
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/cc2278b1-dbd0-3082-93dd-866a89cb3225.roa
File: cc2278b1-dbd0-3082-93dd-866a89cb3225.roa (raw, json)
Hash identifier: C2ZLo3MGi4I2cFCasP1tygPtOIGkGZB7Y/D0LuN5ErI=
Subject key identifier: A4:04:30:BC:EE:11:F6:56:21:F3:22:CE:D2:EB:0F:B8:3F:C0:11:CB
Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial: 010D0C9F4328584D07ACEB31E82A998DF1735A20
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/cc2278b1-dbd0-3082-93dd-866a89cb3225.roa
Signing time: Mon 02 Mar 2026 02:00:31 +0000
ROA not before: Mon 02 Mar 2026 02:00:31 +0000
ROA not after: Sun 31 May 2026 01:00:31 +0000
asID: 401838
IP address blocks: 172.111.58.0/24 maxlen: 24
172.111.59.0/24 maxlen: 24
209.142.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:07:ac:eb:31:e8:2a:99:8d:f1:73:5a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Validity
Not Before: Mar 2 02:00:31 2026 GMT
Not After : May 31 01:00:31 2026 GMT
Subject: CN=eef01820-fc9c-493d-8141-acebddc753b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:49:2e:83:0b:ee:74:0b:09:9a:71:08:b3:1f:
51:2b:60:cf:b7:59:72:08:d5:bd:85:85:71:ef:e4:
1d:e9:a8:f3:54:11:ed:6e:1a:dc:dc:bd:e1:9b:6f:
01:49:18:72:6d:5e:85:e5:0a:94:31:7a:f8:4c:60:
f0:7d:1e:77:dc:f4:d0:76:6f:de:61:3a:7e:04:bd:
03:9b:6e:85:4c:cc:fe:9e:d8:0f:ff:1e:55:9d:77:
64:ac:7a:ce:75:93:6d:75:60:11:8c:53:7c:76:fd:
c9:90:7c:a7:7a:de:c0:50:1e:47:e5:e8:e9:91:89:
61:5f:25:67:4f:57:74:ba:fd:63:75:f1:0a:db:55:
cf:e8:a2:ab:f2:7a:bf:0f:f1:ab:61:69:f5:dd:bb:
16:4f:21:90:b0:64:ae:87:ba:18:aa:0e:8e:51:93:
dd:75:89:64:f7:a0:58:41:f3:1c:59:6e:b1:8e:cb:
e0:ca:f9:90:4e:a4:4b:11:94:d2:36:4c:00:19:c0:
94:dd:29:79:5d:5e:e4:1e:15:f8:f4:b1:c3:d0:4c:
58:50:e2:37:6a:c7:38:91:12:d8:ae:63:38:e6:1c:
0c:bb:b3:27:60:f1:50:c1:9b:cc:f7:64:52:d7:c8:
38:c8:f5:e5:b3:c6:d0:ca:a1:61:7a:fb:4a:25:29:
c3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:04:30:BC:EE:11:F6:56:21:F3:22:CE:D2:EB:0F:B8:3F:C0:11:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/cc2278b1-dbd0-3082-93dd-866a89cb3225.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
X509v3 Authority Key Identifier:
keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.58.0/23
209.142.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:88:8c:c4:8e:b2:d8:12:a9:0d:2e:b8:ad:69:05:88:a3:4b:
ea:c3:56:e2:f4:ba:ae:4e:95:e5:75:9b:63:8b:0a:f2:a3:27:
f3:c4:58:94:f3:29:47:7a:2b:9d:e3:b0:1b:e6:ad:98:7b:90:
31:8a:5c:25:74:b6:6e:65:43:50:23:20:b4:48:6a:55:06:ac:
8c:05:8e:eb:96:ef:ca:34:43:19:6d:3c:ab:a5:8e:03:ec:6f:
58:da:b1:d7:a7:a1:9e:c3:6e:8e:c7:d9:39:16:d8:79:eb:32:
c7:31:86:01:47:5f:02:9e:3e:46:8a:f5:62:32:e6:6a:76:03:
dc:90:eb:c9:61:06:22:11:29:50:95:27:25:51:5c:5a:22:27:
88:86:e9:52:6f:4a:94:53:b8:82:f7:36:d8:f9:40:73:db:97:
59:fd:26:f7:42:c0:37:4a:4f:27:98:68:61:cf:be:d6:6e:8c:
c7:a6:eb:ae:11:82:21:35:43:19:99:0e:8b:4c:aa:29:50:cd:
d4:32:aa:84:8a:45:45:ea:61:60:0f:c7:e6:11:83:d8:51:68:
6b:b6:fa:af:7a:a1:5a:c0:92:7a:50:09:60:60:b2:54:0e:90:
f0:ad:20:1f:cc:3f:90:31:4b:9e:83:3e:cd:67:32:76:dc:37:
c7:99:5c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:45 2026 by rpki-client