
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c4d953b3-7c7f-365a-8946-e94b12d360e2.roa
File: c4d953b3-7c7f-365a-8946-e94b12d360e2.roa (raw, json)
Hash identifier: YMF/15WeXcFI/LgU8RXUQYsm4eGq8/LbZ5YHi9Z1uys=
Subject key identifier: 13:B9:4D:6C:AC:50:BC:B9:AD:5D:5C:87:D4:08:87:0D:C3:FB:74:6D
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F4328584D492A7164B4370862523FFCA0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c4d953b3-7c7f-365a-8946-e94b12d360e2.roa
Signing time: Wed 25 Mar 2026 13:00:41 +0000
ROA not before: Wed 25 Mar 2026 13:00:41 +0000
ROA not after: Tue 23 Jun 2026 13:00:41 +0000
asID: 1239
IP address blocks: 72.14.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:49:2a:71:64:b4:37:08:62:52:3f:fc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Mar 25 13:00:41 2026 GMT
Not After : Jun 23 13:00:41 2026 GMT
Subject: CN=aa88937f-9d0b-413c-9ff2-0b906515a10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:eb:88:15:f4:7c:17:c1:e6:a2:7f:ce:33:
eb:01:0c:73:00:5e:e8:e1:8e:88:6b:d7:08:21:0c:
82:df:e4:ba:3a:3b:c7:76:26:42:aa:56:cb:8d:f5:
49:51:68:92:b1:38:2e:f2:8f:6d:99:e4:62:41:de:
d3:37:cc:a2:67:1c:55:49:2f:05:e8:71:ed:0c:17:
4a:a1:9c:62:b0:90:66:b7:bf:31:af:a1:91:fa:94:
b6:ee:7a:69:01:0e:1a:29:44:9e:7a:ac:ee:ff:b4:
3b:7b:0a:b4:7d:c1:e1:af:b8:45:e4:57:36:6d:6f:
84:cc:6a:01:08:e0:70:6a:ff:72:0a:6d:34:0f:89:
df:bd:64:e6:58:7c:14:9a:fd:25:32:54:b8:aa:7b:
e7:90:8c:10:a7:c9:31:37:7f:3d:47:db:37:7b:a8:
0c:e0:96:b0:3d:05:4a:29:5c:ad:4d:c1:f6:8e:ec:
31:c8:97:2e:2e:da:ff:c4:a0:3a:76:f2:ac:cb:f3:
31:92:c4:8f:b1:06:92:19:e2:1c:95:4d:a3:a4:08:
1f:42:9a:cf:0a:c2:ba:b6:18:06:f3:cb:29:7f:c6:
4f:fc:aa:84:16:b8:19:8e:59:fc:35:c5:e2:28:24:
77:f6:23:f6:ed:1c:51:20:e8:13:fe:ea:e3:85:4e:
08:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B9:4D:6C:AC:50:BC:B9:AD:5D:5C:87:D4:08:87:0D:C3:FB:74:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c4d953b3-7c7f-365a-8946-e94b12d360e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:8a:7c:9d:ee:92:67:26:1e:0a:dd:1a:e7:ee:28:d7:a8:14:
69:bc:5b:18:11:fc:04:28:4f:69:79:12:fd:77:01:c3:26:cd:
c9:43:6d:dc:9e:d9:64:3c:03:b6:99:e4:50:25:04:72:f1:bc:
80:73:20:78:91:c7:b0:4b:cb:a7:9a:41:f0:1a:f8:e8:22:57:
c5:be:ec:c4:e9:c3:d2:0b:f8:6c:a1:0a:d4:5a:31:f7:b6:8f:
50:14:c5:32:eb:18:45:a8:cf:09:d6:e8:ce:bd:47:45:08:37:
03:2f:48:79:d8:8b:97:a5:ae:7b:6c:93:9a:e4:51:07:48:d5:
8d:96:e7:ff:39:99:f3:57:23:c2:db:3c:66:b2:c6:ee:7d:50:
82:d5:5b:f0:92:c1:84:03:d5:4d:ba:e8:b7:17:c7:f2:d4:73:
bf:dd:0c:71:51:d3:ac:32:de:2a:cc:0c:f4:7b:08:0b:2f:96:
1e:80:57:e4:fe:24:73:9d:86:95:06:9e:38:43:e5:98:4c:b3:
3b:ef:1b:55:a8:5f:5e:67:8a:5d:0c:0f:81:3c:04:4e:bb:b2:
27:87:f7:ea:49:e1:b2:c6:42:9b:0f:3e:52:da:d3:c2:cc:91:
89:28:db:3f:13:88:82:ec:74:d2:1f:fc:98:a4:c9:f4:ae:8d:
48:62:0b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:24:23 2026 by rpki-client