
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/85b23fe7-16bf-35b9-ae08-09a4ecdde153.roa
File: 85b23fe7-16bf-35b9-ae08-09a4ecdde153.roa (raw, json)
Hash identifier: qIe4/LnyyIxSuuPD9ObGHNAK3/Zbgae8KOKQhLafhcM=
Subject key identifier: AC:42:5F:95:0F:AC:51:70:80:E5:18:8E:AA:BE:69:8E:1B:97:AD:8C
Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial: 010D0C9F4328584ED9C74E0329A6FFDD318CD220
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/85b23fe7-16bf-35b9-ae08-09a4ecdde153.roa
Signing time: Sun 16 Aug 2026 01:00:14 +0000
ROA not before: Sun 16 Aug 2026 01:00:14 +0000
ROA not after: Sat 14 Nov 2026 02:00:14 +0000
asID: 212238
IP address blocks: 72.9.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d9:c7:4e:03:29:a6:ff:dd:31:8c:d2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
Validity
Not Before: Aug 16 01:00:14 2026 GMT
Not After : Nov 14 02:00:14 2026 GMT
Subject: CN=f3791f65-291a-40b0-8b17-5e457710f553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:26:39:50:29:6a:18:dd:ef:d8:3e:ae:c8:97:
a1:f9:92:70:51:b4:ab:61:67:a5:16:a9:d2:10:3f:
b8:98:39:ca:2b:21:35:e8:5b:5c:df:7a:70:11:a2:
33:c5:35:a2:21:71:a8:63:01:82:90:9a:97:ca:2d:
78:b0:ec:45:2a:9f:e8:14:75:b8:81:ac:37:05:8b:
77:49:24:e6:6e:4f:27:5b:71:5f:20:fa:e0:f1:ef:
37:06:04:e8:3e:c7:c0:16:db:b0:e9:22:9b:9c:9c:
2b:af:21:3a:9b:0d:d6:27:aa:96:58:d6:b0:ef:eb:
fe:f2:4c:d6:d1:8e:2f:2c:f5:0b:83:d1:c8:24:94:
58:51:58:01:45:e6:48:3a:45:da:fb:fa:23:56:aa:
9d:71:3a:04:6b:3b:f9:8e:a8:07:76:ab:97:a6:af:
d5:6a:5f:a9:2c:b3:63:35:9a:3c:1f:18:14:76:ce:
a2:0e:57:66:2d:41:0a:69:dc:25:d1:ad:d0:79:89:
bd:67:0a:71:56:fd:1d:c4:a8:ed:b7:88:f4:1a:bc:
8a:07:53:83:b4:d4:13:eb:82:0c:1b:ec:6d:a4:2c:
2d:0a:7e:1f:86:a6:a7:df:0b:66:82:77:16:e6:e2:
e7:3b:2a:78:6e:8e:52:36:f3:05:85:ed:67:bd:6f:
ed:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:42:5F:95:0F:AC:51:70:80:E5:18:8E:AA:BE:69:8E:1B:97:AD:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/85b23fe7-16bf-35b9-ae08-09a4ecdde153.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
X509v3 Authority Key Identifier:
keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
sbgp-ipAddrBlock: critical
IPv4:
72.9.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:db:35:12:99:09:9d:96:4e:47:9d:3e:7a:a2:19:25:1f:90:
4a:e3:7e:69:c2:c3:7c:5b:5b:f0:57:84:9f:ce:8b:0f:07:68:
dd:9e:99:71:92:a2:62:cb:6c:83:d8:14:cc:94:2f:99:a6:2e:
43:70:10:31:a7:f6:1d:49:fb:f9:03:05:61:cd:eb:c2:db:75:
ea:ed:78:a9:d6:83:34:32:e4:db:c3:f1:ce:d9:ea:a7:28:1b:
a9:ef:58:25:27:db:b2:2b:51:08:41:d5:0e:53:2b:2d:8c:94:
b5:9d:f0:22:40:7d:d8:ee:fc:42:65:d3:87:0b:5f:22:88:4a:
2c:b4:eb:5c:35:96:d1:fd:c0:b6:c5:10:6c:6c:d9:43:27:32:
98:66:a4:63:bf:45:ff:d8:4d:ed:6b:80:85:6c:a1:04:44:10:
26:14:16:db:8e:9c:40:51:5c:aa:76:40:46:c5:8b:76:f0:e8:
0a:02:6d:73:38:d8:fb:b4:63:73:ce:4e:ef:5e:5d:1e:0a:3c:
dc:25:ad:1c:93:2d:b0:a2:7b:30:92:fb:e7:66:0c:3c:00:c7:
9b:99:23:8e:03:67:60:2b:ae:52:86:c8:7c:e9:a8:e7:15:34:
ef:a2:f1:d3:50:a5:b1:c7:f6:03:e9:05:81:81:ad:bb:41:2f:
26:26:7c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:25:25 2026 by rpki-client