
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5b9d8709-cf71-3b61-a9f6-52f8a303a4b8.roa
File: 5b9d8709-cf71-3b61-a9f6-52f8a303a4b8.roa (raw, json)
Hash identifier: 2kpXXBDCy7ozP5LlNT+eaXUM3MutgrqGkcCLakOTD3o=
Subject key identifier: 35:19:19:81:F0:7C:89:02:F2:74:2C:5E:85:DA:78:93:67:5F:55:E9
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584EE38CB05D56A503273685BBC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5b9d8709-cf71-3b61-a9f6-52f8a303a4b8.roa
Signing time: Wed 19 Aug 2026 13:00:11 +0000
ROA not before: Wed 19 Aug 2026 13:00:11 +0000
ROA not after: Tue 17 Nov 2026 14:00:11 +0000
asID: 30036
IP address blocks: 198.40.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e3:8c:b0:5d:56:a5:03:27:36:85:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Aug 19 13:00:11 2026 GMT
Not After : Nov 17 14:00:11 2026 GMT
Subject: CN=66f7b199-ea41-43de-9ccd-8d032d0b483d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fe:70:12:b7:f8:98:bc:27:5e:d1:4f:88:55:
d9:4d:45:e2:8a:aa:ec:e3:f4:94:7d:8f:47:65:56:
88:68:6d:bf:e0:a4:f7:08:31:12:df:f7:f4:0c:66:
35:55:1b:72:d5:bd:57:ed:5b:22:22:7b:33:52:b5:
70:8e:96:b6:66:f1:21:64:13:54:14:06:22:e0:c0:
a4:8a:9c:65:38:61:06:aa:73:74:54:b7:79:b8:94:
20:8a:54:6e:08:d3:e8:3b:8f:7d:48:e3:f7:fc:81:
16:88:2f:d5:55:52:4d:db:95:05:af:6b:e2:17:01:
a2:30:bc:60:38:7c:e5:1d:79:b2:13:4a:fe:7c:bb:
e1:47:c8:50:95:94:33:78:7e:46:00:14:de:1b:57:
92:c1:c3:03:ec:22:71:02:23:a6:e9:98:62:31:87:
db:46:14:65:74:15:a5:c6:3a:50:ba:ca:bd:0d:e1:
89:bb:69:e7:18:2d:a7:0f:51:cb:52:a8:41:96:d2:
22:2b:cd:90:97:78:d1:ac:3b:ee:92:70:19:58:0e:
68:7c:96:eb:50:07:56:5b:53:5f:ba:da:95:0e:17:
d8:3f:19:d2:94:46:47:70:89:08:06:30:3e:ae:33:
c9:5f:f8:42:c7:4a:f2:75:0f:72:09:44:a8:49:4b:
e9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:19:19:81:F0:7C:89:02:F2:74:2C:5E:85:DA:78:93:67:5F:55:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5b9d8709-cf71-3b61-a9f6-52f8a303a4b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
198.40.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:48:60:d9:8e:71:57:ec:ed:3e:55:8d:b2:07:37:2b:d6:83:
c4:01:ec:8a:a9:1d:6a:19:bf:80:6a:54:b4:06:11:6d:e0:93:
de:78:4e:a7:52:bb:e7:75:e3:07:76:2a:43:7e:cc:f0:54:79:
61:e1:19:d2:36:d5:45:4f:b0:ec:9b:55:fc:4e:5b:7f:ba:55:
2b:ad:84:09:a2:d5:8d:a3:bf:54:d8:86:a6:59:17:07:7b:18:
f7:a5:76:39:1c:ff:1b:67:fd:25:48:4d:1d:ff:a6:b4:ef:75:
0a:ec:50:6e:8d:8f:3f:04:20:61:ba:ee:34:a2:b0:b2:a9:7b:
0b:40:11:16:56:94:69:67:25:3f:d7:36:b7:9b:45:19:b5:07:
02:9d:68:bd:a7:07:9b:c9:47:b1:cf:7b:30:54:67:9a:b0:06:
b4:0d:60:bb:c4:05:06:f9:e0:d7:4e:18:88:51:12:dc:c4:7c:
8e:67:58:55:77:f6:b7:5a:9d:3e:dd:a1:16:e2:67:a2:1a:73:
c1:44:76:da:e2:10:c3:cb:e5:fa:d6:f7:50:62:0a:1f:4c:d4:
f5:d8:bd:21:c5:63:fa:74:06:9b:72:51:b5:fa:0d:73:1e:25:
f8:96:a5:c6:3c:69:65:f7:5a:9c:9c:7f:f8:42:e1:fe:b9:23:
1a:3e:37:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:27:38 2026 by rpki-client