
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/a35346b0-374c-3217-90b6-0b4472925b93.roa
File: a35346b0-374c-3217-90b6-0b4472925b93.roa (raw, json)
Hash identifier: ESPaUebz8JYeyW2dvavpfIlFzu/jeMq/IRLjBaqpiVY=
Subject key identifier: CA:B2:DC:B2:93:0E:FB:93:A0:DC:00:44:E8:87:3E:B0:2E:6D:2D:AF
Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial: 010D0C9F4328584F21451BDEB600EE087112D2B0
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/a35346b0-374c-3217-90b6-0b4472925b93.roa
Signing time: Thu 10 Sep 2026 15:36:22 +0000
ROA not before: Thu 10 Sep 2026 15:36:22 +0000
ROA not after: Wed 09 Dec 2026 16:36:22 +0000
asID: 3152
IP address blocks: 198.124.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:21:45:1b:de:b6:00:ee:08:71:12:d2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Validity
Not Before: Sep 10 15:36:22 2026 GMT
Not After : Dec 9 16:36:22 2026 GMT
Subject: CN=a9d9e6cd-b82a-46d9-ad92-6edee207f3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b9:d7:eb:a1:84:52:b5:40:ed:83:55:84:2a:
33:fd:64:be:81:c1:ad:41:da:04:48:c8:7b:37:0d:
bf:bb:81:66:c5:3d:e8:de:7b:c6:3c:e0:0e:73:3e:
cc:ca:69:fd:34:58:ed:55:87:f4:23:33:a8:96:5f:
50:54:dd:d1:09:e2:49:35:3f:b6:30:9d:a9:bb:fb:
2d:f7:05:11:22:ac:d8:8e:94:e2:39:c5:c1:00:c4:
ad:ed:45:25:53:b1:c0:a5:0b:7b:b8:40:38:c9:da:
08:fd:88:c2:11:3a:83:79:5f:e3:a5:dd:04:37:13:
0a:3a:e3:cc:a3:a5:98:4b:af:6d:10:50:25:d1:18:
71:13:79:7d:41:44:b1:f3:a8:95:84:ff:8b:13:19:
f7:d0:f9:04:ff:6d:b4:4d:72:f0:30:20:26:11:b9:
c2:e6:1e:05:d5:0c:7f:7b:c5:63:fd:a1:00:64:15:
54:e4:f5:fc:74:6c:bf:23:65:53:c7:f2:d8:91:e9:
16:38:64:81:22:fe:e0:fe:78:4a:69:6c:14:82:94:
80:ef:e8:89:25:93:42:63:9f:0d:21:d0:93:d9:d4:
b4:34:31:fe:d9:29:0c:c3:5f:1f:10:20:56:ad:1f:
47:ec:0c:86:8a:ff:49:a9:89:28:ff:1a:d3:2c:8e:
31:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B2:DC:B2:93:0E:FB:93:A0:DC:00:44:E8:87:3E:B0:2E:6D:2D:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/a35346b0-374c-3217-90b6-0b4472925b93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
X509v3 Authority Key Identifier:
keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
sbgp-ipAddrBlock: critical
IPv4:
198.124.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:68:76:1e:da:b3:45:ff:40:50:6b:41:9a:fd:78:7e:a7:95:
3c:b4:f9:7a:ba:6d:e1:f0:d6:b0:5e:10:a6:06:30:68:10:32:
e3:17:b0:a9:67:bd:e5:13:7d:e6:1f:6d:11:84:e1:ca:36:ed:
83:2c:2e:17:10:5a:b1:22:9a:1d:df:85:96:35:09:3c:8d:69:
a4:9f:de:5b:8f:ef:fc:3d:9b:97:4e:63:bb:06:8d:d1:7a:54:
c5:29:ff:44:c0:26:4c:05:f0:b8:7a:51:ff:e5:f5:8a:7d:32:
17:e2:9d:9f:08:88:e2:34:8b:55:b6:c1:00:ce:62:d1:53:cb:
4d:72:63:42:db:ad:41:4e:a2:d7:ae:3e:07:9f:2a:19:7b:47:
1a:88:bf:d2:48:d1:d6:bf:03:e7:f7:6d:6e:7a:d0:6b:7c:16:
f8:de:9b:9b:17:63:d4:1b:06:6f:77:7f:63:ca:5a:99:4c:e7:
d6:7a:2a:43:3d:72:49:f9:f2:67:3a:d0:72:25:0d:00:91:06:
09:88:28:0d:af:c5:2d:34:d5:a2:ea:10:cc:a4:8b:c9:52:53:
09:d1:f7:4d:47:bd:ee:c5:cc:14:22:18:cc:b0:89:74:0b:10:
aa:19:ef:dc:ce:c1:6b:ff:e7:6a:c4:dd:ac:51:0c:9c:69:04:
11:72:9a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:00:37 2026 by rpki-client