
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d2c17948-634e-3078-a17d-f62f56477988.roa
File: d2c17948-634e-3078-a17d-f62f56477988.roa (raw, json)
Hash identifier: PYr8sRIdiFMQAf7yVvULKhrjZitsxgqtviwwDeYcl5Q=
Subject key identifier: F1:42:CD:C4:D4:94:88:49:7F:D6:62:36:38:F6:4A:8A:5F:50:75:56
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C7D7C7405D574E37F793B6280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d2c17948-634e-3078-a17d-f62f56477988.roa
Signing time: Sun 11 Jan 2026 14:00:39 +0000
ROA not before: Sun 11 Jan 2026 14:00:39 +0000
ROA not after: Sat 11 Apr 2026 13:00:39 +0000
asID: 30036
IP address blocks: 72.255.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:7d:7c:74:05:d5:74:e3:7f:79:3b:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 11 14:00:39 2026 GMT
Not After : Apr 11 13:00:39 2026 GMT
Subject: CN=7c480375-7e44-47e8-ab3f-eea62bcd43a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:82:b3:e0:ce:d1:6d:27:ce:f3:3b:9b:62:9d:
e4:9a:59:66:17:07:3f:36:09:9d:cf:c0:93:7e:2d:
96:c0:03:8a:92:53:ed:3e:e0:42:be:1a:ad:72:f1:
cc:2a:81:aa:de:37:9c:bb:36:a9:90:7b:1e:b8:80:
17:de:c4:7f:b0:6e:2c:de:4d:e4:b7:89:0c:8e:df:
df:ca:e2:06:7a:a0:80:72:1c:8a:36:38:e7:36:39:
e6:99:54:de:20:a4:c4:d6:44:f7:9e:2a:c7:41:0d:
99:24:cf:8e:99:6c:08:d2:b4:18:e3:f8:1a:fe:19:
9b:5b:3a:10:83:fd:83:a4:30:ac:bc:95:f4:84:8f:
71:fc:f9:cb:59:12:46:49:9f:80:76:f7:ec:92:4e:
d8:df:4a:0b:7c:97:e7:16:84:5c:e7:a6:15:57:26:
4c:bb:ed:32:e8:ce:99:8c:65:c3:4d:ed:f2:be:e1:
61:92:c3:8b:94:3e:43:2c:ba:d2:29:74:07:10:5c:
47:63:2c:42:ca:6c:3d:3a:76:52:5f:dd:30:41:5f:
9a:d0:5a:a8:7e:e6:d0:84:32:03:c0:62:8b:d5:7b:
eb:74:1c:17:fe:c1:6e:45:46:63:39:b7:32:fd:c6:
2c:75:08:a2:63:b7:c2:e3:5f:85:96:de:9f:51:1c:
ba:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:42:CD:C4:D4:94:88:49:7F:D6:62:36:38:F6:4A:8A:5F:50:75:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d2c17948-634e-3078-a17d-f62f56477988.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
72.255.82.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:30:d5:6e:c7:11:36:a3:41:dc:69:6d:15:b7:89:bb:91:16:
c1:ff:8a:c9:91:cb:50:24:e4:e8:59:bd:af:4a:d1:e2:76:12:
ba:3c:e6:80:ba:8a:b8:85:56:05:5f:72:91:de:c9:7d:17:84:
00:5d:a6:4d:0a:29:e9:6d:c8:18:e6:f9:be:41:7c:cf:09:f6:
07:a2:7d:c7:ef:4c:21:25:69:d4:49:d1:40:8d:51:9a:48:a1:
ae:f7:a2:af:af:d6:ba:c1:26:fa:61:18:ff:ec:58:36:86:41:
ed:30:6f:a7:d0:58:7d:22:30:a1:5e:a1:83:c2:77:6a:b0:5a:
4f:d2:dc:b6:b5:29:82:7f:82:56:b0:12:80:20:69:e3:fa:bd:
31:ac:11:19:c1:d1:f7:48:e7:50:42:da:ce:1c:11:4c:a4:13:
bb:5e:4b:32:f9:20:21:f0:8e:b4:4f:99:a8:d5:2b:00:fa:44:
c4:f9:3a:c1:c3:29:aa:06:60:76:de:b9:c9:f2:b3:58:a9:54:
22:23:f7:e2:fe:e6:d6:21:57:13:08:50:f8:25:6a:ff:85:d2:
6f:b4:08:5b:a6:5f:bc:71:ff:e4:86:1e:7b:9a:eb:bc:52:6b:
d8:00:ed:eb:3c:25:c1:27:f8:b7:8f:01:ea:68:0e:16:0e:95:
63:0e:e6:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fHQF1XTjf3k7YoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk
N2M0ODAzNzUtN2U0NC00N2U4LWFiM2YtZWVhNjJiY2Q0M2ExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+IKz4M7RbSfO8zubYp3kmllmFwc/Ngmdz8CT
fi2WwAOKklPtPuBCvhqtcvHMKoGq3jecuzapkHseuIAX3sR/sG4s3k3kt4kMjt/f
yuIGeqCAchyKNjjnNjnmmVTeIKTE1kT3nirHQQ2ZJM+OmWwI0rQY4/ga/hmbWzoQ
g/2DpDCsvJX0hI9x/PnLWRJGSZ+Advfskk7Y30oLfJfnFoRc56YVVyZMu+0y6M6Z
jGXDTe3yvuFhksOLlD5DLLrSKXQHEFxHYyxCymw9OnZSX90wQV+a0FqofubQhDID
wGKL1XvrdBwX/sFuRUZjObcy/cYsdQiiY7fC41+Flt6fURy6fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPFCzcTUlIhJf9ZiNjj2SopfUHVWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDJjMTc5NDgtNjM0ZS0z
MDc4LWExN2QtZjYyZjU2NDc3OTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAEw1W7HETajQdxpbRW3ibuRFsH/ismRy1Ak5OhZva9K0eJ2Ero85oC6
iriFVgVfcpHeyX0XhABdpk0KKeltyBjm+b5BfM8J9geifcfvTCEladRJ0UCNUZpI
oa73oq+v1rrBJvphGP/sWDaGQe0wb6fQWH0iMKFeoYPCd2qwWk/S3La1KYJ/glaw
EoAgaeP6vTGsERnB0fdI51BC2s4cEUykE7teSzL5ICHwjrRPmajVKwD6RMT5OsHD
KaoGYHbeucnys1ipVCIj9+L+5tYhVxMIUPglav+F0m+0CFumX7xx/+SGHnua67xS
a9gA7es8JcEn+LePAepoDhYOlWMO5jM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:36:07 2026 by rpki-client