
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/472b70ca-8494-329f-a42f-7ea87cf120ac.roa
File: 472b70ca-8494-329f-a42f-7ea87cf120ac.roa (raw, json)
Hash identifier: 3Yl6nux4UFIYD0yhRAML73dkITB5CJE7XbYDvRakXw0=
Subject key identifier: 22:5B:13:0F:F5:CC:78:1C:C7:8B:AD:87:76:83:27:6D:7F:D2:21:44
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D60E4EE9CDDD9A1FA808F2980
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/472b70ca-8494-329f-a42f-7ea87cf120ac.roa
Signing time: Fri 03 Apr 2026 01:00:24 +0000
ROA not before: Fri 03 Apr 2026 01:00:24 +0000
ROA not after: Thu 02 Jul 2026 01:00:24 +0000
asID: 30036
IP address blocks: 192.119.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:60:e4:ee:9c:dd:d9:a1:fa:80:8f:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Apr 3 01:00:24 2026 GMT
Not After : Jul 2 01:00:24 2026 GMT
Subject: CN=6cb3d35f-9e34-4f86-97b2-98f56ed446d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:fb:d1:bd:04:d4:e5:6a:a4:06:51:7a:90:
3d:19:01:7e:c1:bf:8e:c8:dd:f1:58:b3:c7:a2:50:
0e:76:1b:bd:27:db:7a:fd:f9:30:d2:54:3f:9e:94:
0d:17:a0:7f:63:64:08:a0:db:d2:d2:db:0d:8f:7b:
8c:73:26:17:66:7a:f5:3a:dc:bf:40:7a:20:80:e7:
77:41:0a:28:e5:c7:0c:57:59:21:b1:e4:ef:56:ba:
b2:fb:51:ae:6f:6a:93:87:e5:6b:9c:28:1b:fd:92:
23:8a:ea:58:85:39:bf:29:53:31:d4:de:c1:0a:a1:
95:a0:e6:03:a5:be:8c:d4:31:33:d4:e0:b5:f3:c1:
73:ff:27:19:cb:f6:9e:62:c1:a8:c9:c6:17:e5:b3:
6b:c1:1c:57:3b:52:7e:65:21:86:a7:3a:3a:5e:63:
2a:07:66:41:03:f7:5e:0d:86:7b:e1:ca:03:45:bc:
09:6a:e5:9d:76:d4:92:5f:4e:7d:4f:ac:42:ff:2a:
ae:73:34:22:2d:d8:bb:d8:fa:79:23:56:17:f3:45:
4a:01:1f:e7:f6:22:67:6b:a4:c9:c5:7e:ac:6c:92:
24:34:6a:ea:db:84:03:7d:60:08:9b:ab:b9:5b:b7:
24:b6:f2:50:c8:91:38:75:65:7f:04:af:e1:0c:03:
cb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5B:13:0F:F5:CC:78:1C:C7:8B:AD:87:76:83:27:6D:7F:D2:21:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/472b70ca-8494-329f-a42f-7ea87cf120ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
192.119.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:29:17:d0:38:35:c7:72:8e:5c:fa:07:45:9b:e2:57:1f:13:
72:22:55:76:76:00:e5:6f:e5:e4:6e:33:67:01:82:5d:11:ba:
e8:39:f3:23:8c:ed:34:70:69:13:38:ea:d5:44:b0:e8:fa:f3:
84:82:e7:ce:fa:e7:07:26:91:fa:49:8b:86:ad:ac:53:7f:60:
97:38:23:43:5e:cf:4c:fe:f5:30:31:22:84:52:70:0d:9f:5d:
9b:07:9b:c0:00:63:70:d6:78:d2:5f:37:ce:1d:67:96:cf:38:
46:fd:28:4b:fd:b6:c0:58:2d:4a:51:55:f6:08:15:22:3a:51:
79:31:e0:da:d8:3d:bd:79:0f:18:ec:1b:65:2e:63:93:61:b2:
3a:23:f0:5e:cc:74:d3:46:98:47:0f:9e:25:ff:ef:15:b5:fe:
a4:0d:95:ea:6e:d8:bf:03:53:88:77:1c:03:3f:b2:7d:ff:c7:
06:db:f2:c9:58:ea:9b:2b:ca:f4:c7:12:a7:f7:3c:e5:8a:f3:
65:7b:df:2c:8c:d2:3e:7a:bc:4a:3b:e6:69:9b:4d:d4:47:8b:
a2:ad:45:6e:d0:44:41:06:38:36:7c:e5:e2:1e:ef:50:2a:62:
d7:fa:6d:3a:0e:53:73:a1:42:27:17:de:92:c2:c1:66:e6:08:
fa:79:a1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:38 2026 by rpki-client