
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d8ba3bcd-92ce-310b-b29c-8e0adba88e4a.roa
File: d8ba3bcd-92ce-310b-b29c-8e0adba88e4a.roa (raw, json)
Hash identifier: bnzHv9HhgXH1XA9z+8nRBCzi57BvJIoz+AZoNqAmgug=
Subject key identifier: 34:2E:A4:57:29:0F:63:2D:17:7F:51:B8:5F:F2:89:1D:E7:4D:F9:BD
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C84770222060C7DFD5174B900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d8ba3bcd-92ce-310b-b29c-8e0adba88e4a.roa
Signing time: Wed 14 Jan 2026 02:00:31 +0000
ROA not before: Wed 14 Jan 2026 02:00:31 +0000
ROA not after: Tue 14 Apr 2026 01:00:31 +0000
asID: 30036
IP address blocks: 104.201.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:84:77:02:22:06:0c:7d:fd:51:74:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 14 02:00:31 2026 GMT
Not After : Apr 14 01:00:31 2026 GMT
Subject: CN=7f0b5fe2-730d-4657-a38c-908bcbc080fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d3:52:05:21:01:21:ab:73:d6:5b:70:72:5c:
69:d4:ef:48:ab:39:07:31:bc:e9:f0:0a:a9:f8:70:
3a:6a:52:d5:fb:3d:cc:f1:66:b3:e5:2b:92:c1:14:
20:d8:23:67:b7:38:c5:10:3d:aa:b7:a3:04:d9:3b:
18:1d:d3:67:f6:14:84:53:0d:95:6c:ee:a2:59:d8:
f4:1f:1a:7d:0e:b8:95:02:bc:d5:51:65:21:f5:6b:
48:ab:31:b5:b4:ad:b0:6f:24:17:b0:a3:61:87:df:
44:60:6a:2c:28:a9:bf:07:de:b2:9e:c3:8e:b2:3b:
d3:c1:15:2f:f6:0a:25:cb:cc:36:30:0b:b7:cb:46:
0a:ff:54:70:9b:98:e9:08:03:cd:1f:83:f4:85:97:
da:05:34:1c:87:3b:3a:ea:b1:5b:4a:3f:b2:61:83:
fb:55:6c:0f:4d:bd:e4:e1:dd:88:fc:60:a7:42:0f:
0f:e9:74:78:0a:2e:8f:1c:f7:0d:fd:c4:cd:c1:8a:
ab:86:30:f7:03:14:73:a6:ed:2b:03:fd:7f:3b:de:
c6:bb:ad:e6:aa:dc:cf:47:55:bb:5d:e6:12:94:41:
89:31:29:2f:06:82:ac:de:c4:95:2a:9c:98:11:a9:
15:9b:4e:c8:d6:1c:ca:bd:c2:1f:ae:5b:56:af:20:
b4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2E:A4:57:29:0F:63:2D:17:7F:51:B8:5F:F2:89:1D:E7:4D:F9:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d8ba3bcd-92ce-310b-b29c-8e0adba88e4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.201.92.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:1f:9b:d8:6c:df:96:42:00:79:b9:6c:5f:b4:a2:84:94:92:
78:c2:fb:85:1f:67:22:a4:f8:ce:8d:96:40:c0:da:89:67:6a:
9e:91:ff:1c:2f:84:68:df:7a:cc:55:60:7f:53:ca:9c:9c:67:
2f:48:4d:d4:97:a3:01:72:08:33:a7:17:f3:66:3e:87:91:cb:
47:69:27:f6:21:83:85:e7:e3:29:05:40:b8:81:ed:31:64:17:
a7:94:b6:45:9c:fb:2d:1b:45:a0:b2:74:2d:85:e0:42:f4:80:
63:8f:70:4b:90:1d:0d:5f:d7:31:1e:6a:37:f4:cc:e3:d7:d7:
e8:a6:ca:0b:3d:1f:de:e7:64:f4:78:67:42:75:d3:6d:f2:67:
19:be:bc:71:2c:5c:9c:93:d8:d1:52:72:4e:1b:04:e3:06:d1:
af:2b:86:10:ba:9c:8b:69:81:ae:f0:43:26:46:ad:2d:84:ec:
14:03:1f:a3:14:45:68:3b:66:a6:0a:9c:e0:d4:ba:c6:50:ce:
27:5e:af:6a:04:f3:04:28:40:64:3f:58:08:51:a7:ba:c7:0a:
9c:fd:04:4c:41:04:c4:b7:ca:78:6c:5f:a3:78:af:4d:2e:d3:
8b:f4:ac:36:cf:50:34:03:e7:ad:19:df:6c:ff:87:56:cb:36:
43:25:0e:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdwIiBgx9/VF0uQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk
N2YwYjVmZTItNzMwZC00NjU3LWEzOGMtOTA4YmNiYzA4MGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9NSBSEBIatz1ltwclxp1O9IqzkHMbzp8Aqp
+HA6alLV+z3M8Waz5SuSwRQg2CNntzjFED2qt6ME2TsYHdNn9hSEUw2VbO6iWdj0
Hxp9DriVArzVUWUh9WtIqzG1tK2wbyQXsKNhh99EYGosKKm/B96ynsOOsjvTwRUv
9goly8w2MAu3y0YK/1Rwm5jpCAPNH4P0hZfaBTQchzs66rFbSj+yYYP7VWwPTb3k
4d2I/GCnQg8P6XR4Ci6PHPcN/cTNwYqrhjD3AxRzpu0rA/1/O97Gu63mqtzPR1W7
XeYSlEGJMSkvBoKs3sSVKpyYEakVm07I1hzKvcIfrltWryC08wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDQupFcpD2MtF39RuF/yiR3nTfm9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDhiYTNiY2QtOTJjZS0z
MTBiLWIyOWMtOGUwYWRiYTg4ZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUfm9hs35ZCAHm5bF+0ooSUknjC+4UfZyKk+M6NlkDA2olnap6R/xwv
hGjfesxVYH9TypycZy9ITdSXowFyCDOnF/NmPoeRy0dpJ/Yhg4Xn4ykFQLiB7TFk
F6eUtkWc+y0bRaCydC2F4EL0gGOPcEuQHQ1f1zEeajf0zOPX1+imygs9H97nZPR4
Z0J1023yZxm+vHEsXJyT2NFSck4bBOMG0a8rhhC6nItpga7wQyZGrS2E7BQDH6MU
RWg7ZqYKnODUusZQzider2oE8wQoQGQ/WAhRp7rHCpz9BExBBMS3ynhsX6N4r00u
04v0rDbPUDQD560Z32z/h1bLNkMlDnI=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:39:32 2026 by rpki-client