
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e45d3597-4509-3627-83c2-be5c2767a89d.roa
File: e45d3597-4509-3627-83c2-be5c2767a89d.roa (raw, json)
Hash identifier: Zmbe5jP/0P5dPsY7ex1kbHbt+59521+lpTlWSGUiEcg=
Subject key identifier: FC:C3:C7:23:2E:23:85:81:40:DA:05:DD:21:BF:65:3A:F2:AE:CB:66
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C7D7C7A5E7EC5BA4B75F06A00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e45d3597-4509-3627-83c2-be5c2767a89d.roa
Signing time: Sun 11 Jan 2026 14:00:39 +0000
ROA not before: Sun 11 Jan 2026 14:00:39 +0000
ROA not after: Sat 11 Apr 2026 13:00:39 +0000
asID: 30036
IP address blocks: 72.255.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:7d:7c:7a:5e:7e:c5:ba:4b:75:f0:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 11 14:00:39 2026 GMT
Not After : Apr 11 13:00:39 2026 GMT
Subject: CN=ed38460f-15e8-4fab-a00c-8193c0a01411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:d8:d2:f6:0a:12:bb:b4:c5:7f:54:b5:b4:
16:27:ea:31:77:7c:66:f6:5b:f9:22:a6:b7:ec:c7:
a0:35:09:ce:f4:60:65:2b:eb:9a:d2:61:a0:d5:b5:
34:f0:d7:a0:55:e1:01:19:81:2c:33:4d:6a:62:db:
b0:ae:b4:ab:37:54:00:b5:77:8f:13:45:73:e1:78:
7e:68:8e:55:06:13:31:00:5f:b6:93:2b:20:26:f8:
1c:b9:cd:c5:ea:74:c3:b6:82:0c:8c:07:61:5d:bb:
f4:de:f3:06:57:dd:fa:1b:be:88:5f:56:25:d1:c3:
8e:2f:18:87:98:d8:e6:66:b5:6e:70:b8:f4:da:b4:
40:67:84:c8:8a:fb:69:a2:c0:ae:a1:bb:8e:34:f0:
5a:17:27:d8:3c:7d:5c:a7:a5:02:74:62:6a:22:99:
02:c6:a0:23:9a:1a:36:b7:a2:da:c6:ca:7d:d3:45:
43:99:b7:a8:7c:05:fc:a2:0e:42:31:de:a1:6c:a4:
fd:bd:48:c3:86:e0:bd:af:56:a3:f5:3b:5b:fd:11:
d1:a5:03:00:5e:8e:63:c1:3b:c5:b0:bd:f5:6a:f5:
68:31:d0:86:a4:91:94:11:e0:03:2e:b6:a5:b3:bc:
9e:7c:a8:6f:8a:ba:a9:58:a2:d8:26:b6:03:d7:d1:
f9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C3:C7:23:2E:23:85:81:40:DA:05:DD:21:BF:65:3A:F2:AE:CB:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e45d3597-4509-3627-83c2-be5c2767a89d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
72.255.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:b9:48:93:31:3c:bd:6b:53:00:7d:88:b5:24:43:2e:1e:a5:
18:94:85:ce:31:3b:2f:95:88:eb:6c:21:40:ea:27:8d:b3:bb:
ed:3b:e2:d5:4e:5c:6b:66:47:c7:e8:99:e6:fd:1b:ea:bc:6b:
81:5d:eb:f7:27:e8:7c:54:e9:60:06:d4:22:35:2f:fe:64:96:
66:80:45:42:e6:58:d1:d3:f5:e5:6f:64:be:c1:b0:22:51:1f:
9c:72:da:97:66:9e:a7:62:c1:59:fa:6f:b4:a3:ad:41:f1:75:
4f:57:50:ba:95:58:bd:4d:76:9f:3b:72:d7:31:e8:cd:ab:29:
2c:0c:c0:bc:a6:ed:dd:85:cf:9f:33:7a:de:73:7f:78:8b:29:
b0:c0:9d:b7:48:fe:a0:6d:14:d9:47:87:17:c6:ba:f7:f0:0f:
37:34:f9:8f:7d:46:d4:9f:c6:20:93:b3:05:f8:52:6c:2d:8e:
f3:c5:2b:12:6c:23:87:a3:5f:0a:07:2a:dc:51:49:19:f2:b4:
0b:34:ee:8f:bd:91:04:c0:de:bd:57:b3:ed:5e:5e:2c:60:c2:
0b:40:aa:2c:13:e2:9c:3e:f6:53:58:9e:7d:f6:ef:95:51:fe:
8a:ae:42:2b:43:d7:31:52:8d:f2:24:1a:00:ca:90:38:d4:f1:
49:c1:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:47:45 2026 by rpki-client