
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4940bb59-1840-3398-aa2f-52b23d3dccf1.roa
File: 4940bb59-1840-3398-aa2f-52b23d3dccf1.roa (raw, json)
Hash identifier: 22uwvsbHeAKdE9Nk0FKPKPO1000CS+bLOE1ZodwAY5M=
Subject key identifier: B0:48:68:09:0F:0E:78:8C:6D:A0:7C:FD:D1:63:2D:B5:92:AA:D0:80
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C7D7C5318212C47F19E2F8C40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4940bb59-1840-3398-aa2f-52b23d3dccf1.roa
Signing time: Sun 11 Jan 2026 14:00:39 +0000
ROA not before: Sun 11 Jan 2026 14:00:39 +0000
ROA not after: Sat 11 Apr 2026 13:00:39 +0000
asID: 30036
IP address blocks: 72.255.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:7d:7c:53:18:21:2c:47:f1:9e:2f:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 11 14:00:39 2026 GMT
Not After : Apr 11 13:00:39 2026 GMT
Subject: CN=92869098-3a77-4d2a-a5bd-b37070dcf486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:27:23:9f:57:1e:0b:97:ac:5b:d7:ea:16:c2:
5b:de:63:e8:73:2a:76:1a:06:1a:f8:b0:73:f4:9f:
7c:11:8a:21:7a:0b:2f:5b:0e:20:49:13:29:47:13:
b6:ee:f5:62:b0:b5:af:57:52:70:1c:2e:80:fe:30:
61:c6:39:d7:8b:3e:7d:e8:88:4d:e9:c0:49:cd:dc:
66:c7:ed:5e:bb:f3:01:a8:d2:1d:95:d9:e8:8e:67:
96:1e:72:42:b1:f3:25:85:b0:c1:4c:79:11:9c:61:
53:1b:ff:e7:ff:e0:3c:0e:cd:81:dd:75:5c:6f:87:
1b:16:3a:d4:6e:06:02:38:03:15:e0:fd:88:aa:61:
3f:58:74:a5:af:a3:e0:0b:3b:5e:d0:94:e8:00:a1:
d3:df:2d:31:14:c3:8f:3f:de:fb:49:62:42:3a:c6:
45:36:35:21:96:91:62:83:81:d5:e4:63:74:1b:3b:
13:d6:86:38:bc:98:95:0e:18:58:75:98:9f:c1:ed:
f6:b3:c3:a7:fc:b8:b4:fb:06:98:60:24:12:e9:77:
4b:b2:c7:dc:ef:57:9b:42:d9:9e:3f:11:76:6c:6e:
7d:de:87:0d:b3:1b:81:f8:09:38:4d:46:c1:19:60:
08:55:6f:d4:79:85:63:79:f3:8b:f3:eb:7a:69:5c:
d2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:48:68:09:0F:0E:78:8C:6D:A0:7C:FD:D1:63:2D:B5:92:AA:D0:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4940bb59-1840-3398-aa2f-52b23d3dccf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
72.255.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:f6:13:af:41:3c:f7:17:fb:cf:18:00:59:cf:7a:8d:d0:64:
49:eb:53:c1:9b:c0:c5:63:76:ef:2b:ea:5b:68:0a:4a:66:67:
8e:ee:d1:63:04:8d:67:36:d1:28:f5:99:c6:43:37:53:fb:30:
82:7d:c9:40:94:90:8f:07:cb:b8:99:c5:ca:33:4d:18:10:b5:
12:d5:b1:73:97:f7:2c:4d:2b:be:45:43:f6:9a:2f:f0:56:a4:
fe:d6:91:ec:73:57:98:e2:e2:e1:80:1f:7b:24:4c:f9:e6:46:
a4:a9:52:4f:26:9e:f4:7b:fa:d5:16:0f:8c:13:e9:7e:d7:8b:
25:12:eb:96:89:22:b7:ff:a7:57:5d:38:9b:9c:18:ca:4d:01:
f3:98:1b:c6:b0:98:de:23:31:ff:fe:b8:ae:e3:01:68:94:5c:
a0:92:3f:31:7b:35:cd:76:1e:e7:13:aa:65:13:b2:d0:2e:a3:
cc:c4:10:5e:1b:f2:a5:88:62:14:8a:37:a7:13:77:7b:87:8b:
31:3b:4b:d1:b6:2c:3a:2c:f6:40:87:ae:6c:f9:a2:81:73:f4:
f4:5f:33:c8:e3:cd:f3:74:cd:cc:43:02:6c:92:f8:e5:71:f6:
b8:29:70:e2:b1:5d:79:06:e7:1b:5a:15:8c:fa:29:1f:29:ed:
d1:49:13:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:06 2026 by rpki-client