
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c949233-30ae-39e5-81c2-6eb04c02cb9e.roa
File: 5c949233-30ae-39e5-81c2-6eb04c02cb9e.roa (raw, json)
Hash identifier: 1SqoNZHEmP70jp3npqUQgNW15hxwDbgUIOosqLTqVNw=
Subject key identifier: 12:A2:6B:FF:DC:20:08:2E:68:D6:A3:0A:AF:96:1F:0C:54:A6:21:07
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C8046F525C664910D93B8DC80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c949233-30ae-39e5-81c2-6eb04c02cb9e.roa
Signing time: Mon 12 Jan 2026 14:00:40 +0000
ROA not before: Mon 12 Jan 2026 14:00:40 +0000
ROA not after: Sun 12 Apr 2026 13:00:40 +0000
asID: 30036
IP address blocks: 192.119.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:80:46:f5:25:c6:64:91:0d:93:b8:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 12 14:00:40 2026 GMT
Not After : Apr 12 13:00:40 2026 GMT
Subject: CN=72a3778d-bac8-44ff-bfd2-e2fbce157426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:21:c8:c0:90:e4:17:0f:95:c2:f8:1c:54:23:
e5:0a:da:d6:e7:f2:31:38:6d:4c:d1:81:77:4f:08:
cd:53:6f:28:c0:f7:5b:88:39:a1:67:2e:54:75:f5:
3b:b8:1f:3c:ce:c2:8c:23:3e:06:cb:33:8a:4f:ef:
d3:7c:56:7f:06:08:cc:5b:82:e6:5e:e1:0f:de:60:
2d:35:18:07:b9:d1:2f:3e:8a:f3:43:6e:55:48:8e:
c6:22:f7:4c:37:31:1b:a7:fb:41:a9:97:76:19:f8:
7b:6c:08:ba:d1:ce:48:d6:c6:5d:6a:27:7a:56:4e:
53:d2:bc:de:a1:45:76:14:37:02:05:4d:03:e9:2d:
5c:c2:a8:5c:48:db:56:14:68:de:c5:77:05:22:ba:
7c:9b:95:16:95:a3:43:21:1a:b4:04:a1:f7:87:4d:
67:7b:0f:df:cb:cc:0b:4d:74:16:db:f5:a5:e9:8c:
77:21:19:55:77:f6:a4:a1:fe:b8:23:00:96:4c:93:
19:e3:c1:3e:92:79:0d:bd:3b:32:58:ad:dc:23:da:
0a:e9:1f:fc:42:d4:95:9b:04:2c:4c:90:33:fb:e5:
b5:fa:49:49:ad:b8:62:63:ae:06:f7:1e:36:2f:03:
ae:21:04:b6:88:e6:8f:e7:f7:59:f6:98:65:be:d1:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A2:6B:FF:DC:20:08:2E:68:D6:A3:0A:AF:96:1F:0C:54:A6:21:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c949233-30ae-39e5-81c2-6eb04c02cb9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
192.119.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:24:ff:e8:c0:f9:0f:45:ff:d2:01:5e:56:ed:fe:6f:40:47:
39:61:12:47:9a:77:4a:63:e4:4d:03:f9:34:91:04:5d:45:a6:
cb:71:46:04:c1:13:bb:b7:e5:b0:ba:8a:59:e6:8c:29:3b:bd:
3e:9a:37:90:d8:06:51:cc:ac:39:2a:62:6e:40:18:f2:db:4e:
5d:9d:4c:2c:77:75:a9:5c:2a:d0:ce:77:a6:f0:fb:0d:59:c3:
c6:69:cf:a6:ce:1a:9d:31:d9:8d:73:fc:39:32:6d:4b:84:8b:
be:8d:6b:63:30:04:07:53:e4:9d:94:c8:f4:95:ea:8c:cd:97:
d2:a3:d5:76:b0:ee:b0:57:2e:25:b1:5e:53:f6:89:0d:ed:30:
76:75:39:35:23:3c:9e:f3:99:76:e1:c7:a2:e2:47:02:2e:7c:
78:6c:dd:ff:1a:15:e8:2f:25:8d:fd:7f:db:6a:0a:97:b5:ee:
ae:35:60:09:44:94:73:06:22:4b:e1:1b:a1:95:89:19:f6:f5:
33:56:59:19:aa:4b:0b:01:24:54:71:90:1d:67:43:8d:72:49:
2f:1a:c3:d5:a5:10:cb:43:d6:b9:76:ce:25:77:73:c1:6b:50:
3d:be:73:a3:93:59:d5:cc:18:5f:77:ba:6a:d2:31:4f:d1:00:
9a:bb:ea:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:50 2026 by rpki-client