
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8ee05a2-51fe-3fc8-aa0c-02b0c2cea35a.roa
File: b8ee05a2-51fe-3fc8-aa0c-02b0c2cea35a.roa (raw, json)
Hash identifier: X1oF53ftA5LeRI2u3sH8oXnhxQTVIEgUO1okdkYoC+0=
Subject key identifier: E2:B3:8C:92:A5:09:C0:52:6A:16:72:DF:07:22:FA:30:FA:CC:19:1C
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D71A50A250916BEB2144C6700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8ee05a2-51fe-3fc8-aa0c-02b0c2cea35a.roa
Signing time: Thu 09 Apr 2026 01:00:23 +0000
ROA not before: Thu 09 Apr 2026 01:00:23 +0000
ROA not after: Wed 08 Jul 2026 01:00:23 +0000
asID: 30036
IP address blocks: 108.178.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:71:a5:0a:25:09:16:be:b2:14:4c:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Apr 9 01:00:23 2026 GMT
Not After : Jul 8 01:00:23 2026 GMT
Subject: CN=06ace75c-004a-4adc-b857-09e40a90acca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:9a:38:c7:f6:5c:e7:b7:b2:36:c6:e7:c7:
d9:d9:88:ac:df:1d:02:53:64:e4:c3:c3:33:ff:67:
1e:46:d8:91:6a:45:59:16:1e:75:2b:62:6e:2b:0e:
47:6f:30:3e:64:2e:27:42:3c:6a:f2:81:00:49:f3:
87:38:e6:2a:b3:eb:e7:d9:c0:83:c8:9f:a3:66:66:
71:d9:98:cd:26:2d:63:85:39:e1:bb:4d:7c:1a:a8:
09:31:95:5a:46:0a:cb:73:b2:be:e8:58:48:80:f3:
9c:90:fe:3c:84:52:2a:b9:7d:9a:fe:c3:5b:a2:dd:
bc:fc:91:40:88:f7:05:97:ed:34:30:11:1d:f0:4e:
5e:c9:58:37:c8:11:4f:ae:2d:44:54:0f:a0:97:8b:
1d:2e:21:15:bd:8e:5e:f5:a2:d6:df:7c:2c:f2:9a:
27:8f:c8:39:ca:c2:49:45:62:52:2a:86:24:a1:e9:
20:d9:ed:78:99:25:72:13:b9:ed:0c:67:d1:bf:db:
eb:18:38:91:59:c5:d4:a0:8b:e5:fe:67:d1:3d:f1:
c0:de:73:c0:f0:5e:0e:97:84:00:eb:ab:8b:9c:0c:
26:a2:23:2e:df:08:00:68:39:5c:eb:71:90:64:f4:
fb:ec:22:5d:91:aa:27:69:89:8b:fa:e2:04:9c:11:
d4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B3:8C:92:A5:09:C0:52:6A:16:72:DF:07:22:FA:30:FA:CC:19:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8ee05a2-51fe-3fc8-aa0c-02b0c2cea35a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.178.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:62:41:7f:f7:98:0a:4b:b5:d1:e5:d8:b9:09:4a:ae:2a:e1:
9c:bf:65:02:74:e2:62:f7:0d:6a:74:2d:6d:6a:b1:f7:8e:aa:
8d:2e:e9:6f:ef:ab:48:c2:48:3d:58:e0:b9:3a:01:08:7d:28:
5d:d1:92:08:ea:1b:7f:34:dc:61:a3:66:50:a0:49:90:fc:10:
54:84:c6:a7:f0:dc:5a:b5:d6:da:40:4b:94:45:68:f5:21:bd:
fc:c0:d4:47:cf:7f:f9:c1:7e:b3:52:60:ac:97:5e:e5:d7:65:
37:44:02:dd:05:10:15:d3:00:42:75:4d:31:17:2a:6c:4a:1f:
ec:ba:2e:d8:ec:cc:5a:4e:22:b4:f8:a2:32:38:a8:77:63:62:
42:f0:8b:bf:c9:7f:e6:00:77:be:7a:8f:9d:65:3f:60:df:4a:
18:aa:65:eb:6d:d0:b9:4e:51:99:d9:77:0c:2b:a2:44:78:72:
7b:ab:eb:41:d1:10:5d:01:14:f3:a1:1d:34:26:0e:54:cc:a7:
56:84:27:08:d4:0f:be:1a:97:ee:28:b5:a5:04:6b:3b:5b:e5:
cf:d0:47:50:0a:e4:1f:e4:e1:62:3f:ce:f1:91:bc:4b:46:19:
9c:2d:90:0b:f6:f4:84:a3:5e:84:5d:0e:9b:0d:e9:49:15:f1:
9c:42:dd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:09 2026 by rpki-client