
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8da70dce-44c2-365f-99fb-5fab845dc30b.roa
File: 8da70dce-44c2-365f-99fb-5fab845dc30b.roa (raw, json)
Hash identifier: rEevRX+m9A2FfSgbTvgs4sYwGsmfcWnucVGmEa5gE3w=
Subject key identifier: E1:0C:0F:58:9B:83:06:06:53:27:56:55:7F:F4:24:22:97:ED:58:C3
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D5E1A7F7A1481CE2254E86900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8da70dce-44c2-365f-99fb-5fab845dc30b.roa
Signing time: Thu 02 Apr 2026 01:00:23 +0000
ROA not before: Thu 02 Apr 2026 01:00:23 +0000
ROA not after: Wed 01 Jul 2026 01:00:23 +0000
asID: 30036
IP address blocks: 72.255.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5e:1a:7f:7a:14:81:ce:22:54:e8:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Apr 2 01:00:23 2026 GMT
Not After : Jul 1 01:00:23 2026 GMT
Subject: CN=fef1d5d5-013d-49ff-8cc4-ffc39c55a0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e9:3b:21:4b:b3:b0:96:47:2f:b1:e1:db:95:
d1:40:8d:b5:0a:8a:dd:2a:a6:c7:8a:ab:ef:e5:00:
99:c9:ad:7e:81:28:ea:4c:cb:c0:4a:18:77:a7:9f:
8b:9d:6f:ee:df:58:68:9f:01:74:7f:a3:7d:be:7c:
14:58:93:e0:12:59:5d:7a:45:3d:00:68:42:99:91:
eb:86:47:7e:3d:c4:2e:e9:93:03:d7:f5:d2:f8:b4:
47:3f:9e:d8:9a:41:4f:52:99:09:11:c7:db:4d:dd:
d7:4e:41:8e:cd:2d:6f:cc:f7:9c:4f:8c:38:2f:73:
41:06:c7:21:29:ef:95:3d:b7:9a:b2:8c:11:61:fb:
c7:67:92:8d:14:74:9a:b8:f4:96:d8:13:96:8c:7a:
79:eb:20:5d:74:fc:4b:40:3b:d1:99:8b:47:6f:cf:
63:d5:0b:55:0e:b5:82:27:59:66:b6:85:15:05:82:
aa:f9:44:65:b8:f7:ed:75:d1:a1:6c:a9:3b:0e:77:
13:f6:d6:3b:ce:ff:aa:fd:58:c5:57:41:c0:0d:1e:
b7:3a:a0:e9:20:cf:6b:b0:18:98:be:82:7a:9e:17:
76:12:3b:c4:44:39:fa:2c:02:6d:30:d1:27:91:9e:
03:5e:d5:d3:18:60:c8:d9:b3:49:8c:91:7f:a0:f2:
c3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0C:0F:58:9B:83:06:06:53:27:56:55:7F:F4:24:22:97:ED:58:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8da70dce-44c2-365f-99fb-5fab845dc30b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
72.255.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:2c:5f:69:64:d3:65:44:11:49:5d:0a:87:04:4d:05:f3:d9:
26:dd:b5:09:97:b3:82:ab:c8:ff:2f:ec:39:c4:79:df:f6:aa:
fa:75:03:a7:9e:27:60:e0:68:b3:5e:1d:eb:ea:b0:99:3d:9d:
73:96:7f:9c:29:be:71:76:d3:42:4f:d1:34:bc:93:2c:37:2d:
77:86:f6:47:d0:12:e2:74:a3:85:94:d6:f2:ab:9d:41:29:8a:
cf:2a:95:a2:39:55:db:20:41:47:b9:b6:05:fc:99:5f:72:c2:
60:f2:43:17:b8:1b:bf:57:86:61:fb:e2:e6:0d:00:bf:4a:18:
96:03:87:84:9e:01:33:2e:49:b2:c8:9d:06:30:7a:40:1e:05:
67:5b:aa:64:c0:99:0d:b5:e7:24:82:e1:fd:e0:52:a2:76:98:
7b:7b:3f:dc:ef:93:ca:95:5f:a2:34:ff:b2:53:18:a9:1c:ad:
f1:eb:a0:95:1d:02:72:cf:e0:44:cd:8a:a4:6c:d9:86:83:63:
09:42:d6:08:a2:9d:bd:5f:10:d5:9c:b0:56:c5:c6:8c:04:2d:
75:c0:72:25:d6:29:0a:9b:79:e7:18:13:8e:3c:b4:2d:8e:2e:
c6:cf:bb:b7:56:a6:07:74:a3:54:c5:6e:1f:e2:03:52:f0:03:
10:7a:4e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:18:52 2026 by rpki-client