
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa
File: ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa (raw, json)
Hash identifier: pGTWal8m5RnrLcrRJTTjo5EQ0z5367YovbZ5Tlnv4s4=
Subject key identifier: 28:B8:FF:0A:B2:CC:87:F2:D6:73:F6:1B:AB:07:86:F8:B6:AE:85:88
Certificate issuer: /CN=a5ffb160-7d08-4282-966a-137e7328c1b0
Certificate serial: 010D0C9F4328584D300A58C87DAE64874840D05C
Authority key identifier: 3C:2E:40:AC:19:47:1C:23:8C:42:39:6E:D3:35:EC:B6:BB:E5:D6:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 63330
IP address blocks: 104.222.64.0/20 maxlen: 24
2605:e580::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 18 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:58:c8:7d:ae:64:87:48:40:d0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ffb160-7d08-4282-966a-137e7328c1b0
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=a20953a8-234c-4d5e-96e9-7bd186cc539c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3d:73:f3:fe:eb:1c:1e:97:c8:50:79:2e:9e:
41:57:2a:80:51:69:2a:17:84:f5:3d:8f:6f:4a:e4:
f6:6a:39:bf:0c:76:c2:b9:3e:80:49:58:81:12:b1:
17:b4:ed:be:1f:41:6a:56:c4:4d:84:23:c1:44:2f:
aa:b6:4a:2e:05:94:b2:21:2d:8e:4b:ec:7e:4d:9b:
cd:ba:47:e0:2c:0f:7e:6f:97:a9:4e:5b:10:eb:87:
03:8a:6c:7e:64:81:81:d7:49:b9:77:9c:65:fb:9c:
4d:60:be:95:c8:9a:4d:3e:a1:8c:1e:8a:6b:82:27:
10:45:ec:8a:b2:76:5d:66:f2:76:28:eb:b2:fd:e0:
3a:ef:42:9f:d4:2a:a4:e9:91:6d:a6:33:7c:11:ea:
7f:3c:fb:6f:a5:a1:cd:d6:e4:4a:b3:78:97:25:89:
0f:43:e4:39:ea:45:2c:58:25:bd:76:4a:34:2e:8e:
bc:dc:08:fe:d7:06:14:b7:d2:43:c0:5f:9e:a9:b2:
2d:0e:18:f9:bb:6c:55:cd:14:1b:2d:54:06:6d:7f:
a0:b2:6e:e0:12:40:7d:2e:53:b6:ff:5c:2e:d8:ca:
4d:2c:e8:e9:96:1b:b6:8c:7a:48:75:24:ff:8d:b7:
5f:cf:e9:92:9e:6a:42:58:03:80:a3:4c:73:5c:c8:
8f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B8:FF:0A:B2:CC:87:F2:D6:73:F6:1B:AB:07:86:F8:B6:AE:85:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.crl
X509v3 Authority Key Identifier:
keyid:3C:2E:40:AC:19:47:1C:23:8C:42:39:6E:D3:35:EC:B6:BB:E5:D6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer
sbgp-ipAddrBlock: critical
IPv4:
104.222.64.0/20
IPv6:
2605:e580::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:f7:a6:cf:b4:26:0e:20:a0:5e:57:c8:bb:ca:a5:23:ea:91:
fb:35:66:23:9f:46:d6:6b:cb:1a:8b:c8:18:28:43:cf:24:13:
5b:39:9c:f6:65:75:30:c5:5c:47:82:d7:a0:ff:49:dd:d3:71:
2a:1b:8a:25:fa:e2:ba:bd:ef:45:f1:82:02:b9:bb:4a:85:ed:
77:20:1f:53:1d:66:0d:f2:85:61:00:d9:45:99:e2:71:11:3f:
41:cc:5e:51:b6:c6:f6:fc:15:fa:08:90:b1:c7:e9:7b:1f:70:
f4:10:5d:43:79:f8:9a:84:b2:1b:ad:6c:95:2b:31:9c:f5:8f:
39:9f:14:69:63:63:f7:83:4f:46:ed:36:aa:25:16:78:91:8c:
85:47:2f:70:1f:a6:b5:e1:ef:a5:67:cb:49:03:43:30:4e:96:
ab:1f:65:cc:58:b9:5b:04:40:d2:48:fb:26:b3:57:2d:a2:c1:
50:ce:7b:b0:af:34:f2:9b:28:40:b0:45:8c:a2:b7:24:af:af:
cf:52:3e:76:bc:a6:e3:2b:4b:74:8a:34:18:0f:87:cd:23:07:
de:99:29:c1:f3:79:99:dd:c2:78:84:de:67:50:72:b7:27:c2:
94:8f:28:d2:53:58:01:04:db:e6:a9:fe:77:77:7d:b7:c7:02:
ca:bd:87:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 00:40:30 2026 by rpki-client