
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/960a70a6-9876-33a5-b74b-ca70419b4dc8.roa
File: 960a70a6-9876-33a5-b74b-ca70419b4dc8.roa (raw, json)
Hash identifier: DqrlyIYHvyQX5RBh6GPhR02r0KLpQk1aKx730FghN1E=
Subject key identifier: 1C:9C:DF:0F:30:69:03:65:B6:BE:91:DC:29:3C:EB:3C:A7:9B:2D:BA
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D71A526EA04A8086953715800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/960a70a6-9876-33a5-b74b-ca70419b4dc8.roa
Signing time: Thu 09 Apr 2026 01:00:23 +0000
ROA not before: Thu 09 Apr 2026 01:00:23 +0000
ROA not after: Wed 08 Jul 2026 01:00:23 +0000
asID: 30036
IP address blocks: 108.178.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:71:a5:26:ea:04:a8:08:69:53:71:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Apr 9 01:00:23 2026 GMT
Not After : Jul 8 01:00:23 2026 GMT
Subject: CN=6a156fca-cd65-4566-a501-6542f31b1c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:17:62:82:82:4b:ba:77:72:50:fc:2a:b7:f1:
b4:52:c1:d6:0a:36:5d:5a:4f:77:23:cf:0b:31:38:
8f:76:e7:f4:dd:b2:f6:63:cd:9e:ae:db:7e:eb:dd:
ad:e5:f6:58:c6:57:74:f8:b7:b1:55:34:53:44:68:
8e:66:4f:90:2a:0b:bc:66:0e:99:dd:d9:ea:8f:28:
da:3c:6f:f7:19:7a:68:18:4f:7a:d5:79:91:c5:f6:
4c:18:24:ac:27:6f:33:8b:70:48:18:c2:e2:1b:cd:
d9:3a:74:0c:73:ce:27:90:ec:36:a1:36:35:92:4d:
9e:bd:c3:8b:86:72:ae:1e:63:e0:de:38:d1:e5:1e:
16:ec:6e:6b:9d:ea:0c:eb:98:bb:b5:46:a9:65:82:
8f:aa:16:f7:76:25:51:9d:4a:b0:d7:f6:ac:8c:58:
3a:a9:09:67:ba:66:5a:15:68:3b:ea:af:28:6c:a1:
f2:6e:b5:4f:a2:53:60:db:3a:f4:8c:7f:b5:04:38:
f9:7d:3e:50:52:a0:4e:1d:5b:48:fd:41:46:d6:31:
a4:42:25:c7:5a:e4:77:fc:9b:53:c5:5b:4d:f8:90:
c3:6e:53:d9:1c:9d:1b:c3:ca:4d:c9:c2:7e:93:c5:
b8:cb:a7:49:85:ac:1b:7e:6b:0d:81:38:38:07:69:
a6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9C:DF:0F:30:69:03:65:B6:BE:91:DC:29:3C:EB:3C:A7:9B:2D:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/960a70a6-9876-33a5-b74b-ca70419b4dc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.178.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:a5:bc:d6:89:ba:31:e0:e0:77:79:98:ae:73:0c:67:42:04:
34:45:ab:e9:8f:04:59:e4:98:f0:aa:a4:70:d0:78:68:33:32:
07:ac:a7:56:f9:2a:eb:e1:15:77:81:b8:8f:fc:63:89:45:05:
e0:7f:c5:cf:2c:9f:45:de:f7:5e:59:a8:91:67:97:0a:5f:5e:
6d:40:d2:77:8d:d4:b7:85:96:7b:c8:64:03:9a:71:77:73:77:
c2:79:6f:db:da:bf:83:ba:56:d0:b8:fc:38:22:14:d8:44:46:
d7:47:e6:db:b1:af:74:25:fa:a9:ec:50:ea:db:e6:87:24:08:
5b:b1:86:ac:4e:92:73:59:05:cd:ab:4f:0d:e3:46:85:85:5d:
ef:7f:8e:5a:f6:72:45:77:b4:06:0b:7d:d4:d0:ad:b2:79:8e:
6a:4f:40:90:3e:d6:e1:d2:93:93:29:fe:a6:d8:75:fa:65:46:
1e:c6:f7:6d:80:85:44:24:6a:ce:a9:36:85:8e:ee:92:bb:53:
4e:7e:7e:6a:f7:60:72:2f:1f:2c:35:0d:bd:12:ca:f4:65:77:
b0:d1:bc:28:14:13:ea:4a:fb:0f:de:ab:85:f5:dd:d2:c1:60:
8b:1d:19:9f:5b:34:43:ee:c3:12:e9:4e:1e:9f:d9:76:8a:24:
18:68:ff:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:46 2026 by rpki-client