
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f20232c-f8e7-32f9-970a-d6b93baf05e3.roa
File: 5f20232c-f8e7-32f9-970a-d6b93baf05e3.roa (raw, json)
Hash identifier: qZVQp7SLaeNYLK140mcK8Kg/Ib7SLD4+FyxSgt5v8ns=
Subject key identifier: 62:50:84:4E:D4:7C:09:B9:3F:6C:3D:D4:DC:DE:08:C1:F1:5A:FF:64
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D5E1A5ED95E5F84BCDAE2F4C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f20232c-f8e7-32f9-970a-d6b93baf05e3.roa
Signing time: Thu 02 Apr 2026 01:00:23 +0000
ROA not before: Thu 02 Apr 2026 01:00:23 +0000
ROA not after: Wed 01 Jul 2026 01:00:23 +0000
asID: 30036
IP address blocks: 72.255.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5e:1a:5e:d9:5e:5f:84:bc:da:e2:f4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Apr 2 01:00:23 2026 GMT
Not After : Jul 1 01:00:23 2026 GMT
Subject: CN=429bbe8d-714a-4133-bb0b-eab4599cfd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9b:3c:dd:13:36:e6:e4:70:48:e5:b5:93:85:
41:a1:c3:27:14:ad:82:9a:af:1b:cd:16:4c:a3:db:
49:6c:ed:73:a9:dd:c2:18:08:6e:81:52:a3:7c:9f:
12:72:97:4b:1c:1c:9a:f0:ea:e2:6a:9f:24:48:51:
0b:4c:1c:64:85:3c:b6:ce:cf:67:fc:96:c6:ad:16:
99:58:8e:87:a8:0e:75:15:91:21:82:44:33:93:b3:
22:f5:6f:c3:7b:9d:f1:18:d6:c8:87:25:cc:f3:45:
e8:36:b9:3b:ea:48:19:9f:bf:04:94:5c:33:e9:56:
bc:f7:29:6d:fe:03:57:46:b4:88:9f:3c:43:1c:e2:
9e:70:91:2a:52:3f:05:88:ae:8d:d3:49:52:db:7b:
ea:37:40:1d:9a:72:c6:67:ab:f3:2b:78:37:3d:96:
f8:5c:28:e4:0b:4a:f5:50:84:c6:7b:68:96:67:cb:
cd:fd:dd:b7:c1:b0:b1:59:7f:25:5d:16:86:0b:f0:
a0:c1:72:c7:5a:83:0a:05:5e:5f:71:3f:88:7c:ba:
c2:26:6f:98:12:81:7a:6f:a6:a3:e9:bd:e2:b2:be:
95:c4:b6:a7:25:a7:d5:f5:da:22:0f:7e:e4:23:24:
e4:c1:04:c2:87:17:6e:45:96:48:2e:67:93:b1:51:
fd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:50:84:4E:D4:7C:09:B9:3F:6C:3D:D4:DC:DE:08:C1:F1:5A:FF:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f20232c-f8e7-32f9-970a-d6b93baf05e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
72.255.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:6c:19:a7:18:91:36:fd:7f:28:84:4e:6d:1e:1b:de:38:ee:
7f:09:e7:9e:b3:74:41:25:fa:13:85:f5:54:c8:41:0e:5d:f7:
b4:8c:78:0d:d6:6c:ad:ec:17:23:6f:90:5b:7d:13:4d:48:08:
68:b4:87:23:05:da:7b:ff:fd:63:e7:ee:26:58:82:4f:4f:fd:
1a:b4:64:ac:14:c5:33:15:7b:af:1e:ce:47:53:12:e2:91:4e:
3d:82:c2:9f:25:17:c3:3f:21:cc:6b:b4:39:e4:05:de:67:c2:
b6:11:eb:fb:71:9b:df:b1:61:c3:e3:dc:68:f7:97:61:63:98:
73:af:0e:f6:64:9d:e8:ee:1f:ae:50:14:16:19:b3:7d:5a:0a:
e4:89:bf:03:74:ba:75:16:eb:0e:11:62:de:41:96:c4:ea:31:
06:cc:4d:0c:e8:af:54:25:e3:c4:a7:cc:d7:51:d4:44:9f:64:
b8:7c:c9:45:e7:30:50:15:3e:dd:3c:fb:7f:aa:83:fb:77:ab:
c8:fd:c2:2f:80:74:f0:00:4d:6a:fe:df:57:0d:cb:2b:c1:f2:
ce:f8:96:2b:b6:0c:2b:26:5f:41:fc:8a:5e:18:55:ed:02:65:
4e:d2:c8:7d:f9:34:df:eb:e3:48:72:db:90:98:69:4b:84:7d:
06:a7:4e:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGl7ZXl+EvNri9MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
NDI5YmJlOGQtNzE0YS00MTMzLWJiMGItZWFiNDU5OWNmZDJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAips83RM25uRwSOW1k4VBocMnFK2Cmq8bzRZM
o9tJbO1zqd3CGAhugVKjfJ8ScpdLHBya8Oriap8kSFELTBxkhTy2zs9n/JbGrRaZ
WI6HqA51FZEhgkQzk7Mi9W/De53xGNbIhyXM80XoNrk76kgZn78ElFwz6Va89ylt
/gNXRrSInzxDHOKecJEqUj8FiK6N00lS23vqN0AdmnLGZ6vzK3g3PZb4XCjkC0r1
UITGe2iWZ8vN/d23wbCxWX8lXRaGC/CgwXLHWoMKBV5fcT+IfLrCJm+YEoF6b6aj
6b3isr6VxLanJafV9doiD37kIyTkwQTChxduRZZILmeTsVH9GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGJQhE7UfAm5P2w91NzeCMHxWv9kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWYyMDIzMmMtZjhlNy0z
MmY5LTk3MGEtZDZiOTNiYWYwNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIpsGacYkTb9fyiETm0eG9447n8J556zdEEl+hOF9VTIQQ5d97SMeA3W
bK3sFyNvkFt9E01ICGi0hyMF2nv//WPn7iZYgk9P/Rq0ZKwUxTMVe68ezkdTEuKR
Tj2Cwp8lF8M/IcxrtDnkBd5nwrYR6/txm9+xYcPj3Gj3l2FjmHOvDvZknejuH65Q
FBYZs31aCuSJvwN0unUW6w4RYt5BlsTqMQbMTQzor1Ql48SnzNdR1ESfZLh8yUXn
MFAVPt08+3+qg/t3q8j9wi+AdPAATWr+31cNyyvB8s74liu2DCsmX0H8il4YVe0C
ZU7SyH35NN/r40hy25CYaUuEfQanTi0=
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:08:31 2026 by rpki-client