
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/ce254da4-490d-3ee0-8f5a-262bf2ac6c6a.roa
File: ce254da4-490d-3ee0-8f5a-262bf2ac6c6a.roa (raw, json)
Hash identifier: ki2oQGR2A41BujrHVBXSRTxQLsy9Pp+pDZTgShKcP/I=
Subject key identifier: 44:84:71:0A:02:64:98:86:F4:23:5D:54:66:C7:0D:71:A0:1A:DA:18
Certificate issuer: /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Certificate serial: 010D0C9F4328584CE4D674FDC96DF80D1F081DA0
Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/ce254da4-490d-3ee0-8f5a-262bf2ac6c6a.roa
Signing time: Tue 17 Feb 2026 14:31:03 +0000
ROA not before: Tue 17 Feb 2026 14:31:03 +0000
ROA not after: Mon 18 May 2026 13:31:03 +0000
asID: 16524
IP address blocks: 72.11.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e4:d6:74:fd:c9:6d:f8:0d:1f:08:1d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Validity
Not Before: Feb 17 14:31:03 2026 GMT
Not After : May 18 13:31:03 2026 GMT
Subject: CN=7748c062-e7e0-4898-be5b-e07189c2af63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:d0:b3:37:db:18:c1:ad:5d:81:c9:49:5b:
33:fd:1d:66:e3:2c:4c:1c:2c:17:a4:1a:4d:f8:aa:
ff:a6:dd:29:0f:3e:dc:6c:b1:7a:45:56:f9:3e:a2:
13:e0:ea:ef:3f:56:a3:c3:1f:10:20:4e:b5:46:1b:
ce:f3:bc:2b:49:ae:f2:d5:6c:f4:6f:0c:ed:2d:29:
67:29:43:c0:5c:8a:ac:55:12:81:4d:fe:7f:fd:c2:
a8:fc:39:20:9a:fb:8d:2a:ef:6b:54:29:96:8b:bd:
cd:9b:0d:37:90:0d:5b:ab:f9:f4:0f:93:0a:48:31:
c2:83:16:cd:71:16:b6:8a:34:05:d3:7a:74:38:b3:
ef:24:17:94:20:7f:fd:d2:bf:41:68:b4:60:f7:5b:
19:bb:a6:e4:43:fb:a4:7d:a2:d0:25:05:2b:37:34:
2f:19:19:ed:05:98:75:e7:48:50:3b:64:18:4e:5a:
8f:64:13:9e:85:4f:dc:1d:dd:e7:ce:86:7b:13:3b:
d5:b6:0c:68:e9:f3:69:46:e0:c3:93:d8:de:99:43:
81:a4:32:e2:e6:9b:3d:7c:98:11:36:80:86:20:f9:
3d:fc:b9:21:0a:94:79:a2:d2:7e:d2:2b:93:e2:8c:
35:1d:11:a7:d5:4a:2c:60:1e:55:2e:4f:c7:33:6f:
4a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:84:71:0A:02:64:98:86:F4:23:5D:54:66:C7:0D:71:A0:1A:DA:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/ce254da4-490d-3ee0-8f5a-262bf2ac6c6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
X509v3 Authority Key Identifier:
keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
sbgp-ipAddrBlock: critical
IPv4:
72.11.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:e3:6f:71:0e:99:16:55:fa:c1:d5:05:88:6b:25:24:db:ed:
ba:cd:5d:2e:19:f7:c0:cc:2a:6c:a0:70:30:e7:48:30:6d:0e:
d7:b4:3d:89:43:91:1e:39:ff:0f:88:bb:a5:02:07:bc:46:51:
c6:7e:84:54:20:26:58:76:f6:54:ff:4d:ea:28:ec:47:48:bf:
e6:8b:12:68:7f:e5:b0:2e:25:03:85:2a:60:d9:c5:d9:30:9a:
c9:06:56:c2:70:f1:2b:fd:cb:27:ac:65:db:32:60:d7:03:34:
93:7a:b4:e4:b6:98:fb:d7:18:87:f0:9e:93:fa:4a:79:1b:fb:
d3:f4:aa:3e:83:5b:fe:12:67:ae:be:e4:95:79:00:63:7b:9f:
e6:20:a9:8d:5b:c6:19:30:6e:7f:7d:43:4f:0e:c0:92:f7:27:
b7:92:5f:53:39:5b:28:da:56:f8:4d:76:b1:84:80:79:9c:92:
97:3b:88:ea:58:99:08:c6:bc:6c:4a:4c:d6:e3:2b:16:92:41:
4a:bb:87:df:ba:24:95:f8:2d:86:09:19:fe:69:dd:ab:c3:d8:
9a:a1:e7:e6:84:53:ed:c2:c2:f5:a6:a3:70:3b:24:04:9a:3a:
12:bb:b8:87:29:d8:02:86:0a:6b:0f:f4:39:0b:70:e6:c5:13:
94:5a:ac:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:08:57 2026 by rpki-client