:1a:f1:38:19:45:69:aa:e2:29:c2:
7f:3b:9f:42:2c:29:02:dc:57:ab:ce:97:49:1f:67:
2d:c9:5a:da:e2:39:1f:dc:84:4b:a8:6f:c0:73:7a:
d3:b4:fb:9c:41:1e:00:f5:cc:26:f5:c0:08:b4:29:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:13:F3:69:1F:A1:87:37:2F:67:93:A0:22:D4:9A:51:FA:AF:8F:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/e8a359e6-b837-3dbf-b00e-3aa64ee4d604.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
X509v3 Authority Key Identifier:
keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
sbgp-ipAddrBlock: critical
IPv4:
72.11.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:cf:50:bc:f7:3e:2a:e2:08:15:01:59:53:07:7f:1f:f2:30:
78:11:91:60:b0:93:ac:35:c1:7c:d8:ce:05:62:15:a3:1e:f0:
8a:74:b4:52:4c:97:47:83:6c:db:31:f3:7f:b0:92:62:29:43:
99:28:c4:d4:f5:1d:27:65:4b:e0:5e:62:e9:0f:0d:a9:22:b0:
47:9e:72:58:9b:9d:23:9c:e6:fe:2e:03:2d:a1:6d:ed:3f:43:
bb:8d:3d:a1:8d:70:0b:e5:07:83:e0:bd:6a:b3:f1:af:03:b6:
03:3d:1f:85:3a:d8:8d:9b:e1:c8:c1:ec:07:03:dc:f9:c8:ba:
c6:97:26:d4:7d:58:02:f7:d3:ec:f1:9c:5b:4e:ce:de:50:39:
ae:f0:3a:fb:42:85:75:25:2a:2e:82:2d:35:4f:0e:f3:16:b4:
dd:f4:e3:a6:69:f0:ae:28:09:c0:f3:e7:b6:fc:35:b4:91:c4:
20:e0:8c:83:e2:9a:ea:bd:f1:6e:62:19:57:5c:ef:db:ba:b7:
f6:a3:5c:8a:b2:77:71:b2:e2:ba:af:ae:fb:f7:42:89:52:55:
58:14:17:3a:4b:a5:ea:a0:a0:0f:6e:b4:0a:47:0a:88:4a:7c:
1a:1f:c2:03:f6:0d:de:8f:1d:50:59:93:ee:17:fd:29:8c:d3:
22:e4:e5:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3FZcErPOwselZ96YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTZkNWQ5MjMtZmQzNC00MDlkLThmNzctMjJjNjAxNGU2
ZTFiMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk
Y2Y4MDM4M2UtYzlhMS00ZDBkLWE3ZjgtZWE4OWM5MWQxNWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCbnK4rJZCYW8Qiw+rU2xhPMwaflHDyS1ZKC
6q1TxVAhz318ij9I2hdkxYMxBeB/RkFV0UflYJQzXrWIzRhcwl19ny41voXZ6z7A
p1PypLiN1MtuVp42b9JPUbEVRzqem+BOGp6NWWMyoXuqc2vsvf3U6z44tob8ee/I
dzP1G+TTyKGSUDsjczeu7wNGf4TyemZ1LSYUt08yuUO6lFsq3qQhQ4ij9eXIhSw/
aXIh5afTwG2PfVqYsBKSgn/+JRUGsHVIjlhE3BrxOBlFaariKcJ/O59CLCkC3Fer
zpdJH2ctyVra4jkf3IRLqG/Ac3rTtPucQR4A9cwm9cAItCmLNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIoT82kfoYc3L2eToCLUmlH6r4+FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1
ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2MDE0ZTZlMWIvZThhMzU5ZTYtYjgzNy0z
ZGJmLWIwMGUtM2FhNjRlZTRkNjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTZkNWQ5MjMtZmQzNC00MDlkLThm
NzctMjJjNjAxNGU2ZTFiLzE2ZDVkOTIzLWZkMzQtNDA5ZC04Zjc3LTIyYzYwMTRl
NmUxYi5jcmwwHwYDVR0jBBgwFoAUmCYkELxZPdjIgitGMzb83aTv+10wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2
MDE0ZTZlMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAvCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3PULz3PiriCBUBWVMHfx/yMHgRkWCwk6w1wXzYzgViFaMe8Ip0tFJM
l0eDbNsx83+wkmIpQ5koxNT1HSdlS+BeYukPDakisEeeclibnSOc5v4uAy2hbe0/
Q7uNPaGNcAvlB4PgvWqz8a8DtgM9H4U62I2b4cjB7AcD3PnIusaXJtR9WAL30+zx
nFtOzt5QOa7wOvtChXUlKi6CLTVPDvMWtN3046Zp8K4oCcDz57b8NbSRxCDgjIPi
muq98W5iGVdc79u6t/ajXIqyd3Gy4rqvrvv3QolSVVgUFzpLpeqgoA9utApHCohK
fBofwgP2Dd6PHVBZk+4X/SmM0yLk5d0=
-----END CERTIFICATE-----
Generated at Wed May 13 13:07:36 2026 by rpki-client