
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5ef5fa-92ac-3942-a60e-326f9dda3901.roa
File: 4a5ef5fa-92ac-3942-a60e-326f9dda3901.roa (raw, json)
Hash identifier: nKnirZUwzi1LfhkYHFiCzBcL2YzAw42O66wnVQ7RcxM=
Subject key identifier: FA:24:A3:DA:20:C9:0C:1C:30:40:B5:25:E1:D8:79:5B:3C:66:01:D4
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584EA79D169AD77C338C2A76DFC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5ef5fa-92ac-3942-a60e-326f9dda3901.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 30036
IP address blocks: 2604:2e8e:2c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:16:9a:d7:7c:33:8c:2a:76:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=0659eff9-e8d6-4431-9cc2-0f10e765d836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d3:28:f1:2e:d6:32:7d:05:00:65:b2:4a:8f:
a2:b8:a4:88:13:69:e4:14:2c:d6:e2:9d:f5:cc:a0:
b1:f2:4d:0a:35:9a:bd:1f:63:54:f2:94:13:19:51:
28:dd:94:4f:53:e3:29:39:82:1f:28:f0:69:1d:fb:
5d:12:ee:d7:1c:82:b6:83:1b:28:e5:03:e1:1c:11:
e8:90:8e:51:64:14:dd:35:ce:50:70:d8:b2:ee:c4:
a3:61:6b:3f:f9:3b:9d:56:fe:60:1f:65:1c:4c:19:
c8:62:ea:07:57:5d:15:8f:f6:c9:45:1a:2f:f1:aa:
e5:ae:2f:5d:de:f1:f6:0d:31:26:5a:44:a3:20:d2:
e3:2a:c0:a8:0e:2d:c7:d9:12:84:77:a5:5b:b2:01:
20:c4:e5:85:00:10:be:29:b0:48:96:9c:fd:19:d2:
1b:24:1d:22:08:3e:d4:77:72:f8:3e:ff:61:ab:4c:
c8:8e:2f:5b:d5:d4:dd:6e:0d:73:d2:8c:12:af:6b:
48:64:5b:b9:67:86:52:52:58:a5:6e:3e:1f:2f:8a:
a1:14:ee:40:ee:a0:2e:60:c9:96:ee:be:d9:56:9d:
b1:f1:9f:ad:e4:48:9c:81:d5:99:d2:85:bd:89:51:
1f:3c:04:9d:69:e8:d1:ea:90:59:11:3f:fa:06:50:
2e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:24:A3:DA:20:C9:0C:1C:30:40:B5:25:E1:D8:79:5B:3C:66:01:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5ef5fa-92ac-3942-a60e-326f9dda3901.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8e:2c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:70:42:7e:ad:6d:ff:b2:c8:0c:33:a7:aa:49:e9:dc:f2:5b:
b9:32:e7:d8:04:61:45:77:cf:69:ee:48:35:f6:ff:89:f0:83:
ef:da:5f:fa:14:36:25:ab:ee:f4:3d:ab:7d:62:e9:7f:e6:30:
37:38:6b:f7:39:98:15:1c:84:01:d5:b9:0c:f8:52:cb:41:06:
89:78:0a:98:15:fe:18:25:4f:1c:0f:65:1b:0f:54:ab:dc:79:
86:3a:29:65:49:69:2a:69:ef:8f:2e:ff:b1:99:19:18:77:66:
2e:97:00:41:10:d6:b6:da:d9:88:b0:15:d9:fa:9e:17:6a:30:
5c:66:6b:a5:7e:8d:aa:6e:5a:06:77:27:75:35:d9:9c:b7:91:
ee:72:73:eb:34:a9:41:c8:1e:48:99:51:fb:8a:95:eb:45:91:
34:1e:cf:1f:19:c4:78:0d:83:86:6d:e8:ad:b8:96:90:f2:db:
8d:09:ad:0e:bc:1b:b3:3c:75:8e:de:95:19:ea:68:20:b9:d0:
e5:26:30:84:ef:66:b9:33:09:43:f6:41:d9:51:3b:4c:d1:db:
3a:6c:12:c2:a7:79:20:5b:53:e8:3f:24:a8:fa:a0:db:41:67:
0b:44:9f:7a:ae:44:85:3f:07:c7:67:99:d4:d9:4e:22:d1:98:
3e:d7:b6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:28:17 2026 by rpki-client