
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ca72f112-1175-3efa-9f88-21fe5aeee864.roa
File: ca72f112-1175-3efa-9f88-21fe5aeee864.roa (raw, json)
Hash identifier: ubhcaFu+qY+0XcE6V6OZ6cPH6R62WiaIT24e9uFmz+I=
Subject key identifier: D7:46:FD:19:2E:6F:05:FF:4E:95:ED:E9:E6:9C:AD:C0:3A:31:27:9E
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328584D40CB36D503DC9E5336BDC080
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ca72f112-1175-3efa-9f88-21fe5aeee864.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 20001
IP address blocks: 76.88.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:cb:36:d5:03:dc:9e:53:36:bd:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=3acc9635-2040-4fe1-a1c7-a7c81805dc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:53:71:f4:8e:bf:b8:f2:46:8d:53:d8:fe:36:
76:ef:90:19:6b:a8:06:16:71:ad:2a:48:b7:29:d7:
74:78:d0:af:60:04:62:0e:24:43:16:1b:dc:c1:03:
47:00:60:e3:5f:3e:eb:06:20:13:dc:bc:d0:c8:31:
20:29:9a:c6:63:e9:0b:15:71:87:1c:12:21:f8:90:
a3:da:43:f9:4e:2a:c3:91:7c:5b:35:27:71:75:b1:
82:9c:02:0e:f5:f0:61:08:d2:10:2a:01:23:fa:87:
fd:1f:a9:3c:fd:c2:e0:4a:d1:9d:9c:e8:20:e8:7b:
ce:7a:61:3b:e0:e0:37:2a:28:77:d6:90:7b:80:79:
e6:68:b6:f4:7a:53:5a:89:c4:91:83:ce:ac:b8:f8:
70:b8:34:d9:60:a7:41:4a:21:4c:eb:c2:58:a3:32:
8f:ba:1b:69:8c:91:6c:3b:13:e4:87:19:f7:a3:2a:
dd:84:02:c0:12:e2:be:8b:c4:e7:65:68:0a:53:5e:
33:3d:6e:07:9d:6d:98:ed:4a:25:ab:7b:82:1c:d4:
dc:76:3b:85:dc:07:22:69:16:d4:c4:fd:b8:a0:82:
3e:24:1a:22:71:a1:13:08:a5:78:7a:17:47:67:52:
6e:5a:59:18:f8:54:a7:b3:45:6b:a9:f7:f0:de:62:
b8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:46:FD:19:2E:6F:05:FF:4E:95:ED:E9:E6:9C:AD:C0:3A:31:27:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ca72f112-1175-3efa-9f88-21fe5aeee864.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
76.88.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:b6:9f:8c:6a:36:a8:39:5b:f5:83:bb:a8:67:bf:06:85:54:
f5:fa:8f:99:a2:ef:ed:71:11:dc:35:27:37:c7:67:4d:22:e1:
12:81:b5:b9:ee:e3:91:96:95:eb:3d:62:5e:16:ee:33:d0:35:
a5:d2:b9:40:1e:d2:cc:c8:9e:4d:07:a7:17:af:50:d1:41:f4:
8f:b8:38:43:6d:67:d6:fd:5c:7e:7c:85:3f:ca:b4:fa:15:ad:
53:c2:6a:c3:ba:42:59:e4:75:8b:3a:44:42:8c:0c:a2:bd:48:
01:b3:ef:fa:68:e2:65:73:de:ee:00:d5:d0:5c:67:4a:c8:e1:
0a:6e:7b:a4:57:35:16:09:43:67:31:56:35:a9:32:a5:1f:c3:
af:11:a3:61:e3:75:e8:a6:6b:75:4f:fb:c8:58:ed:12:d4:67:
e4:ab:bb:7e:54:1d:db:b2:1b:2d:43:eb:2d:96:0e:df:38:4d:
72:a1:32:b5:15:9f:53:f6:87:36:d8:32:45:63:d0:53:7b:9d:
e4:9a:3b:f0:a7:fd:18:eb:22:16:e4:45:da:a9:bc:ce:1e:ee:
e0:31:fd:bc:05:1b:0f:3e:3a:5d:68:b3:28:5b:d9:ad:20:8d:
41:69:94:bc:14:f8:ca:f3:be:5e:15:29:08:c5:fd:9c:ba:3f:
17:0b:c0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:31:15 2026 by rpki-client