
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/72eec912-ade1-390d-84e6-2a1081e27fb4.roa
File: 72eec912-ade1-390d-84e6-2a1081e27fb4.roa (raw, json)
Hash identifier: iyA1bxDP0wOSWdZwtMwDo57LUFXrwndPmcGuHOktS8o=
Subject key identifier: F0:EE:C6:2B:92:CB:68:47:5E:60:CD:7F:92:C7:1F:27:6F:43:4E:74
Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial: 010D0C9F4328584D0EA7B3A8C89AA80EABE3D020
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/72eec912-ade1-390d-84e6-2a1081e27fb4.roa
Signing time: Wed 04 Mar 2026 14:00:41 +0000
ROA not before: Wed 04 Mar 2026 14:00:41 +0000
ROA not after: Tue 02 Jun 2026 13:00:41 +0000
asID: 16509
IP address blocks: 216.185.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0e:a7:b3:a8:c8:9a:a8:0e:ab:e3:d0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Validity
Not Before: Mar 4 14:00:41 2026 GMT
Not After : Jun 2 13:00:41 2026 GMT
Subject: CN=9dfe7333-fb3b-494c-b629-279eb295ab73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:02:25:c8:90:78:de:c5:b5:af:44:24:05:72:
cf:d3:55:5f:7a:d5:08:5e:30:55:f5:5a:49:b8:3a:
9a:a7:ad:ed:98:ab:fa:bb:bb:ef:e0:a7:01:73:bd:
51:a0:72:1d:48:c8:3f:92:50:0f:91:ac:5e:64:bc:
e6:2b:4b:33:4e:34:26:15:0b:72:6f:7f:45:87:63:
af:8f:03:af:99:1e:a8:cc:3f:4f:2b:a0:0f:d2:be:
69:1c:c5:1d:27:e0:95:2d:4a:17:6d:3e:84:ec:0f:
ee:40:69:6f:c3:2b:fe:fd:7b:43:92:e5:81:cd:fe:
28:b5:9f:00:38:8e:a3:c6:18:d9:e6:a0:8c:49:10:
de:da:0f:88:fe:35:12:1e:14:39:60:c1:bc:81:88:
cc:df:5b:a2:3a:76:bc:b0:d6:b6:30:47:c4:1c:42:
bd:88:e6:54:7e:1d:44:49:e0:95:c5:7d:8e:12:19:
da:d0:66:69:94:f4:57:e4:80:57:47:fa:1a:93:af:
eb:e9:58:64:91:f6:e8:62:87:08:ab:be:c5:92:71:
43:0c:7c:d3:6c:53:ef:a3:87:59:37:54:9e:87:b0:
0f:1a:91:19:13:3b:a3:b5:87:8b:c6:d7:6f:93:c2:
76:06:7e:b8:51:af:f4:be:7c:70:97:f8:b9:5c:8a:
7b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EE:C6:2B:92:CB:68:47:5E:60:CD:7F:92:C7:1F:27:6F:43:4E:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/72eec912-ade1-390d-84e6-2a1081e27fb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
X509v3 Authority Key Identifier:
keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
sbgp-ipAddrBlock: critical
IPv4:
216.185.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:a3:e6:0a:4b:f1:65:54:5c:4c:3a:4e:d6:2a:3d:94:d5:63:
cf:2a:10:aa:a5:f1:f1:f1:7e:fb:1a:18:4a:99:97:e8:6e:5f:
04:53:98:b2:b8:73:60:13:d0:40:cb:28:a9:da:50:d5:4e:9c:
f7:e4:ff:44:47:5e:1b:16:33:e7:e0:76:cd:65:cc:d8:56:63:
c3:4d:39:08:b3:a0:04:44:ac:e9:06:d7:32:dc:72:43:c2:2e:
e1:24:41:5d:67:ba:d8:41:bd:6a:4c:c2:4e:6b:28:81:c9:2e:
51:e7:5e:9e:3a:7d:6d:1b:10:af:46:3c:ee:c1:e3:be:e2:47:
4b:76:4a:30:3e:c4:47:42:d1:d5:bb:83:c7:aa:06:7c:23:44:
33:18:5d:12:cf:0f:c6:92:6f:64:44:88:da:e5:ee:a3:d0:76:
32:95:a8:84:7b:b8:8b:9f:ca:5a:76:55:43:dc:2b:bb:fc:9c:
fd:f3:39:f3:88:2f:cf:d0:f0:b8:4d:3f:99:b7:96:31:95:59:
ad:10:12:2b:10:f2:87:71:4b:db:ba:d9:2e:25:0c:8d:3c:30:
3a:5e:7b:cb:ba:35:7e:71:c4:e5:66:9a:9d:04:d2:4b:7d:e0:
15:23:eb:d5:80:0a:46:9a:cd:ca:36:4e:92:07:5c:a6:97:29:
d2:e4:e3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:44:02 2026 by rpki-client