
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b70f42e6-c660-3f95-a2e5-3707bb43c217.roa
File: b70f42e6-c660-3f95-a2e5-3707bb43c217.roa (raw, json)
Hash identifier: PVA6jIQTtEAqTAa3MVY3X+V8hFax2qXeNHgPH7W+iFU=
Subject key identifier: FF:C1:0D:A0:FF:D0:FD:E8:9E:5C:26:08:62:BC:81:17:45:BA:15:DB
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C7D7C79733BCDD486BD311A00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b70f42e6-c660-3f95-a2e5-3707bb43c217.roa
Signing time: Sun 11 Jan 2026 14:00:39 +0000
ROA not before: Sun 11 Jan 2026 14:00:39 +0000
ROA not after: Sat 11 Apr 2026 13:00:39 +0000
asID: 30036
IP address blocks: 72.255.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:7d:7c:79:73:3b:cd:d4:86:bd:31:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 11 14:00:39 2026 GMT
Not After : Apr 11 13:00:39 2026 GMT
Subject: CN=94877012-72c4-4e94-884e-518f4f09efff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:24:ad:92:15:5e:86:68:e4:63:b4:04:bd:4e:
ef:07:05:58:c8:74:04:29:e3:c1:73:eb:58:38:99:
c3:b8:e8:5b:c5:1d:fc:0f:54:5b:5e:97:e4:fa:8a:
90:69:9a:bf:cc:f1:61:ab:63:7f:b5:2e:5a:46:9f:
ba:14:49:d9:07:fd:a1:70:99:c1:8b:60:88:7c:82:
54:1e:71:b3:43:5e:35:f7:f6:6b:42:50:7e:9a:41:
5a:27:37:2f:06:f1:bc:e2:32:f7:00:22:ce:e3:70:
e8:12:30:5e:a2:ce:eb:4c:45:17:a7:29:0f:34:cc:
4f:3d:9e:3c:d6:68:fe:3a:f4:c2:03:0f:e9:4a:0d:
a3:55:7b:2b:31:e3:78:8a:63:da:30:fe:81:64:4c:
7b:d0:cb:0b:5b:5a:9f:19:ff:3b:54:e3:ec:44:9c:
d6:e5:6e:4d:09:c5:28:c4:53:59:20:7a:5f:d5:18:
23:86:ba:d6:38:fd:89:60:ad:93:aa:b9:7f:e9:cb:
b3:d3:7f:08:81:31:94:61:b1:1b:dd:da:f6:ed:77:
43:21:a6:73:71:75:63:a9:c7:50:03:a9:20:e1:06:
fc:ec:0f:c9:20:84:5f:47:f7:70:70:76:bf:5d:93:
b3:d9:91:58:42:ad:f1:c3:81:50:49:8d:53:95:81:
73:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C1:0D:A0:FF:D0:FD:E8:9E:5C:26:08:62:BC:81:17:45:BA:15:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b70f42e6-c660-3f95-a2e5-3707bb43c217.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
72.255.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:ee:79:b6:0a:33:14:70:c9:67:bf:10:40:3a:ac:f7:b4:31:
55:2e:5d:70:ac:fc:1b:d7:56:85:95:51:86:4e:3a:0b:51:27:
2c:52:69:e9:9a:7c:fd:13:4f:81:24:b8:c1:94:78:24:8e:3c:
47:70:74:14:5a:e0:53:21:36:7d:5f:86:95:6c:b6:c4:55:46:
e2:0c:f9:76:49:2c:52:05:5b:9a:af:93:fb:d7:94:25:b8:02:
4b:e5:b1:ab:b9:60:93:99:37:f6:dc:ee:df:e2:c3:23:4d:b4:
4f:18:73:7a:c7:6f:33:f9:cc:c8:db:aa:ce:cd:bf:0c:96:a0:
bd:7a:95:c9:56:a0:df:3f:ea:ef:83:b9:3d:c6:4e:a7:c8:32:
f5:d0:4d:0c:55:f9:da:1d:6d:0d:b2:d5:1d:19:9e:6e:d1:82:
a1:6a:ea:53:a8:d2:dd:13:2e:89:c1:35:a4:52:c3:a4:cf:a0:
d2:80:52:21:1b:ae:fc:bd:41:aa:f0:dc:29:01:6e:a5:8b:75:
f1:bd:77:bb:d3:7c:c9:33:ac:e9:2c:e4:c7:34:de:70:98:cc:
7f:93:90:25:c2:5f:0e:bc:7a:31:5b:87:8c:cb:84:15:3e:28:
07:ed:2c:d7:a7:e0:26:2b:49:de:99:a2:5d:8a:08:5c:e8:80:
3a:8b:67:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:57:02 2026 by rpki-client