
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a816672-e581-3dea-87ab-1013b6c94457.roa
File: 2a816672-e581-3dea-87ab-1013b6c94457.roa (raw, json)
Hash identifier: fCtAn7285CXnnwZmMyubeOQZznMs5nKXsenRwimVMfY=
Subject key identifier: 19:32:89:4A:26:E2:21:0F:45:8A:B4:C1:61:95:5A:69:75:51:22:12
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D300A1B5AB4341E05132D6480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a816672-e581-3dea-87ab-1013b6c94457.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 19905
IP address blocks: 64.237.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:1b:5a:b4:34:1e:05:13:2d:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=fd3778c9-2298-480e-b55f-2e0c5c9065c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3c:34:cb:4d:11:9c:46:08:51:ff:bc:c7:be:
35:c6:62:46:dd:de:3e:3c:8c:6b:ad:9b:f7:d5:5c:
8c:eb:2b:c6:f3:26:23:c3:eb:1c:11:33:33:75:3f:
aa:24:19:d2:13:79:2d:f9:f6:9b:0b:14:0d:70:66:
20:52:83:d4:e2:f3:96:de:7f:51:b0:1f:34:a0:7d:
ee:83:24:a4:d4:f6:b7:bc:7e:f0:83:78:57:f8:63:
df:a7:e9:32:1f:0d:71:3f:8c:c7:b2:45:e6:e5:05:
4f:d3:61:d0:a5:af:3b:3e:2c:44:70:aa:04:1c:af:
f5:55:ce:36:4c:b8:78:b9:5e:16:dd:44:8c:57:82:
f1:ec:bb:fc:69:91:a0:19:51:e5:b8:a9:3f:0a:7a:
bf:f5:0e:e7:7c:a9:a3:92:bb:a4:a4:be:06:de:9e:
b5:42:f5:f2:29:0b:0d:18:a8:52:38:43:41:a7:6c:
e9:0a:ea:e0:75:f4:11:90:fc:27:c8:a7:ed:50:46:
94:59:db:a5:2d:e7:a8:b0:08:f7:51:f7:5b:c6:0c:
12:97:4e:7d:86:b4:cc:60:e2:77:5e:bc:a0:b9:f3:
c0:6c:f2:8c:7b:be:f4:f4:c8:64:05:ef:fa:3a:f6:
00:81:af:76:f4:3f:01:65:49:75:84:2e:a5:95:42:
6e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:32:89:4A:26:E2:21:0F:45:8A:B4:C1:61:95:5A:69:75:51:22:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a816672-e581-3dea-87ab-1013b6c94457.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
64.237.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:3b:35:ce:a3:97:08:4b:df:c7:ae:74:3d:fc:8d:38:46:8b:
81:ec:e7:7d:ed:20:c0:98:f8:f0:50:e7:e2:7e:f5:72:15:62:
27:fd:2b:a6:ce:65:1e:23:1a:3d:8e:24:81:97:0d:7d:c8:fb:
b7:f2:31:6b:9d:d4:31:27:fa:25:6a:cf:b0:cd:3e:a9:e5:86:
f4:63:29:7f:51:4f:bc:02:64:85:e2:94:cf:0b:8e:b2:bd:4c:
82:e9:32:b4:af:49:d7:83:f0:af:e4:42:cb:1c:37:7c:be:f3:
64:11:6e:d7:9d:dd:38:23:9d:4b:e0:41:63:ce:0d:35:71:b5:
02:aa:7e:b5:14:ac:57:6f:98:ee:74:a3:17:8c:2c:b6:9b:8f:
b4:ef:fd:d6:3b:66:d5:73:70:dd:c6:54:d6:64:a0:6f:ce:15:
17:ed:70:03:01:23:55:b0:61:25:dd:ba:10:aa:9a:04:43:46:
b0:c3:b4:8f:42:b1:48:30:27:fb:48:4b:44:66:9d:93:d1:2d:
3d:00:cb:98:47:54:32:d1:c6:b0:b0:bc:8c:fe:de:7a:dc:db:
2a:c7:f8:dd:12:31:ff:24:ec:6e:c5:7e:31:7d:b2:c9:bb:28:
d1:53:67:63:2a:99:e1:c2:fd:34:48:75:d8:44:30:74:37:18:
17:bc:1b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:18:14 2026 by rpki-client