
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4aaf5189-177a-3f26-9b07-dc6eddcedca7.roa
File: 4aaf5189-177a-3f26-9b07-dc6eddcedca7.roa (raw, json)
Hash identifier: z5edCbw3rBt9cbgoNnT43lF/oSs/aSb3PQEAR6Kixdg=
Subject key identifier: 20:D3:7D:59:DB:09:31:C4:47:32:43:12:2D:ED:85:FF:BA:AB:DB:88
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C8477046C92DC0459AB9EDE80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4aaf5189-177a-3f26-9b07-dc6eddcedca7.roa
Signing time: Wed 14 Jan 2026 02:00:31 +0000
ROA not before: Wed 14 Jan 2026 02:00:31 +0000
ROA not after: Tue 14 Apr 2026 01:00:31 +0000
asID: 30036
IP address blocks: 104.201.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:84:77:04:6c:92:dc:04:59:ab:9e:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 14 02:00:31 2026 GMT
Not After : Apr 14 01:00:31 2026 GMT
Subject: CN=2924194e-eb63-4070-909d-3d45b5780fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:df:4d:6f:0b:be:97:29:8a:e1:21:83:fb:
cf:fd:c4:6c:bb:e1:a3:36:51:42:a3:75:81:ff:5a:
6d:a9:c5:6e:59:3f:4b:63:db:d0:34:af:69:4c:57:
0e:52:fe:9b:27:db:53:2c:29:e2:1e:58:63:da:ee:
6d:3c:9c:77:5a:ff:be:d8:54:2e:7a:0c:29:c2:40:
ba:a7:6d:cb:03:06:46:e4:14:ac:f3:33:7e:4d:62:
36:f7:34:4f:cf:4a:5f:22:f7:cc:a1:03:0a:ba:31:
72:32:1f:74:f3:a3:98:ee:49:9e:cf:2d:5a:a9:ca:
7b:00:ba:b7:b2:39:ac:f4:1f:5f:48:08:06:e4:84:
a7:94:c6:7b:8a:78:c9:b4:b6:4d:32:be:a8:b1:63:
f9:6a:8b:43:d6:6c:d9:a4:59:6f:61:33:d1:48:af:
d9:96:98:bf:7e:fc:23:3d:71:78:8e:9b:5c:2d:4a:
71:a0:8f:f0:c6:89:a4:84:f3:bb:cb:c4:d8:44:31:
40:a4:41:0e:7c:bc:6a:a9:49:d6:2c:62:a8:58:35:
ae:8d:39:9f:c7:8c:3e:e5:bc:73:b7:12:bd:99:ea:
09:d9:c8:4b:4f:f6:53:84:77:41:38:2f:09:89:9c:
81:89:96:85:d2:bd:fb:02:17:a5:1d:05:2e:15:32:
1f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D3:7D:59:DB:09:31:C4:47:32:43:12:2D:ED:85:FF:BA:AB:DB:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4aaf5189-177a-3f26-9b07-dc6eddcedca7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.201.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:ec:4f:53:75:0d:f6:0d:f5:06:91:53:15:33:a7:9d:e4:13:
79:b7:59:6c:9b:80:a7:e1:f0:79:94:83:3a:85:6b:96:ed:40:
fa:f9:6e:7a:db:84:73:43:1e:f8:a6:3a:36:4d:e0:da:ec:52:
d9:2e:1a:8a:4b:b6:bb:cc:9a:82:32:39:a9:b4:e3:2b:fd:71:
a0:84:b2:4c:c8:74:33:65:f2:e2:b6:1a:12:fd:df:dd:95:13:
b2:2f:43:45:ef:6a:d1:d2:83:01:e0:61:a8:59:ed:5b:c7:e9:
1d:61:71:41:b4:3c:1a:38:33:6a:c8:29:cc:60:e5:c2:a2:d5:
da:6c:4a:ac:57:62:3f:20:d8:f4:5b:77:ea:29:05:cc:20:00:
e6:72:6e:2e:d0:de:f7:85:5f:97:82:02:de:bd:b5:2f:18:59:
df:16:16:6d:93:c1:78:46:dc:35:d7:6e:9b:39:76:ea:1f:64:
6d:15:89:03:11:74:60:de:bc:63:a5:54:b8:02:ab:33:15:e5:
60:cd:e7:5a:ba:d7:5f:0b:5d:5b:b6:c8:2e:2f:ed:62:c1:39:
d9:91:a5:0b:7a:9c:72:26:85:b1:48:df:05:49:6f:14:d6:bb:
ae:61:c9:0b:e1:2d:67:31:72:f3:65:5f:07:c2:fd:4d:bd:62:
5c:d0:84:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:17 2026 by rpki-client