
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6c95d6d-add0-3f3c-adc6-6481bf89d4ca.roa
File: d6c95d6d-add0-3f3c-adc6-6481bf89d4ca.roa (raw, json)
Hash identifier: 4cmegprrK4uwOl9DnRueZNQqsZnp9UsfawkWnduCrSk=
Subject key identifier: A5:53:AD:A0:99:EE:D3:51:2A:AF:58:68:A9:EF:F7:77:84:95:8A:C7
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C8476E1E96121725213ED5540
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6c95d6d-add0-3f3c-adc6-6481bf89d4ca.roa
Signing time: Wed 14 Jan 2026 02:00:31 +0000
ROA not before: Wed 14 Jan 2026 02:00:31 +0000
ROA not after: Tue 14 Apr 2026 01:00:31 +0000
asID: 30036
IP address blocks: 108.166.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:84:76:e1:e9:61:21:72:52:13:ed:55:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 14 02:00:31 2026 GMT
Not After : Apr 14 01:00:31 2026 GMT
Subject: CN=eb6fc1d1-2990-43ee-a62b-762e5657d1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a8:53:74:d2:2c:6d:91:76:c1:26:53:30:e9:
79:48:8d:61:7d:fa:07:3e:5b:84:38:55:55:69:73:
f7:5b:6f:97:51:84:51:ad:1f:df:17:ea:7d:96:6b:
e1:75:6d:e9:9c:21:f7:3d:2b:b1:e7:98:b7:b7:fa:
80:ad:f3:75:ce:fe:db:b2:9e:24:9c:ef:45:1f:50:
11:5c:e2:8b:97:df:6a:35:62:20:09:8d:6e:ec:29:
ad:ba:b6:1c:06:ee:a4:5f:3d:93:11:fd:cc:b9:7e:
30:80:29:28:5f:1b:e0:79:2c:2d:e1:28:96:0f:08:
a3:97:ce:3a:9f:ba:fa:da:d2:a2:83:a1:3b:a8:34:
fe:6c:a7:9a:23:6f:91:3a:98:e9:6e:6e:2c:7b:1f:
7d:95:a4:08:fa:97:0e:80:cd:36:40:a2:fe:6d:78:
af:03:39:86:bf:59:c7:5e:7a:0a:42:c4:01:e4:00:
35:ce:e1:dd:6a:03:53:b3:85:1c:63:bd:94:d6:4a:
1d:42:90:dc:ab:2b:b7:b8:13:79:32:7f:cd:65:a3:
f6:e4:a3:2e:89:a8:72:31:91:50:7e:d4:a3:6b:21:
c0:2a:be:f0:b3:72:32:70:4f:6c:78:e7:5d:8d:fe:
34:6d:0b:9b:a1:d8:4f:4a:68:9e:53:ca:8a:d1:00:
db:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:53:AD:A0:99:EE:D3:51:2A:AF:58:68:A9:EF:F7:77:84:95:8A:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6c95d6d-add0-3f3c-adc6-6481bf89d4ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.166.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:15:d7:c2:d0:aa:67:c4:4b:a9:5d:fa:92:8c:7f:44:63:f3:
01:79:2a:33:ca:b2:e5:e7:81:d0:a7:bf:06:2f:79:ad:98:ac:
83:5f:95:34:e0:6a:4b:4b:6e:e8:2c:77:70:f0:e1:4e:fd:c7:
80:c1:24:5d:6c:cd:89:19:fb:a2:e1:b6:f0:ac:ff:9e:7f:d8:
c8:c9:6b:5c:8c:f0:70:c5:e9:64:be:12:d1:5e:2d:38:e5:9f:
bd:39:f9:1d:bb:94:0a:dd:25:4a:bd:8f:63:81:e7:a1:dc:80:
24:05:f5:9d:8d:d4:54:f8:78:24:64:e0:d1:5e:4c:5d:2f:41:
b1:ea:18:cc:a3:2e:f0:3e:70:1b:f4:48:73:49:3c:69:75:2a:
40:a1:a7:f6:a7:94:84:94:05:d5:03:4a:68:85:9b:43:0d:08:
10:e8:66:39:5a:93:a4:6f:36:74:9c:5b:da:de:31:77:18:dd:
0b:e2:3b:4f:59:5f:2f:2b:84:45:63:37:11:0a:0f:2e:b6:18:
52:04:d2:e2:43:bb:d3:52:09:60:5d:1b:a3:15:b6:04:e2:80:
c8:9f:17:90:97:f3:45:6c:e3:58:03:fe:87:c7:75:71:65:8e:
79:8f:cd:e5:aa:f0:33:fa:6f:b7:81:5d:f6:20:1e:6f:d2:6b:
09:a9:f2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:06 2026 by rpki-client