
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/27c11b31-985a-3cac-bcde-ec5d4aa99b08.roa
File: 27c11b31-985a-3cac-bcde-ec5d4aa99b08.roa (raw, json)
Hash identifier: cVdfe3GF0EfJbY1nk13yLxkuraSpBCewYp/cBcN50wI=
Subject key identifier: 30:D9:DE:C5:54:13:91:17:CD:47:E6:06:95:E3:6A:90:80:5F:E7:9F
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584E4559E719776799B03A705128
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/27c11b31-985a-3cac-bcde-ec5d4aa99b08.roa
Signing time: Tue 23 Jun 2026 21:00:12 +0000
ROA not before: Tue 23 Jun 2026 21:00:12 +0000
ROA not after: Mon 21 Sep 2026 21:00:12 +0000
asID: 30036
IP address blocks: 104.201.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 25 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:45:59:e7:19:77:67:99:b0:3a:70:51:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jun 23 21:00:12 2026 GMT
Not After : Sep 21 21:00:12 2026 GMT
Subject: CN=1a21858a-5469-4863-ac38-600dc7b0cb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:96:de:c6:66:2a:3a:05:a2:a4:c6:6d:fc:39:
61:3a:b1:6a:0f:5e:10:75:4b:c1:b5:5b:eb:59:4f:
36:70:06:08:72:3d:6d:b3:af:54:7a:61:8b:38:46:
8b:79:8a:6e:44:c6:48:67:36:7a:38:10:0f:d5:67:
50:9b:2a:2f:7b:c4:29:85:6d:1a:c5:f1:2e:cd:14:
b5:49:99:98:09:d6:a4:38:22:4d:69:2a:9d:17:63:
42:96:1a:6f:c7:0d:f1:44:24:3f:21:48:0b:06:59:
4f:da:6e:11:3b:b8:89:41:5b:39:53:39:b9:73:26:
ab:9d:e9:46:63:9c:75:97:55:df:02:b7:98:81:91:
7e:dd:96:0a:8d:f0:96:02:f3:cf:bd:85:bb:e3:31:
98:4b:89:32:e6:f0:3a:e0:db:ab:b9:29:1f:b4:cc:
93:f6:c6:0b:d3:c1:2e:95:60:82:6e:cb:fa:62:d4:
f0:0c:9b:71:cc:e0:66:6b:09:5f:08:b7:9e:5f:17:
0a:ba:ed:8c:68:76:7d:11:0a:5e:ea:c2:18:2a:93:
5e:fb:0d:d6:87:51:cb:ba:1e:34:1a:1a:95:fb:18:
68:ac:3a:14:9f:8b:e8:55:1c:2c:27:e8:68:4d:1c:
ad:c3:ce:d7:87:c7:90:fb:6f:32:91:37:04:ae:ed:
fe:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D9:DE:C5:54:13:91:17:CD:47:E6:06:95:E3:6A:90:80:5F:E7:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/27c11b31-985a-3cac-bcde-ec5d4aa99b08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.201.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:5c:dd:6c:68:82:48:13:0a:ac:48:6d:cd:1c:f5:cf:3a:17:
5c:cf:07:9f:52:22:ce:05:6b:dc:19:ed:01:50:ad:e5:9c:01:
f6:40:92:01:5d:df:43:3c:d1:4f:2c:bd:a5:94:40:5a:a8:a1:
b4:8a:6c:aa:44:f2:6c:3c:0b:dc:44:09:14:3f:d0:59:8b:78:
6e:54:b2:ae:44:65:93:47:04:5e:96:e6:b2:76:fc:75:96:3c:
d7:28:44:7d:77:d9:ff:76:f2:d9:9c:d3:37:7d:52:37:2e:5c:
62:9d:4f:56:be:d1:12:c1:83:2f:0d:26:60:e3:ec:74:9f:1a:
67:69:09:69:af:12:55:19:e6:fe:5b:1c:79:f4:73:dd:f2:00:
61:aa:b8:29:05:a7:94:86:c7:a1:ad:5b:1e:f4:58:df:fb:ee:
25:91:85:1f:84:da:86:5a:a1:fe:69:c8:ed:84:6a:56:07:45:
fe:7d:91:e6:92:17:3c:01:ed:63:e7:96:da:0b:d0:f1:2b:6e:
be:4d:62:fc:da:66:13:2c:4f:63:dd:a0:75:38:10:47:fe:12:
1e:ba:33:06:7a:86:01:d8:40:0c:5a:d0:1e:4f:c1:fd:f1:dd:
5c:57:fb:c9:ec:da:d6:77:db:43:c4:09:fa:ac:32:8e:ca:2d:
1c:2b:b5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:18:00 2026 by rpki-client