
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4970289e-0c50-35cd-a171-04bce26a0a5c.roa
File: 4970289e-0c50-35cd-a171-04bce26a0a5c.roa (raw, json)
Hash identifier: /oULtCrFf1TSshDT3gXMlkk/YfsCC/Ij0X7HK3Tlrm8=
Subject key identifier: 82:AA:61:F6:8F:74:62:17:72:AC:E3:C1:7E:DA:62:F8:47:5A:41:1B
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584EB2B1F8BA5165F28543492F90
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4970289e-0c50-35cd-a171-04bce26a0a5c.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 19905
IP address blocks: 2604:2e87:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:f8:ba:51:65:f2:85:43:49:2f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=4ed036e4-1d33-4f40-a110-85c83de7a19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:fc:8f:0c:34:a1:5b:74:6b:c6:47:96:87:
15:d6:85:ba:3d:c9:1d:8b:fa:81:b4:16:e4:90:7f:
28:01:8e:de:79:5f:61:e6:53:44:8e:6d:8f:ef:49:
92:1b:da:d3:31:27:19:79:49:a7:b5:f2:15:82:05:
c9:3a:d7:73:25:7e:e1:25:31:15:1d:c5:bd:70:98:
b2:ce:5c:14:ef:76:f9:02:56:2d:9a:f8:87:75:90:
7c:78:19:17:f0:de:65:a1:c1:72:1f:c3:92:bc:50:
dc:60:49:6f:e1:85:6c:75:84:6f:27:fd:3d:31:de:
62:d1:bf:56:71:be:b5:ca:df:38:f1:09:1f:37:51:
f4:9f:2a:d6:9e:2f:36:36:91:16:97:62:67:93:50:
fd:bf:6a:ce:08:78:62:d9:cd:63:38:bb:2a:d0:ff:
c5:50:0c:5f:eb:ef:b2:b9:e3:c1:69:f6:61:1b:db:
18:0c:15:6d:22:8b:da:6c:8b:de:af:83:09:31:3c:
fe:ce:e1:d8:bd:76:b3:81:e4:99:b3:7d:4e:93:08:
c3:15:f2:be:f8:8e:12:51:75:0c:26:c0:9d:f0:16:
f6:b7:d8:84:21:6e:58:07:d6:65:5f:8d:ed:c8:87:
09:f5:70:50:4f:9e:d0:7a:88:37:e2:fc:8a:bc:5f:
16:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AA:61:F6:8F:74:62:17:72:AC:E3:C1:7E:DA:62:F8:47:5A:41:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4970289e-0c50-35cd-a171-04bce26a0a5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e87:c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:5b:36:36:34:5f:8b:5a:8d:77:d9:6a:63:4a:0c:2f:55:31:
22:f4:f6:bc:48:ef:30:0f:b0:0a:bd:9e:86:23:39:4c:66:f5:
5b:c5:8a:76:44:06:94:1d:1d:d4:4a:d0:b2:eb:2d:3b:c2:33:
21:84:62:b3:d5:1c:c9:82:94:09:c8:96:88:67:39:0c:9e:72:
85:61:82:33:a8:90:93:59:52:9b:92:ec:a8:a7:a2:90:98:b7:
fc:fb:17:b6:2b:a3:4d:4e:b0:f7:88:15:47:1a:12:ac:89:33:
66:b8:60:18:e7:fd:71:09:3d:30:82:bb:c4:2e:f2:02:62:52:
13:92:e9:76:e8:b2:fd:cf:bc:39:ec:2c:f6:19:24:4c:a9:d2:
76:4b:d2:2f:53:90:1f:cb:27:29:64:ef:32:1f:04:4b:fb:11:
fe:3f:70:51:6d:05:30:89:9f:4e:dc:37:6d:20:14:18:e1:04:
34:e9:d6:7c:07:93:76:23:b8:2f:e3:ec:0f:75:c8:ba:08:81:
38:93:0c:b2:8b:b5:ef:b1:5b:8b:76:f6:91:ba:54:0b:e6:c9:
4e:1a:dc:8b:c1:d4:d8:63:d3:c9:58:2b:8a:36:fb:4b:b2:5a:
4f:d6:ba:dc:22:9b:5a:2a:25:6b:fb:33:e6:29:b5:12:7d:d7:
b2:1d:79:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:09:52 2026 by rpki-client