
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9dc4afb8-f938-366d-aba9-5fe4d042c177.roa
File: 9dc4afb8-f938-366d-aba9-5fe4d042c177.roa (raw, json)
Hash identifier: 4wc4iICyTuoFvDJxDSw6xBMEoNti0jaFCOrrUBIp74g=
Subject key identifier: 9F:A6:F9:80:9C:60:1E:48:09:2E:0E:42:91:24:AA:9C:78:2D:D1:8B
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584EE0C1E1CE5BE0361764910440
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9dc4afb8-f938-366d-aba9-5fe4d042c177.roa
Signing time: Tue 18 Aug 2026 13:00:12 +0000
ROA not before: Tue 18 Aug 2026 13:00:12 +0000
ROA not after: Mon 16 Nov 2026 14:00:12 +0000
asID: 30036
IP address blocks: 72.255.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e0:c1:e1:ce:5b:e0:36:17:64:91:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Aug 18 13:00:12 2026 GMT
Not After : Nov 16 14:00:12 2026 GMT
Subject: CN=9aa0b20c-ce42-4656-a08c-8149061affca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:72:e2:c0:5e:dc:79:45:8f:ca:7f:00:a0:
50:55:50:23:ce:5a:bd:92:e8:06:4c:88:1b:09:03:
ab:c4:7a:42:bb:ca:af:8f:e1:e6:eb:69:ab:25:59:
22:e9:e1:7f:cb:0d:f3:a3:61:f0:5a:b5:55:6e:f7:
80:a0:a4:86:b9:17:d7:d6:1a:14:d3:70:b1:c6:2a:
8b:8c:4f:f3:9c:81:7e:4a:f5:98:b8:1e:de:d0:15:
9e:b2:a2:67:9e:46:70:88:a6:10:04:7b:5b:a3:fa:
70:42:91:0c:7f:d1:20:42:33:ad:04:ef:1c:c9:6a:
dd:33:8f:cf:4b:10:8a:33:ac:ef:fc:1c:dc:02:64:
b9:49:c6:97:3d:28:31:95:79:f3:04:07:f1:75:1a:
5d:6a:e4:d1:9e:e3:1d:06:34:3b:99:ef:45:19:60:
de:53:49:08:31:ec:01:8a:b6:43:6d:38:b6:d4:45:
5a:85:74:50:4b:4d:64:4c:02:4c:83:00:f4:55:69:
69:83:85:1d:28:5f:8a:4c:e4:e8:7d:ba:10:28:91:
7e:4e:77:b2:03:2d:8d:65:a5:5e:1f:eb:b4:22:65:
35:b9:26:7f:a1:bc:60:85:06:02:a8:ca:f5:58:ef:
48:4a:77:79:c9:3e:1d:e5:89:a4:01:fa:6c:62:64:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A6:F9:80:9C:60:1E:48:09:2E:0E:42:91:24:AA:9C:78:2D:D1:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9dc4afb8-f938-366d-aba9-5fe4d042c177.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
72.255.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:7d:d4:07:24:c6:70:10:55:c4:7f:c1:43:08:91:6a:93:1d:
8d:1e:f2:4e:ec:43:8e:5b:e8:ae:b8:52:ec:49:ff:7f:98:96:
c0:b6:88:55:d9:47:8d:78:18:a3:89:7c:42:ad:a7:ba:0a:58:
20:b4:14:fe:4c:e8:65:19:50:36:80:f5:57:09:b4:c6:9e:51:
76:e3:a3:7b:42:74:3a:77:75:0d:c9:22:b6:82:6e:51:7a:10:
60:7b:8b:b4:74:be:79:0c:58:94:98:4a:f0:58:4a:d9:83:d1:
7f:6f:23:6c:45:0d:b4:79:4d:2f:a4:97:7e:a5:80:de:8e:ba:
fd:31:b6:ca:60:da:c6:11:82:4d:5b:4e:75:bd:2d:73:32:c7:
5f:bf:74:6e:7f:d0:32:b3:64:22:60:c7:f7:78:26:98:66:f1:
c6:03:d1:9c:2d:c4:2d:2f:a9:3d:b2:a5:42:4b:46:90:02:86:
91:1a:95:cf:e9:cf:5a:3b:19:5c:e3:4b:ad:ae:2d:cd:81:2c:
19:9d:a8:74:f2:ce:b5:58:9a:c6:da:37:9f:f3:90:e1:37:8a:
ef:6d:0b:ca:91:45:25:6b:ab:0b:0d:b3:c2:b0:8b:ff:00:a8:
e8:21:9d:46:be:b2:e3:41:3b:fc:b2:c1:10:fc:4d:ef:d5:63:
4b:3a:23:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:46:49 2026 by rpki-client