
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6b95c0a0-e9c6-369e-a5a0-471a1c0f6e43.roa
File: 6b95c0a0-e9c6-369e-a5a0-471a1c0f6e43.roa (raw, json)
Hash identifier: 8Ol1H1vz2USd6mFzLF849FTLRIxI2s9e0VXmEogjLVU=
Subject key identifier: 93:21:17:0C:F3:D2:D4:21:09:9C:79:BC:37:91:A5:D3:98:D3:A2:FC
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584EE0C1F781D86D0060C2D41900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6b95c0a0-e9c6-369e-a5a0-471a1c0f6e43.roa
Signing time: Tue 18 Aug 2026 13:00:12 +0000
ROA not before: Tue 18 Aug 2026 13:00:12 +0000
ROA not after: Mon 16 Nov 2026 14:00:12 +0000
asID: 30036
IP address blocks: 72.255.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e0:c1:f7:81:d8:6d:00:60:c2:d4:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Aug 18 13:00:12 2026 GMT
Not After : Nov 16 14:00:12 2026 GMT
Subject: CN=bcebd1d8-7586-4608-9964-811556390605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:1a:86:94:00:8f:1b:cb:c3:e5:6f:2f:e6:
77:ca:ba:95:9e:ce:90:d7:98:87:f8:01:b7:f3:70:
45:fd:90:e9:e1:86:23:81:37:83:38:0e:17:3a:71:
ea:cb:16:97:14:e5:01:54:39:2e:25:47:88:c3:ef:
bb:9e:b4:b3:30:5a:ed:5a:66:f3:ec:8d:f4:c0:df:
06:f4:37:8e:a9:fe:1a:8b:16:aa:d5:61:fc:5a:2c:
08:f2:02:83:5d:2b:47:2e:40:15:1e:fd:5e:27:66:
94:46:2e:d9:4f:02:3b:6f:6b:24:13:da:ff:b1:d5:
26:34:2f:e9:f6:ca:5d:6c:cd:e3:93:33:a6:1b:9a:
c3:19:a3:84:ae:ed:5c:8b:34:3a:6b:60:f3:55:9d:
6f:08:d8:be:d1:a2:12:8f:4c:9b:8d:94:5e:48:ff:
82:39:9c:77:d4:9b:44:14:05:2e:6a:9c:76:4f:a5:
4f:62:97:27:84:b1:ff:b9:5c:fc:54:87:eb:f1:ba:
4c:4b:89:88:48:9a:dd:7b:9c:09:65:dc:4f:80:42:
13:91:94:f4:93:71:ac:ff:9f:e0:f2:b8:8f:b2:72:
e1:85:26:b1:fd:c6:57:4e:f6:37:9b:a5:16:52:23:
33:0a:6c:67:46:8d:47:5d:4f:3a:5b:24:cd:d2:eb:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:21:17:0C:F3:D2:D4:21:09:9C:79:BC:37:91:A5:D3:98:D3:A2:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6b95c0a0-e9c6-369e-a5a0-471a1c0f6e43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
72.255.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:1b:d7:1c:2a:7f:93:98:9d:9c:25:af:92:2f:1c:1c:85:62:
63:64:bc:a0:19:3b:3b:c2:cd:24:79:c2:ec:62:be:20:1a:af:
8e:eb:4f:3e:39:58:7a:9d:cd:36:9e:5f:38:9f:e7:26:08:00:
9a:66:0c:3c:d1:9b:70:ab:5d:77:fb:40:6b:aa:77:57:6e:89:
c4:6b:cd:ab:d6:b8:c1:e4:51:37:b8:ad:36:c4:e5:f5:74:c7:
16:2e:cd:c0:b1:35:45:30:d2:e3:40:29:45:21:aa:da:5e:06:
6f:0a:54:77:33:e8:93:31:db:71:a6:2f:2a:cf:e7:6a:6c:ec:
c1:fe:53:6a:f6:69:3d:18:96:70:9c:f0:e3:24:e0:55:73:2a:
cc:b1:cb:6a:9c:27:ff:65:2a:f3:95:2c:79:db:84:c4:00:03:
66:08:7e:3b:7a:c7:7b:b8:58:32:96:ca:6a:89:c9:ed:7b:3a:
2a:e9:52:0d:93:5a:83:4e:98:83:53:a9:0a:89:74:20:fb:9d:
c9:4e:70:b1:bf:38:32:9b:37:7b:77:f2:5c:48:d9:32:64:f4:
af:e0:d1:ec:29:20:02:39:7d:51:ce:7c:56:6c:b4:8a:70:7c:
db:b5:99:94:32:a0:ab:24:d4:a9:a1:db:e9:84:4c:aa:f5:5b:
af:17:eb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:27:43 2026 by rpki-client