
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/617ccb52-509b-3202-925b-62a7e44758f2.roa
File: 617ccb52-509b-3202-925b-62a7e44758f2.roa (raw, json)
Hash identifier: 4xQEc7a0ABuw4WRxPd2TG5OctG8cJisn3ExTKJKjHuo=
Subject key identifier: 5F:76:54:FA:14:A7:AE:FD:87:7D:78:E3:40:55:C8:FC:AA:02:E0:39
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584EB2B200584D068F769326F500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/617ccb52-509b-3202-925b-62a7e44758f2.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 30036
IP address blocks: 108.161.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b2:00:58:4d:06:8f:76:93:26:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=aa68da50-69d8-4689-9171-25dd83a2fdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9b:be:95:a3:f9:e1:e7:03:31:d0:e6:e6:96:
14:59:98:11:a2:35:01:52:f8:19:52:a7:73:c6:19:
8a:01:0c:49:b7:30:66:63:0e:0d:a1:c9:d1:cb:7b:
81:08:7d:86:dc:e7:ba:17:d3:0f:83:79:70:6c:94:
9c:89:12:9e:08:45:98:d7:35:f6:89:b0:d3:ff:26:
58:8a:81:3d:48:ee:c3:56:79:d3:d7:50:eb:5f:fe:
07:cd:5b:11:12:53:00:c3:21:99:a0:d6:e5:5a:27:
c4:6f:13:8b:cf:dd:34:03:72:8c:2d:a2:cc:39:ce:
a3:e1:0a:6a:cb:f9:f8:9e:00:ca:ff:74:65:ee:b1:
e1:53:03:b9:67:48:17:c3:a4:b6:03:d7:3e:a9:b7:
fe:b2:2c:27:dc:d6:26:d7:13:93:ba:9b:19:1b:db:
3c:8c:08:ac:94:f4:e5:14:80:36:7c:4b:d8:71:a3:
3f:85:2c:a0:98:df:fb:ac:db:8b:84:68:eb:bc:8f:
55:ac:aa:f2:e0:43:be:5b:d9:31:4d:5a:c9:7e:07:
83:b0:47:78:0c:ad:0e:61:49:6c:fb:11:c5:8c:ee:
db:66:29:07:1b:98:d7:bf:39:58:99:b3:02:2d:b5:
b6:2e:39:58:2b:1c:e6:43:d7:ea:69:7b:8f:96:88:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:76:54:FA:14:A7:AE:FD:87:7D:78:E3:40:55:C8:FC:AA:02:E0:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/617ccb52-509b-3202-925b-62a7e44758f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.161.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:fb:37:f0:b4:34:03:c8:30:6f:33:44:32:8c:a9:62:45:50:
cb:72:4e:46:e0:5e:ee:fc:14:55:f1:5a:e3:49:ef:12:0a:c8:
57:a8:15:f6:58:95:34:86:f8:8d:30:65:28:25:82:9f:9f:34:
a4:9c:42:46:20:f1:e6:89:90:38:0d:7a:87:ad:9d:16:90:a0:
c9:30:3b:20:b5:22:26:e8:1e:f0:9b:af:e9:5a:ea:c3:81:ed:
c3:c6:92:6b:67:67:42:33:83:76:1c:cf:b3:ad:d2:63:bc:c2:
7e:b6:57:e8:e0:38:eb:da:ab:59:4e:ef:bc:58:33:2c:50:4f:
1a:9d:4e:44:84:27:a6:cc:e4:f6:4c:af:c5:cf:c7:ea:30:dd:
c1:4b:b5:e3:a3:c0:f5:80:54:4f:e4:d4:16:e7:ab:4c:93:5d:
17:52:62:c2:5b:3a:27:74:d4:bf:b7:30:c7:bb:fc:3d:3f:aa:
24:ab:5c:a4:3a:4f:de:16:29:af:cd:bc:ee:97:f6:84:24:84:
41:cc:c7:b5:3e:66:19:29:f6:7f:bc:bf:aa:00:46:cd:12:48:
5c:a2:da:e7:b8:0f:69:16:47:19:e3:16:74:81:d9:3e:9d:32:
d4:7f:2e:87:a9:92:f8:a8:4a:60:03:41:23:9b:97:45:ec:3e:
cf:21:12:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:47:43 2026 by rpki-client