
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/85117a90-fbc2-31b0-a147-5e7433717d49.roa
File: 85117a90-fbc2-31b0-a147-5e7433717d49.roa (raw, json)
Hash identifier: UYKqqKAyn/klDdT27ejU/TP9KxxJ9q3iDqim9bAaAoo=
Subject key identifier: 9F:6A:A0:44:9C:21:9B:8F:B9:07:7A:4A:C2:19:DE:A2:5A:C5:0F:9E
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584EEA8754F59188B2B3793A0C80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/85117a90-fbc2-31b0-a147-5e7433717d49.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 19905
IP address blocks: 2604:2e87:9000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:54:f5:91:88:b2:b3:79:3a:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=d5ae858e-ac0f-4831-9254-ac976a9055da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:2b:a2:83:a8:e4:5a:73:8d:ae:78:8d:46:
02:a3:c5:82:15:95:15:c7:79:f7:c7:bd:b0:73:f5:
c2:72:c2:9b:94:0a:a6:9e:1b:5c:9e:f6:eb:5d:af:
1f:e9:f9:00:3c:dc:45:9e:26:fb:6b:8a:5e:2c:10:
f6:c8:71:2c:d4:5d:87:11:7d:56:f0:20:b1:13:3e:
31:bd:e6:94:d8:45:dd:cc:48:80:ed:15:b7:69:93:
ea:8e:45:cc:e9:a7:af:bf:1e:9b:ba:da:f2:9c:63:
47:43:45:ab:89:c3:81:c9:96:78:63:3a:82:d9:02:
aa:cd:ec:ac:de:a6:c7:8d:12:8d:c8:84:5c:64:9a:
73:85:5e:43:87:f7:72:a1:35:3a:21:30:c0:6c:30:
1b:49:43:b2:7b:d2:c8:e9:89:cf:6b:98:2c:f5:25:
5a:38:46:7e:fd:3e:b7:ec:37:7d:16:67:3a:6e:fe:
60:0d:5f:05:cf:6f:29:9b:bd:09:43:ed:c5:bc:20:
8b:75:7f:09:d7:54:5f:88:bd:b2:2b:44:a3:69:da:
ea:35:56:86:da:ca:d8:49:73:6b:a9:8a:31:ab:ad:
f7:eb:8c:42:cd:1e:dd:c4:bd:08:24:67:66:04:25:
0d:4d:6d:35:ef:48:cb:77:5a:0b:de:10:4b:5f:5f:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6A:A0:44:9C:21:9B:8F:B9:07:7A:4A:C2:19:DE:A2:5A:C5:0F:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/85117a90-fbc2-31b0-a147-5e7433717d49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e87:9000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:c2:3b:53:76:ce:33:36:4a:02:02:7a:60:a4:24:94:90:6b:
6f:93:64:1c:c8:47:eb:fc:56:d9:2a:ba:a8:86:ca:76:e1:14:
8c:4b:1e:14:eb:6a:10:4f:6f:e1:a9:3b:03:ed:f1:eb:9f:de:
b8:16:34:33:5a:ff:11:d4:6e:b6:58:96:72:a4:f6:7d:e3:ce:
45:22:61:3e:89:b6:51:c0:22:eb:f4:f1:d9:8c:37:1e:93:67:
be:ff:bd:d7:d9:d5:ce:78:8c:85:90:90:bd:d8:20:f4:43:a1:
fa:9d:79:63:12:f5:a5:b1:3c:f1:a2:f9:3c:83:d1:66:e0:2b:
71:a2:e3:15:36:4a:ce:d5:ed:28:3a:78:e0:79:8d:d0:4c:8d:
01:e2:18:6d:e0:4d:f1:53:46:e1:78:6d:79:10:41:1d:4e:d2:
4c:99:ec:be:c9:a3:89:38:bd:ba:3b:55:44:b2:fc:b3:1b:bd:
d3:9d:45:11:71:1b:7c:d0:d8:59:ab:87:02:f5:df:62:54:09:
c0:a2:86:26:a9:41:cb:c2:31:1b:b1:63:a1:c9:63:36:99:2f:
60:49:79:e3:4c:c2:21:be:8b:c8:85:4b:50:e0:72:9b:23:79:
10:c5:a2:85:16:02:e3:7f:ef:bf:1c:f4:7d:3f:a6:a1:3a:9a:
ab:e4:ab:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:08:36 2026 by rpki-client