
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/454e3470-446b-3e5a-9351-13090c3b1d15.roa
File: 454e3470-446b-3e5a-9351-13090c3b1d15.roa (raw, json)
Hash identifier: rYLEiiJeW/YDII1NUGNX3LkszZrj/3PzC8PJtTBalLw=
Subject key identifier: 2E:FF:77:D6:20:C3:50:97:37:4B:81:E0:32:3A:7B:7F:8D:83:36:4E
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D65153E1941BF819D13D0BE40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/454e3470-446b-3e5a-9351-13090c3b1d15.roa
Signing time: Sat 04 Apr 2026 13:00:29 +0000
ROA not before: Sat 04 Apr 2026 13:00:29 +0000
ROA not after: Fri 03 Jul 2026 13:00:29 +0000
asID: 30036
IP address blocks: 108.166.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:65:15:3e:19:41:bf:81:9d:13:d0:be:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Apr 4 13:00:29 2026 GMT
Not After : Jul 3 13:00:29 2026 GMT
Subject: CN=c12809dd-917a-4967-82d9-7aadf939419a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c4:37:00:46:bb:cd:fd:54:5b:d7:8d:d8:54:
9f:0b:ec:38:38:c5:13:f2:37:e4:fd:f7:af:b7:e1:
f7:0b:37:42:c3:da:d8:7e:85:92:9c:bb:93:a4:30:
b2:f8:c9:31:c8:66:ea:ac:75:dc:37:6f:d9:11:f9:
00:f8:95:de:fc:f0:e5:5c:0d:7d:e3:e4:3b:e6:88:
d8:db:52:87:81:fb:3b:9a:f2:2e:e1:0d:a1:ab:80:
d5:e3:0e:e3:55:a9:bb:5c:89:9c:62:de:84:6b:f4:
26:9d:70:2e:9e:27:a0:ea:6d:92:b1:1b:d1:85:75:
21:00:4f:ab:ee:b8:f1:ac:a8:7b:b8:0b:76:7f:f1:
fa:0a:d8:94:0e:37:91:bb:be:32:67:a0:8a:ae:0d:
14:92:49:ce:d9:00:90:ad:ae:a8:2c:05:92:3c:63:
68:93:78:ab:6f:91:e5:b7:9e:07:4f:f2:2f:17:bf:
0f:7a:a5:3c:12:4f:3a:48:34:65:d3:29:eb:95:c2:
c4:6d:82:16:2e:7b:d8:11:3a:5c:68:0b:2c:d5:76:
5e:2a:78:23:dc:c2:b5:b0:3c:c1:25:46:ca:32:1e:
66:49:38:32:17:d5:6f:6b:dd:ca:aa:5a:8d:ab:53:
b3:44:53:99:cf:ca:ec:2b:69:c5:be:53:f2:50:56:
06:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FF:77:D6:20:C3:50:97:37:4B:81:E0:32:3A:7B:7F:8D:83:36:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/454e3470-446b-3e5a-9351-13090c3b1d15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.166.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:9b:bb:3c:00:51:bc:c3:0c:f8:ca:6c:bc:08:d0:5e:d5:73:
cc:96:a1:5e:3d:9c:2e:16:87:2e:ae:0a:54:01:a7:b7:0f:3e:
4f:33:d6:e7:f6:77:b3:70:db:1e:fc:fc:c5:46:6c:c6:3a:c9:
d1:fe:f2:e5:f4:d5:51:b7:2e:fe:17:3a:98:95:0a:23:1c:04:
f5:15:ea:a3:7b:f7:56:d0:ca:52:b3:ee:c4:48:57:64:f5:78:
b6:f3:57:9e:65:d0:34:a4:28:ec:19:c2:c6:93:80:08:11:12:
20:b6:9c:d4:48:da:64:e5:43:6c:09:55:dd:5b:83:df:f4:1d:
f9:a9:d9:b0:cb:64:94:e8:b4:90:d0:77:2d:2e:be:b7:ae:3a:
32:07:ba:8e:e7:00:43:1e:bf:7c:3e:68:19:d5:64:c3:c9:40:
7c:93:72:b3:6e:d2:ad:9a:bc:4e:c6:a9:df:e8:2f:cf:e9:66:
04:0b:04:70:00:a6:11:a0:36:13:22:7e:b5:66:b5:29:8a:09:
75:fb:29:b8:55:9e:0c:fd:c7:18:fb:e8:37:62:6b:89:4b:f4:
86:2f:76:42:73:50:c4:a6:5c:f0:3d:3a:af:cc:46:a9:a2:58:
1c:81:78:e1:8b:d1:0b:52:57:3f:65:d6:db:ea:64:9e:b3:6c:
03:64:52:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:10:30 2026 by rpki-client