
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/e8a359e6-b837-3dbf-b00e-3aa64ee4d604.roa
File: e8a359e6-b837-3dbf-b00e-3aa64ee4d604.roa (raw, json)
Hash identifier: AuNfjgvEEmjaS2XhOB0Cqo1JoOtt4cJZgSWBoN5P990=
Subject key identifier: 0D:DA:B2:44:49:D9:FC:74:F8:43:98:9C:66:E8:9E:87:A0:1B:5D:32
Certificate issuer: /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Certificate serial: 010D0C9F4328584EA5AA962B3B58704578A1E900
Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/e8a359e6-b837-3dbf-b00e-3aa64ee4d604.roa
Signing time: Tue 28 Jul 2026 09:00:11 +0000
ROA not before: Tue 28 Jul 2026 09:00:11 +0000
ROA not after: Mon 26 Oct 2026 09:00:11 +0000
asID: 16524
IP address blocks: 72.11.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a5:aa:96:2b:3b:58:70:45:78:a1:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Validity
Not Before: Jul 28 09:00:11 2026 GMT
Not After : Oct 26 09:00:11 2026 GMT
Subject: CN=1b16de58-55d1-496e-a89e-936d2f521f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:75:ad:dc:c1:b1:ac:29:eb:53:07:18:be:62:
cd:07:51:03:ce:1e:f3:79:82:4f:83:64:53:18:32:
23:b0:bf:67:e0:a3:68:3b:63:55:d4:86:b8:ef:0c:
91:1d:43:c7:70:4d:30:3a:0b:87:95:f9:5c:a0:4d:
e9:42:ee:2a:e9:de:3e:08:c3:e7:08:64:fb:38:40:
ff:28:25:85:43:d8:42:0d:19:0c:fd:ea:66:24:0f:
e4:dd:ba:c6:e1:4e:43:dc:39:16:8c:75:3d:e6:8c:
07:b4:32:29:48:a2:22:2b:56:c8:c0:dd:8e:76:e3:
72:1e:52:b2:de:73:25:b2:d3:5d:a4:f1:7d:75:8a:
27:eb:fb:98:fc:e8:37:e6:d7:34:4b:1e:ea:82:a4:
0d:1c:48:a0:50:3a:ca:c7:b3:a4:8d:b8:fb:16:a6:
2e:ff:1a:5d:ad:13:a0:74:fe:15:4d:59:3f:22:85:
92:a9:07:e8:ea:2f:61:a1:91:6b:e4:25:a6:02:61:
cf:50:ef:9a:f9:72:e2:b3:71:27:60:28:10:22:4e:
fc:46:00:ee:05:19:6c:9e:27:64:34:32:b5:5b:1d:
58:f4:4c:6b:3a:30:f5:33:72:67:da:ab:3c:46:f0:
d5:07:75:e1:18:fd:b2:21:37:6f:65:83:51:6d:e4:
3a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DA:B2:44:49:D9:FC:74:F8:43:98:9C:66:E8:9E:87:A0:1B:5D:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/e8a359e6-b837-3dbf-b00e-3aa64ee4d604.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
X509v3 Authority Key Identifier:
keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
sbgp-ipAddrBlock: critical
IPv4:
72.11.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:7e:58:09:bc:2d:98:70:bc:03:25:4c:ab:89:5f:09:8b:0a:
9b:d8:b1:33:b0:19:b9:e0:2b:28:a9:26:52:a0:d7:e1:29:b4:
b0:a4:e7:f0:26:47:74:78:0c:4a:f2:fa:db:02:71:2f:a6:2e:
a4:92:f6:70:a3:58:a8:a8:a8:b1:19:e0:10:f4:3c:0a:1d:ac:
ce:f1:50:de:17:fc:24:64:b9:20:94:d0:57:ac:de:10:7a:e9:
f5:7d:c5:5a:1f:e4:30:d7:30:ba:7b:e6:6f:68:32:22:8e:6d:
e4:0a:54:d0:d5:00:9c:36:1a:ef:58:67:56:04:2d:78:6e:9c:
59:b3:11:dd:57:4c:9e:b6:7b:c0:db:31:15:43:84:69:67:80:
30:15:ca:67:d3:fc:4f:bf:36:32:62:11:09:a1:d3:c0:bf:20:
e9:c8:d0:c9:7f:51:b2:a8:9b:e5:ad:a2:01:f8:39:9a:71:c6:
0b:d4:60:76:0e:c2:f4:13:53:c7:99:85:c0:60:6b:95:1a:3c:
5b:9c:76:b8:59:be:18:4f:d0:c5:5f:ad:24:d0:4f:e6:74:54:
4c:19:e0:4e:d8:54:14:03:bd:bf:78:bb:9a:c6:ac:fe:71:5d:
ee:cc:f1:fd:bf:23:d8:c0:ad:0b:7c:1f:37:b1:e7:ef:6a:33:
8a:72:57:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:30:31 2026 by rpki-client