
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4940bb59-1840-3398-aa2f-52b23d3dccf1.roa
File: 4940bb59-1840-3398-aa2f-52b23d3dccf1.roa (raw, json)
Hash identifier: 786y3PwMPMfylLAO+sBXmaYrQsN8j4jy70h41H4Nptc=
Subject key identifier: 8D:55:8D:4D:87:89:E7:AE:B7:2A:EF:01:13:B4:AD:BD:A2:A3:2A:4C
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584E3E5F329DE1619B98AA237D80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4940bb59-1840-3398-aa2f-52b23d3dccf1.roa
Signing time: Sun 21 Jun 2026 09:00:12 +0000
ROA not before: Sun 21 Jun 2026 09:00:12 +0000
ROA not after: Sat 19 Sep 2026 09:00:12 +0000
asID: 30036
IP address blocks: 72.255.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 25 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:3e:5f:32:9d:e1:61:9b:98:aa:23:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jun 21 09:00:12 2026 GMT
Not After : Sep 19 09:00:12 2026 GMT
Subject: CN=bfb061cb-8554-4c56-83cf-2c61fab3b473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8e:22:47:9b:6f:9b:85:97:e2:3f:6a:fc:d9:
03:ea:bd:0c:84:22:67:f9:b9:97:24:ce:f9:bd:7a:
76:b9:cb:e3:64:ee:40:9d:f1:a4:27:35:b8:64:37:
d6:3f:1e:00:d8:c5:ea:90:6a:19:af:8f:5e:c3:c9:
ee:ea:f4:7f:89:09:48:d1:67:42:0e:39:ea:c3:c9:
9d:9f:cf:8a:6e:81:57:f8:01:bf:94:97:b9:bc:be:
20:b2:62:6b:15:8d:cc:ec:81:a2:36:66:45:84:f6:
13:ef:c1:0a:16:91:06:14:f6:99:73:64:55:e7:cc:
44:af:2e:35:f4:77:e7:e3:b2:04:0d:32:67:e4:01:
82:1e:b0:54:3c:a5:d5:21:bd:22:9c:99:5b:2c:85:
50:ee:a1:f9:89:07:12:1f:14:b5:2d:b3:0c:01:5a:
dc:b8:86:22:11:d2:6b:65:72:7c:c5:1c:9a:c3:60:
8a:7b:e9:7e:5f:c9:43:5a:18:e0:14:35:20:ca:e7:
27:ed:1c:5c:81:7b:38:93:f3:05:37:5e:18:f9:97:
57:ce:86:77:46:a5:0b:6c:4e:dd:2b:3d:26:e4:7e:
26:5b:2e:9a:dc:e4:89:0a:dd:13:af:37:a3:46:ef:
16:cd:36:e8:cd:24:be:01:e5:6a:87:5a:59:87:48:
86:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:55:8D:4D:87:89:E7:AE:B7:2A:EF:01:13:B4:AD:BD:A2:A3:2A:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4940bb59-1840-3398-aa2f-52b23d3dccf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
72.255.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:a8:7d:6e:43:c6:b1:b7:86:ef:3c:03:33:0b:33:0a:e1:b1:
52:31:7c:22:54:94:4e:6d:f0:75:b8:f0:47:e7:0d:d7:94:0d:
72:d0:84:e7:6f:af:51:88:c1:26:71:bf:f9:0b:0d:c1:d1:a5:
48:cb:6e:a6:8e:3c:50:0b:d4:b9:aa:dd:2d:12:c9:f0:bb:58:
1d:3e:a7:e9:ac:e6:f4:93:4a:4d:c1:68:6c:23:0b:04:d1:c9:
9a:20:1b:94:d2:1f:d5:49:ae:c5:5c:7d:06:31:19:63:1d:23:
09:16:c8:f8:06:ec:97:de:cb:2e:f4:7b:01:89:b5:44:b4:62:
84:25:f6:8c:0f:72:37:8b:ca:69:bc:55:d3:57:1e:8c:be:7d:
e6:cf:4f:f4:b8:da:d8:e4:72:9d:dc:97:b2:f8:82:3e:8e:cf:
21:7b:b2:22:fb:fc:87:77:23:44:28:50:07:3c:17:bc:4b:83:
6c:f9:d8:97:79:70:ab:6b:a1:47:38:8c:6c:dc:47:bb:3b:b3:
12:8b:74:b9:03:68:65:c0:4b:60:78:c7:78:80:cc:cb:5b:41:
91:52:74:f0:e4:6b:e5:99:bd:29:04:7d:93:ca:b3:86:69:fd:
bb:b7:c1:54:67:68:da:65:36:80:34:7a:49:de:57:91:89:83:
99:aa:9a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:18:14 2026 by rpki-client