
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/deb5b47b-58f8-3d71-96be-d093db3221c5.roa
File: deb5b47b-58f8-3d71-96be-d093db3221c5.roa (raw, json)
Hash identifier: 6+xci3WWwIfcaDFJair1Xw82oGKjPqQhs9k30DZw2Og=
Subject key identifier: 97:A9:B3:5D:EC:A6:08:10:00:6F:F4:BA:3C:68:DB:83:65:E2:36:F0
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584F00DCCC544E64A91F4D30E400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/deb5b47b-58f8-3d71-96be-d093db3221c5.roa
Signing time: Sun 30 Aug 2026 01:00:12 +0000
ROA not before: Sun 30 Aug 2026 01:00:12 +0000
ROA not after: Sat 28 Nov 2026 02:00:12 +0000
asID: 30036
IP address blocks: 108.161.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:00:dc:cc:54:4e:64:a9:1f:4d:30:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Aug 30 01:00:12 2026 GMT
Not After : Nov 28 02:00:12 2026 GMT
Subject: CN=ed3d1979-e2a9-4402-991d-032f52c3bd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:79:a4:12:08:be:e3:c9:2e:33:76:e9:da:
94:bf:2f:68:cf:59:d5:f0:bb:ab:5b:83:ec:f3:ac:
b1:a6:e7:34:00:f5:d4:70:9a:39:0a:27:5f:45:6d:
17:ba:30:56:e3:df:ee:34:59:19:f5:76:ee:0e:9d:
c5:de:81:02:00:6c:b4:a9:cc:d1:89:2c:b6:00:98:
2e:4e:4e:df:3b:7b:3f:d6:9d:f3:aa:c4:ff:19:18:
d0:8c:59:7c:ba:d8:71:4a:57:21:37:ae:d3:07:ba:
31:eb:64:2a:5e:5a:da:0e:4b:ca:c6:e3:3c:b1:bf:
d7:ed:71:46:d1:09:8c:00:33:1e:61:e5:94:5a:61:
7a:90:59:21:9b:8b:bc:28:03:2e:b0:ab:77:35:c5:
65:3a:f8:1a:d3:ae:07:d2:16:8c:56:9f:16:17:d3:
43:3c:85:d9:69:5b:f0:bd:ac:58:55:ff:a5:ee:b4:
9c:41:cb:14:c8:bc:8c:18:08:11:37:1f:86:e0:15:
b9:64:c3:25:61:ed:3d:7d:66:30:70:27:cd:14:fd:
7f:f6:09:b8:7b:7b:e4:b3:a5:a4:c5:ba:ca:f3:0d:
34:4a:7a:6a:c3:aa:5e:3e:5c:a1:d7:f1:0a:48:d9:
36:ff:ee:c4:1e:9a:54:7f:12:41:62:05:6f:d6:b4:
1c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A9:B3:5D:EC:A6:08:10:00:6F:F4:BA:3C:68:DB:83:65:E2:36:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/deb5b47b-58f8-3d71-96be-d093db3221c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.161.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:09:08:e6:1a:95:38:f7:98:1d:96:92:2c:52:95:5e:4e:bc:
04:a1:fc:32:c3:69:0a:c0:0c:02:0e:80:86:6f:b4:a8:dc:77:
30:fb:89:d9:05:03:7b:0a:b0:2b:7a:e8:78:d0:14:b6:25:98:
90:5b:52:af:d5:e3:cd:4b:c1:70:9d:33:12:58:27:99:0c:6d:
94:6d:0f:41:7b:1b:5d:f5:f0:45:f0:b8:43:e8:3c:46:7f:c3:
7b:47:41:76:3e:db:9f:3d:a8:f2:ed:99:43:b3:d2:b7:25:78:
81:83:58:1d:88:fa:8a:fa:f4:5d:93:0c:2a:6e:0e:5d:bd:51:
03:99:be:d7:d2:8e:2a:2d:18:7b:49:97:0f:8d:19:44:9a:11:
13:74:af:38:be:d5:12:c4:f8:fa:f7:d7:77:df:77:83:28:58:
69:97:b3:39:2b:34:e7:6b:58:cc:05:7d:5e:61:33:72:e3:52:
a8:b4:85:74:c2:7a:7d:8f:68:2a:9e:82:8e:da:74:42:77:ea:
f0:04:b2:56:31:cc:51:0b:32:88:6a:d7:77:7c:d6:33:c9:f5:
c9:7f:26:93:89:7b:b5:c3:fe:ba:4d:d7:29:5a:80:f0:d1:d3:
ac:2c:4f:e7:33:c4:bf:78:fe:f2:7d:f6:45:f1:0a:d6:56:dc:
43:d7:b6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:31:13 2026 by rpki-client