
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/ce254da4-490d-3ee0-8f5a-262bf2ac6c6a.roa
File: ce254da4-490d-3ee0-8f5a-262bf2ac6c6a.roa (raw, json)
Hash identifier: 2yIkx0/bKrbhqZtdC6zYQuwimsqUNfS/iXw1N4DFOAk=
Subject key identifier: 24:80:A1:DE:85:89:34:D9:83:01:A1:61:45:03:70:FA:A6:95:A5:0B
Certificate issuer: /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Certificate serial: 010D0C9F4328584EA5AA99A78EDBF5D9461FC100
Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/ce254da4-490d-3ee0-8f5a-262bf2ac6c6a.roa
Signing time: Tue 28 Jul 2026 09:00:11 +0000
ROA not before: Tue 28 Jul 2026 09:00:11 +0000
ROA not after: Mon 26 Oct 2026 09:00:11 +0000
asID: 16524
IP address blocks: 72.11.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a5:aa:99:a7:8e:db:f5:d9:46:1f:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Validity
Not Before: Jul 28 09:00:11 2026 GMT
Not After : Oct 26 09:00:11 2026 GMT
Subject: CN=79d4277d-44df-4fdb-91b8-7e75ed5c1f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ac:be:b3:90:62:81:33:30:13:4c:61:cd:69:
da:53:67:7a:15:5d:3e:d9:32:72:2d:31:a0:28:b1:
67:db:d2:91:9a:86:a6:32:bd:e4:51:01:7f:76:3f:
bb:20:72:1a:21:74:0d:d4:cd:fa:0f:24:9b:74:91:
36:c1:17:e0:8f:55:b9:60:b7:79:91:93:a1:12:9d:
73:3e:47:20:bf:bc:a1:82:44:1f:38:37:09:80:25:
cd:ea:92:45:eb:1b:50:a1:e8:68:a1:a1:80:7d:51:
53:da:17:4b:77:36:be:6f:0e:7e:2f:91:cb:a2:cc:
9a:2c:74:77:07:69:a4:ee:09:5e:68:40:70:dc:ac:
2e:6c:f0:da:6b:e7:5c:71:7f:a8:8e:9e:26:67:95:
3b:e6:f9:a1:d8:41:7d:f9:59:08:24:d6:c7:4f:4b:
d0:8a:08:4a:79:c8:65:15:85:05:d0:08:46:39:9c:
cc:fb:97:c0:b5:39:26:34:06:5c:47:d0:cd:e6:20:
52:63:d3:85:20:a2:dc:57:e3:68:ee:9a:50:cd:5a:
33:6f:15:ea:52:6c:7d:09:34:65:bf:17:a5:65:c2:
cc:f9:52:38:d5:cf:3d:bb:41:a5:49:38:bb:06:03:
d5:3a:1c:22:a6:5b:8d:22:37:35:7e:91:b5:5b:09:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:80:A1:DE:85:89:34:D9:83:01:A1:61:45:03:70:FA:A6:95:A5:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/ce254da4-490d-3ee0-8f5a-262bf2ac6c6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
X509v3 Authority Key Identifier:
keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
sbgp-ipAddrBlock: critical
IPv4:
72.11.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:06:78:d8:b8:47:8f:cc:a7:68:f2:ec:82:e1:36:da:65:06:
20:30:21:97:a4:9c:3a:ba:b2:17:57:36:87:11:ae:43:0a:11:
73:c6:bf:c6:a9:3e:c6:f3:aa:23:b3:ea:6d:4c:9f:5d:1b:a8:
66:45:3c:ba:ea:c7:9d:d0:d6:70:ce:49:b7:23:51:df:e3:36:
c6:67:47:2d:e6:14:55:07:97:17:81:63:d6:1e:85:61:80:9b:
ea:8b:45:a4:02:f2:9c:94:80:2f:6c:5b:e3:42:24:d3:15:3c:
dc:c9:d2:e8:9d:18:95:3f:d8:6d:00:ab:62:97:25:06:ae:f0:
9a:8b:4f:ac:77:00:e4:cb:8a:13:7d:fd:bc:bf:17:66:34:a4:
2e:b3:ca:15:0f:c7:14:eb:4a:3e:a5:4e:62:15:ef:50:fb:6b:
2c:8e:e8:fd:6e:09:5d:51:06:11:be:df:d4:31:10:03:67:fb:
8e:16:d1:8b:73:65:e2:4c:c1:ad:1f:5a:01:46:5f:90:7f:88:
ba:59:25:5d:0b:c7:dc:ae:7c:db:a2:7f:0e:78:b1:56:a8:d7:
6b:00:97:58:ca:a8:ca:f1:da:0d:f8:a5:6d:9b:a8:6f:90:3f:
09:6a:e5:09:f3:64:6c:37:11:71:33:aa:a7:3d:ab:d9:e1:37:
72:ed:9a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:32:45 2026 by rpki-client