
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3dc7f112-dca5-3bfe-a344-6bf0bec4e50b.roa
File: 3dc7f112-dca5-3bfe-a344-6bf0bec4e50b.roa (raw, json)
Hash identifier: CJ2KrP/u+iiHfJp2DG1iO6UpED3VoAmhMaPZhfs2Sos=
Subject key identifier: 91:18:60:93:4C:A6:11:26:5C:17:9A:19:1D:BD:22:04:12:F6:53:F3
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328584D40CB156BB48A363485DEC7E0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3dc7f112-dca5-3bfe-a344-6bf0bec4e50b.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 10796
IP address blocks: 71.72.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:cb:15:6b:b4:8a:36:34:85:de:c7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=1a19f31b-bb77-4a5c-90b3-43a19f6ac2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:7c:f9:2e:bb:b2:83:12:59:17:7a:36:b2:
83:34:87:2f:d2:cb:d8:6c:29:8f:7c:e3:73:93:2d:
b1:64:44:a9:6f:11:6d:8e:80:ac:83:48:c1:c7:c7:
c1:5c:b6:53:39:12:e3:c8:64:c7:08:bc:a7:c9:c1:
55:4e:6f:7a:3a:5a:29:e8:73:73:8e:e9:51:d9:78:
c3:13:2a:8f:22:12:18:ef:3e:07:dd:d4:42:ea:b2:
2d:1e:e6:47:e2:f0:7c:77:c1:8d:c1:d3:4e:b0:27:
58:59:b7:9b:0e:0b:9d:d3:49:02:0f:d0:eb:c8:40:
2c:bf:a2:ff:b5:67:c4:3c:b0:0d:7b:2e:bd:79:4e:
ff:e7:6b:3c:13:ab:19:27:68:64:69:4e:6c:e9:ab:
5e:72:18:44:fa:a7:1d:43:f5:95:9d:bc:29:a2:41:
c3:d0:e4:0b:f5:f7:f0:d0:7b:21:bc:69:6e:fb:96:
72:32:03:d2:b9:b1:86:98:0d:67:12:57:cd:7f:f5:
ca:e7:93:0d:7f:d8:be:2d:83:7d:de:80:47:ee:30:
f9:6a:62:bd:5b:06:eb:c8:1a:58:89:bd:98:c4:47:
e6:6e:4a:42:43:fd:5b:4a:65:91:7d:58:ca:57:af:
3f:77:d2:03:0e:80:66:74:0b:58:1b:44:9b:8b:ec:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:18:60:93:4C:A6:11:26:5C:17:9A:19:1D:BD:22:04:12:F6:53:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3dc7f112-dca5-3bfe-a344-6bf0bec4e50b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
71.72.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:69:a9:8a:32:cc:7b:f0:69:ba:cd:ba:7c:7d:3a:77:7b:8f:
ca:7b:ed:0d:82:f5:9e:3e:ee:42:4e:f1:fe:0b:d3:fa:b1:a6:
1a:ed:10:65:d7:23:e9:0f:97:b6:d2:bd:28:b2:11:a8:35:50:
90:cb:42:43:ee:7a:29:c9:13:2b:9e:18:55:23:ec:df:31:8c:
d2:bb:7c:3a:5d:58:00:29:52:53:56:4f:9a:f2:d7:c7:9f:41:
94:73:99:d4:fd:2c:d8:15:2f:95:be:83:30:98:37:f2:39:74:
af:ee:03:3b:0b:81:ee:1b:50:23:73:9a:41:ed:4f:14:e2:4a:
ea:02:e5:37:a0:8e:8f:75:aa:46:ac:2d:3e:6c:6b:63:52:35:
f2:5c:a9:57:b3:7f:a5:b0:19:56:73:ef:76:2f:69:ca:c9:f6:
31:39:18:31:8c:06:64:d6:a1:75:ed:f9:4a:26:d5:64:f8:47:
a0:03:7e:23:d4:cd:c3:f2:20:b7:8b:24:d3:0d:c6:58:93:c7:
b7:48:0c:3e:50:8a:41:6a:80:cd:4b:92:a4:06:cc:d7:bd:fa:
6e:14:2c:15:9e:7c:78:87:63:22:ae:44:5f:79:2a:05:68:7d:
27:a5:a9:cc:94:3e:92:90:61:6c:6d:62:aa:af:bb:4a:9c:79:
48:f8:de:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:08 2026 by rpki-client