
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1367525f-332e-39de-a859-d9312447ba1e.roa
File: 1367525f-332e-39de-a859-d9312447ba1e.roa (raw, json)
Hash identifier: 8TdAAkR71EvNoUaOZlMnyIxrVFUvQH5Zdvjw5eCjc7c=
Subject key identifier: AA:7C:7C:B2:A8:51:72:C1:C9:FC:C8:6A:EC:FB:39:E1:BA:90:71:D7
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D651521380DA6EAE9982D7D9E
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1367525f-332e-39de-a859-d9312447ba1e.roa
Signing time: Sat 04 Apr 2026 13:00:29 +0000
ROA not before: Sat 04 Apr 2026 13:00:29 +0000
ROA not after: Fri 03 Jul 2026 13:00:29 +0000
asID: 30036
IP address blocks: 104.201.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:65:15:21:38:0d:a6:ea:e9:98:2d:7d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Apr 4 13:00:29 2026 GMT
Not After : Jul 3 13:00:29 2026 GMT
Subject: CN=8df63ae4-0bb6-43d3-801a-580f7244cf46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:ca:33:91:43:7d:99:7d:72:81:b6:6a:17:
d0:3b:52:ee:88:f7:af:4b:8a:f6:61:b5:ed:28:32:
49:54:ef:50:62:d6:10:64:4a:64:74:ef:3c:e3:d7:
cc:fa:ab:3f:c7:8c:b0:91:53:08:3b:32:6a:dc:d9:
1c:be:bd:6a:21:b5:a3:70:8c:5e:42:9d:d3:1a:9e:
37:4f:39:75:f3:24:74:e6:85:16:b5:fe:04:ff:ca:
8c:71:40:a0:ee:2a:d4:06:ad:64:37:03:d0:2d:1b:
e5:be:33:a6:09:52:fc:e4:20:7a:b0:79:6e:73:2a:
4b:88:a8:3f:83:7e:39:ac:dc:c0:61:53:4f:11:86:
46:d5:71:b0:e1:50:2b:06:44:45:75:78:d4:06:e7:
1c:b1:c7:ae:e6:01:44:fe:5a:59:e7:0b:d5:eb:ae:
93:f0:78:45:50:f1:78:09:4f:26:62:6f:2a:02:91:
c9:77:d8:22:cd:ac:f7:7f:fb:66:59:d8:ed:ac:a2:
b4:a4:0f:ee:8d:e0:ee:b0:45:4a:d4:f7:24:e8:21:
cf:84:50:ac:41:87:90:76:e0:29:cb:b0:44:e3:be:
8d:88:02:d2:05:db:8d:e3:16:a6:b2:8d:6d:f7:42:
0b:ab:b5:62:45:14:96:b5:20:91:64:b8:75:5c:f9:
aa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7C:7C:B2:A8:51:72:C1:C9:FC:C8:6A:EC:FB:39:E1:BA:90:71:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1367525f-332e-39de-a859-d9312447ba1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.201.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:6f:c5:18:0e:39:f0:cb:09:33:72:1f:b6:d1:63:93:36:8d:
71:21:10:67:b9:55:cf:53:55:48:ce:8b:9b:29:cc:d3:7e:1b:
13:c6:7c:e2:27:cc:6d:ea:0d:8e:de:47:a9:ca:7d:a5:8d:78:
22:ce:e5:a7:b5:7c:0d:5b:9a:3a:69:d1:ce:e3:63:84:bc:68:
e4:82:dd:92:7f:17:b3:ad:1a:ce:b2:f9:bd:58:c3:1f:31:61:
9f:bd:93:f2:48:0f:72:a2:e1:d6:70:3d:f8:a8:11:85:76:56:
b6:d8:c4:eb:f4:0d:ba:63:ea:65:3f:35:70:32:4d:cc:b6:91:
28:34:eb:77:e2:4d:83:75:99:c0:39:8b:b4:b9:ef:96:be:42:
9a:c6:07:f9:92:9c:96:58:84:f9:0e:17:ed:14:9a:55:05:1c:
e1:b8:d7:e0:05:34:c9:0a:08:b9:aa:65:22:5f:2d:7c:a8:56:
e8:8c:2a:f6:8e:4d:7f:d7:96:da:e4:df:89:7e:ba:0e:f1:a5:
21:fa:01:42:1e:6a:ae:7c:a8:2a:d2:fe:69:47:90:5e:a7:bb:
70:a1:23:be:f6:e0:65:1f:62:fe:4d:43:e3:80:7a:e3:9f:12:
03:c6:c0:50:60:ae:73:76:af:c9:8d:be:3f:db:b9:94:ee:fe:
9b:0c:a3:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFSE4Dabq6ZgtfZ4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk
OGRmNjNhZTQtMGJiNi00M2QzLTgwMWEtNTgwZjcyNDRjZjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6LKM5FDfZl9coG2ahfQO1LuiPevS4r2YbXt
KDJJVO9QYtYQZEpkdO8849fM+qs/x4ywkVMIOzJq3Nkcvr1qIbWjcIxeQp3TGp43
Tzl18yR05oUWtf4E/8qMcUCg7irUBq1kNwPQLRvlvjOmCVL85CB6sHlucypLiKg/
g345rNzAYVNPEYZG1XGw4VArBkRFdXjUBuccsceu5gFE/lpZ5wvV666T8HhFUPF4
CU8mYm8qApHJd9gizaz3f/tmWdjtrKK0pA/ujeDusEVK1Pck6CHPhFCsQYeQduAp
y7BE476NiALSBduN4xamso1t90ILq7ViRRSWtSCRZLh1XPmqmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKp8fLKoUXLByfzIauz7OeG6kHHXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTM2NzUyNWYtMzMyZS0z
OWRlLWE4NTktZDkzMTI0NDdiYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJvxRgOOfDLCTNyH7bRY5M2jXEhEGe5Vc9TVUjOi5spzNN+GxPGfOIn
zG3qDY7eR6nKfaWNeCLO5ae1fA1bmjpp0c7jY4S8aOSC3ZJ/F7OtGs6y+b1Ywx8x
YZ+9k/JID3Ki4dZwPfioEYV2VrbYxOv0Dbpj6mU/NXAyTcy2kSg063fiTYN1mcA5
i7S575a+QprGB/mSnJZYhPkOF+0UmlUFHOG41+AFNMkKCLmqZSJfLXyoVuiMKvaO
TX/Xltrk34l+ug7xpSH6AUIeaq58qCrS/mlHkF6nu3ChI7724GUfYv5NQ+OAeuOf
EgPGwFBgrnN2r8mNvj/buZTu/psMo9k=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:17:34 2026 by rpki-client