
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b924633f-dc52-3847-b736-8dff3ab66347.roa
File: b924633f-dc52-3847-b736-8dff3ab66347.roa (raw, json)
Hash identifier: 0daO4ZeHEbg6iLeX+4jnq5WJUvWJFQ/mfRGFEUXjF0A=
Subject key identifier: A1:E8:16:DD:2F:A2:E2:32:F8:20:69:51:04:C2:47:36:5B:80:B1:66
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D65153B70EDEAEC2344B85480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b924633f-dc52-3847-b736-8dff3ab66347.roa
Signing time: Sat 04 Apr 2026 13:00:29 +0000
ROA not before: Sat 04 Apr 2026 13:00:29 +0000
ROA not after: Fri 03 Jul 2026 13:00:29 +0000
asID: 30036
IP address blocks: 108.166.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:65:15:3b:70:ed:ea:ec:23:44:b8:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Apr 4 13:00:29 2026 GMT
Not After : Jul 3 13:00:29 2026 GMT
Subject: CN=b9adb37f-d698-4e34-84f8-3d56b5af64f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:27:8c:98:9e:53:ca:68:e0:79:7d:87:dd:13:
62:82:44:9e:de:cc:f4:ac:b7:32:8a:18:be:c6:91:
3c:98:42:df:33:88:c4:c0:8a:7a:90:68:df:2d:9c:
7c:ef:a6:66:9b:68:25:75:c8:3b:ac:db:65:c7:bd:
a8:dc:58:5d:ed:de:ee:ac:35:b3:a1:2c:eb:50:e5:
b6:d7:c6:40:88:d9:24:2f:90:e9:91:78:76:21:cd:
55:8a:1d:64:7a:d6:d3:be:53:c9:d0:a5:31:f8:e0:
6f:62:6f:96:94:95:78:63:75:b3:62:9c:2f:2e:2b:
db:44:cb:c4:bf:fb:8f:89:7d:81:ae:59:1b:e9:9e:
39:cd:81:6d:65:6c:85:40:c5:19:93:70:12:d3:eb:
9c:58:a8:ed:a5:36:72:5c:1b:c7:a8:61:34:da:c3:
17:99:ec:7e:67:f4:e0:ed:59:1e:e7:f5:65:6e:38:
9c:de:64:fd:d6:11:e1:f2:b2:75:2e:19:95:3a:07:
c9:03:b6:0a:e1:1f:68:cc:26:ea:32:3f:73:d9:41:
82:25:16:cc:2b:e1:b0:8e:d6:54:db:ea:07:5f:03:
12:bf:e9:13:0f:fd:14:64:53:1f:0e:49:96:77:57:
a9:62:e0:ae:53:5a:cd:cf:8f:fa:26:2b:27:d1:03:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E8:16:DD:2F:A2:E2:32:F8:20:69:51:04:C2:47:36:5B:80:B1:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b924633f-dc52-3847-b736-8dff3ab66347.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.166.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:13:f7:06:6e:b4:28:9e:48:21:80:6f:72:ec:81:a6:84:b9:
d5:4a:aa:eb:56:fa:bb:df:33:60:5d:a6:dd:f3:db:cc:81:a2:
7e:14:27:1c:34:ae:62:83:cf:2e:43:5b:33:02:34:66:44:f7:
ba:2c:61:98:2e:73:1b:d1:a7:b0:40:7a:f8:a0:8b:43:8c:09:
47:16:8e:ab:a4:7c:20:e9:4f:70:c6:bb:78:da:87:b4:8f:2f:
94:44:a7:0b:ff:4f:57:71:27:94:05:c9:c8:2e:92:32:f0:9c:
6b:b3:c5:9f:71:b2:98:a1:37:b0:b8:d2:a2:33:57:ac:f5:49:
8c:55:45:e4:88:83:b5:84:dc:91:b0:d2:c6:fb:b7:0a:93:66:
7e:a6:17:e0:0b:25:9d:c2:58:3a:23:4b:62:b8:87:0e:22:d1:
01:80:f1:9b:46:73:2f:1a:c1:13:78:3b:4c:80:a4:80:1c:e3:
58:43:66:60:2f:7e:ed:27:df:5f:b8:69:d3:45:13:52:c7:30:
3c:d2:df:10:e4:63:90:e4:90:ca:6a:28:f2:a5:93:1f:58:b3:
e5:70:c3:e7:17:b8:46:6f:87:ec:61:d8:1f:bf:54:be:b6:6e:
70:bd:d9:60:02:1b:4d:bf:fa:73:60:78:82:e8:43:9c:2f:64:
c4:a5:d9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:21:22 2026 by rpki-client