
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ad1f4b70-560e-3352-a9d8-f89865dcc620.roa
File: ad1f4b70-560e-3352-a9d8-f89865dcc620.roa (raw, json)
Hash identifier: TNiBgbVzK3zo0hQ1MRrS8wrW8u501nL1ztAOtPf+wPw=
Subject key identifier: CE:C1:E7:83:14:1B:DC:F6:AD:6B:CA:73:99:EC:22:4A:7C:2B:FD:EE
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584DE41B5607F57E6A70EC87DE00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ad1f4b70-560e-3352-a9d8-f89865dcc620.roa
Signing time: Wed 20 May 2026 01:00:25 +0000
ROA not before: Wed 20 May 2026 01:00:25 +0000
ROA not after: Tue 18 Aug 2026 01:00:25 +0000
asID: 30036
IP address blocks: 104.201.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e4:1b:56:07:f5:7e:6a:70:ec:87:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: May 20 01:00:25 2026 GMT
Not After : Aug 18 01:00:25 2026 GMT
Subject: CN=72cae92c-7e0f-49d2-b6fd-2c78e18324ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:aa:91:52:f8:95:11:e5:3b:51:f1:08:29:
b7:de:37:c2:fc:21:3e:6a:9d:8a:fc:14:32:07:fb:
20:06:42:6e:d2:fb:84:f4:a0:f5:71:5f:94:83:a9:
94:14:4b:4e:6e:d6:2b:cb:b0:f8:d6:ef:cf:e8:70:
3e:9c:f4:22:26:d6:32:e6:4b:f7:65:89:95:62:14:
31:b0:13:f4:23:8c:0c:28:bd:e6:ff:3a:55:5f:a8:
86:03:22:57:a7:5c:9e:ef:bd:ea:cb:f1:83:d5:67:
b5:e5:53:0c:1a:36:ca:8d:be:92:f8:ff:12:fa:7b:
eb:bb:88:f0:8e:d6:2f:24:d7:87:f1:63:f4:20:57:
65:58:96:d7:b5:f3:b9:51:cd:fb:1c:8d:72:21:c2:
c1:a5:a9:d0:50:3e:a1:3d:80:b5:1c:9b:ef:62:54:
bf:13:2a:07:28:f4:02:6f:ae:ea:59:ae:6b:d5:3a:
82:6f:09:7b:ea:a7:3e:5a:aa:92:8a:85:11:4e:0f:
7a:21:fe:7d:f0:40:47:ab:d2:d1:f5:38:fc:26:24:
03:58:82:53:57:c6:ab:5e:04:74:fc:23:a2:53:0f:
56:03:84:12:89:84:e1:00:b8:d7:af:f8:9a:27:e6:
d7:b6:c1:de:41:11:ab:63:f5:c3:71:79:32:65:41:
45:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C1:E7:83:14:1B:DC:F6:AD:6B:CA:73:99:EC:22:4A:7C:2B:FD:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ad1f4b70-560e-3352-a9d8-f89865dcc620.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.201.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:cd:3f:4d:f0:1e:c1:a1:81:71:0b:1f:79:a0:13:d6:14:c2:
e2:3d:e7:f1:bc:48:c7:1c:5d:94:0d:9c:29:b8:be:29:76:a2:
3a:e8:33:88:4d:02:8d:aa:b8:42:29:d8:13:b5:c6:01:ea:b1:
c2:ca:14:28:1c:9c:88:c9:29:40:e5:15:ed:28:38:11:09:7d:
2a:ed:1c:d8:83:d6:e7:21:a5:09:66:e2:43:0b:61:a2:77:4b:
5a:19:01:a4:ee:d0:18:b2:ab:58:d1:9c:1f:ea:89:96:5d:b0:
64:9a:05:0a:9b:79:b6:78:c4:34:9e:e2:65:36:2a:67:52:70:
62:e8:b5:0b:8c:7c:85:28:eb:56:e5:4c:28:c7:3d:77:0d:8b:
ce:87:d3:12:6e:65:3d:16:28:d8:0a:9d:a4:05:f9:b8:dc:50:
1a:dc:f7:b7:d4:02:81:29:3a:39:37:3a:a9:d0:67:78:64:60:
0b:11:fe:6f:9a:7f:31:eb:29:d3:c1:94:93:4e:93:8e:d1:7e:
74:b6:43:67:a0:04:aa:3c:bb:98:b4:f3:24:e6:db:2c:fb:2a:
59:ca:85:b1:23:c6:e3:8f:78:1a:ce:b0:3e:2c:4c:8e:88:84:
a8:c6:76:31:05:b1:dc:66:87:34:d6:3e:72:a5:f8:a1:72:cd:
8d:b6:12:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:34:34 2026 by rpki-client