
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1921432b-b80a-3639-b12a-3f80e5fcfda8.roa
File: 1921432b-b80a-3639-b12a-3f80e5fcfda8.roa (raw, json)
Hash identifier: 5iXdFYBV4dgfqh/T57MtEQw9NmStpzCK5NY6P09P0f0=
Subject key identifier: 00:F1:56:9F:F5:FD:2C:64:C5:78:E2:D7:45:47:13:9D:96:BE:DC:99
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584DB10B3B6B91F545465A6F3E40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1921432b-b80a-3639-b12a-3f80e5fcfda8.roa
Signing time: Fri 01 May 2026 18:02:17 +0000
ROA not before: Fri 01 May 2026 18:02:17 +0000
ROA not after: Thu 30 Jul 2026 18:02:17 +0000
asID: 19905
IP address blocks: 2604:2e8a::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 10 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b1:0b:3b:6b:91:f5:45:46:5a:6f:3e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: May 1 18:02:17 2026 GMT
Not After : Jul 30 18:02:17 2026 GMT
Subject: CN=fa94101b-11c7-4156-aa3d-5817392ea21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:af:ea:86:55:a8:12:d2:bb:5f:b3:62:a1:bd:
25:13:89:7e:31:09:73:f9:d7:c9:d3:70:65:04:ea:
82:13:c7:28:49:84:7d:5c:7c:4d:6e:72:6d:c6:c9:
e0:bd:0a:2c:8c:68:21:0b:6d:70:95:32:84:17:88:
43:32:a8:cf:44:a4:17:81:df:07:9e:b0:a7:37:d5:
a9:1f:0c:90:37:84:7a:99:c3:9d:6e:4e:ac:43:49:
ce:d2:d7:70:f9:11:50:ea:4e:38:24:ab:7b:b6:82:
fe:d8:13:40:a9:8a:0f:0f:90:57:ba:50:7d:b9:6a:
79:99:19:cd:bd:e6:61:7f:d0:e5:b2:df:78:e8:5e:
b3:89:76:04:c6:31:fb:93:87:41:99:92:e5:ef:de:
86:bc:a5:ed:3a:73:93:e4:3f:30:55:76:18:29:98:
a1:89:ae:ce:3f:49:66:20:b5:ad:5e:ad:49:30:15:
46:96:29:09:c8:68:b4:3f:59:34:27:65:5d:18:99:
69:ca:12:93:fe:69:16:e0:f9:0b:d6:d8:61:44:ad:
0a:2b:7f:4e:cd:83:f2:40:a0:29:fb:45:c5:0d:ef:
22:7d:a2:f3:54:8c:dd:b2:59:f3:bc:00:fa:3a:d0:
13:a8:27:4d:5d:13:dc:7b:d3:de:9d:1d:a0:8d:b4:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F1:56:9F:F5:FD:2C:64:C5:78:E2:D7:45:47:13:9D:96:BE:DC:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1921432b-b80a-3639-b12a-3f80e5fcfda8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8a::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:c2:c9:ca:db:97:25:54:06:3e:91:59:3f:13:b9:e3:17:79:
53:41:6a:78:7e:56:17:b4:0d:0b:3d:6b:f1:4f:bd:fb:56:43:
6c:67:7b:ef:79:ee:82:9d:41:48:5e:12:2a:67:32:d0:3a:1b:
0a:7e:f0:13:be:4c:93:c8:16:78:d0:56:ce:5f:6b:36:f6:c4:
9d:b9:4b:46:b5:6c:23:ee:6b:64:c7:ab:c7:43:62:59:e4:c2:
19:43:f3:77:06:ec:4f:20:57:3b:f2:8f:03:87:f2:07:bb:ae:
53:91:7f:bd:64:b0:6a:81:14:0d:9c:30:37:ea:f9:cc:6f:9e:
d9:a4:b6:c0:83:d1:75:6a:53:48:18:f0:30:30:5a:1b:f3:20:
00:b5:c7:8e:c4:93:92:dd:19:b1:9c:53:f9:be:45:9e:84:29:
05:18:ee:f3:32:61:86:61:05:f1:29:5e:b5:ef:fa:0f:91:d4:
0a:7a:3c:d3:87:f8:27:dc:84:e4:ad:8c:eb:10:69:62:5a:9e:
64:86:e3:f9:dc:3b:4b:92:a2:d8:42:1c:13:c3:52:3e:6e:04:
82:d4:65:84:7a:32:cf:d3:03:08:65:6a:87:b2:e3:d2:41:fb:
00:ec:3c:f7:f7:a3:32:c4:64:3f:9c:e5:7a:97:39:f1:1b:2b:
7d:eb:3c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 20:25:59 2026 by rpki-client