
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d9f4ac5-5bb1-3dd3-867c-96030d4c4b8f.roa
File: 9d9f4ac5-5bb1-3dd3-867c-96030d4c4b8f.roa (raw, json)
Hash identifier: RNvyb4RNGuKtzO4vlWOO4nMhIi7QDK/4bSUPfdsN2H0=
Subject key identifier: 4C:42:B2:87:36:A9:AA:54:91:E7:C9:31:7D:A4:D3:FA:65:92:CA:B5
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D651523BC9DB91204F3D49500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d9f4ac5-5bb1-3dd3-867c-96030d4c4b8f.roa
Signing time: Sat 04 Apr 2026 13:00:29 +0000
ROA not before: Sat 04 Apr 2026 13:00:29 +0000
ROA not after: Fri 03 Jul 2026 13:00:29 +0000
asID: 30036
IP address blocks: 104.201.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:65:15:23:bc:9d:b9:12:04:f3:d4:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Apr 4 13:00:29 2026 GMT
Not After : Jul 3 13:00:29 2026 GMT
Subject: CN=58680a0e-ccb2-4130-95a5-e74a72e5cdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0b:51:f9:e1:11:b5:d2:04:1d:f0:30:f0:4b:
44:dd:6e:c7:57:a6:22:d5:9a:07:ce:e9:a2:89:dc:
54:21:90:86:4e:c9:e3:ff:ab:bc:69:71:15:74:a7:
2b:39:06:8e:1c:33:c2:bd:69:ed:69:ac:67:73:59:
5a:0b:6f:f8:e5:ca:62:d7:a6:4b:3f:7f:34:c5:bf:
cb:cf:6a:12:e3:de:ad:47:f7:8b:f9:5e:85:2b:fb:
1c:42:e8:d7:60:2e:27:bd:91:16:53:eb:44:c4:c0:
55:fd:ae:f4:95:d6:4a:d3:22:bc:d0:2e:1c:3c:b3:
51:55:70:2c:38:2e:a2:3a:95:c2:d0:c8:98:c5:d5:
5c:40:48:62:b3:b3:4d:ef:04:9a:96:f1:40:05:f9:
1b:2d:db:e1:8d:1e:25:57:5b:ea:ab:06:f5:af:a6:
78:5c:b0:83:38:04:08:e4:27:8e:b5:d4:f5:df:70:
3f:65:db:36:1d:d7:c6:e0:08:6c:db:6e:9e:3a:35:
30:65:0b:fd:a5:c6:c6:79:59:b6:03:d4:5c:d1:76:
fb:0b:ee:55:26:74:c7:4e:4b:80:c3:82:58:96:69:
31:07:10:e8:a1:2c:36:4b:10:bc:74:4c:73:5c:c2:
30:0d:b3:f7:d4:06:87:6c:92:57:bb:03:7d:f3:e5:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:42:B2:87:36:A9:AA:54:91:E7:C9:31:7D:A4:D3:FA:65:92:CA:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d9f4ac5-5bb1-3dd3-867c-96030d4c4b8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.201.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:bc:b7:d2:23:1f:dd:cd:a2:d0:cb:34:b3:6b:12:12:b7:42:
ab:59:81:d7:1d:0c:c8:c2:c9:93:f1:fb:f0:55:ec:b8:45:3d:
fd:98:23:01:93:b8:ad:46:40:c9:19:15:41:b4:84:2f:3c:ab:
38:02:d7:78:23:85:f7:75:9f:62:af:5f:44:27:b2:f8:30:c6:
5d:93:a0:09:39:48:dc:6d:35:85:3b:93:8c:f5:b4:27:4b:ae:
7f:0b:82:00:4a:9b:c0:f7:60:24:cc:9f:f7:af:0a:71:1d:0c:
09:9b:f6:3e:77:20:6a:c3:73:69:04:38:0b:d9:9b:20:3d:5c:
78:09:2c:aa:64:49:b8:84:bd:1c:d3:99:01:bd:78:19:57:37:
1b:1e:6d:03:8a:16:1a:5e:30:e1:a9:52:1e:e2:cc:5f:ce:ee:
9f:b3:df:3c:7a:b0:41:e6:ff:e6:ea:51:47:de:9c:47:46:16:
76:48:cc:9a:9e:eb:09:63:04:33:8a:7a:d9:84:a5:34:2e:d8:
53:32:7f:11:ae:c4:46:96:a7:1d:6a:93:65:d8:5b:3b:b5:c5:
36:05:a2:12:22:bc:1c:d3:f2:80:fa:09:7d:12:c5:e0:55:5a:
83:b2:87:32:94:cc:09:d5:7b:d3:21:a5:f3:25:dc:bf:d5:a8:
de:a9:0f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:46 2026 by rpki-client