
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/94d7998e-e9f4-305c-888a-f5c5b2644c5e.roa
File: 94d7998e-e9f4-305c-888a-f5c5b2644c5e.roa (raw, json)
Hash identifier: KXJH6TkIa7eXxf/nhZEjj7LPyoPXOVT5KOSrnGi/jS8=
Subject key identifier: A4:41:2C:29:A9:D8:60:16:64:A9:AD:59:83:E4:56:B2:5F:E3:7A:29
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584EBD0DA4E4E44EB103948B2540
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/94d7998e-e9f4-305c-888a-f5c5b2644c5e.roa
Signing time: Wed 05 Aug 2026 18:03:47 +0000
ROA not before: Wed 05 Aug 2026 18:03:47 +0000
ROA not after: Tue 03 Nov 2026 19:03:47 +0000
asID: 19905
IP address blocks: 2604:2e8c:7c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bd:0d:a4:e4:e4:4e:b1:03:94:8b:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Aug 5 18:03:47 2026 GMT
Not After : Nov 3 19:03:47 2026 GMT
Subject: CN=5bfc1ff4-2082-401e-8896-614e1aebb0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:e7:3b:0e:89:82:ba:e6:fa:91:fb:bb:d9:
b8:6c:49:6a:85:26:dd:44:ca:fa:dc:ce:f2:29:f7:
33:51:ef:3e:ea:1c:b6:0a:6a:09:9c:1a:41:c4:5d:
d6:62:cf:9f:36:de:c0:a5:49:5e:ec:2b:3b:f9:33:
fe:8e:18:76:51:76:66:93:b0:3c:fb:94:9a:46:ac:
ca:5b:59:2f:96:53:52:35:a3:e2:74:77:b1:99:8e:
56:7f:e2:5b:9e:05:36:c8:f8:be:d1:a9:4f:49:ce:
43:94:6a:30:e5:aa:60:cc:8d:49:ca:4c:be:08:fb:
ea:96:ae:aa:48:0d:c1:98:23:bd:5d:61:e7:b3:2f:
81:7b:e5:af:65:81:f1:81:d2:2c:92:8a:65:8b:c9:
8f:86:a1:49:17:b8:e4:59:16:15:f6:81:68:90:55:
36:b8:90:3d:1a:32:da:27:65:cf:75:ad:04:e2:37:
24:f7:02:33:05:95:07:5a:a2:ac:07:b2:ee:0e:c2:
b5:2b:79:ad:26:24:16:b3:95:f4:16:bb:b9:e8:28:
c9:ad:63:a1:79:41:8c:96:66:f8:aa:57:c6:8d:de:
8a:ad:64:c1:5a:7b:9a:38:15:f9:c9:d7:81:87:c3:
95:2b:e7:a5:6b:9c:79:82:a6:e9:40:ad:c3:90:76:
48:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:41:2C:29:A9:D8:60:16:64:A9:AD:59:83:E4:56:B2:5F:E3:7A:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/94d7998e-e9f4-305c-888a-f5c5b2644c5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8c:7c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:18:08:2f:d2:bb:a3:81:3e:83:fb:12:a0:33:30:a5:5b:ba:
01:80:cf:4a:9f:3f:3f:74:50:51:3c:1c:1e:a1:a5:1f:46:49:
34:5f:a5:c3:d2:10:b4:93:12:3e:a0:31:5d:43:fe:16:f3:09:
28:df:bf:25:11:66:e8:42:f6:32:87:bb:68:12:aa:ba:55:6d:
82:76:b6:12:a6:95:8f:5e:4e:4f:a1:ce:dc:1d:a5:db:b7:66:
7f:35:a4:76:13:9d:b7:85:fb:67:c9:42:4d:b8:df:3f:2b:e5:
bd:1d:f9:1d:7b:8e:ea:32:fe:2c:93:4a:91:3c:f6:34:47:46:
a8:a5:d2:0b:a2:1d:91:b9:bb:60:e5:93:04:74:9f:fb:29:5b:
c1:3c:80:f1:76:20:35:17:21:62:f4:ce:50:74:c7:6f:3c:e3:
85:8f:db:0f:4d:c9:a6:3b:8f:f7:57:d8:8a:ba:30:81:f2:50:
f8:b9:ee:47:f5:8a:49:83:67:2b:20:dc:d5:5e:8c:98:4a:5d:
54:37:70:0d:67:96:10:9b:84:13:0c:eb:81:f3:01:12:0a:3a:
97:eb:b9:6e:1e:50:09:69:c3:f1:09:c4:11:72:9a:a6:b2:c3:
cc:d7:a3:9a:ff:07:76:92:7a:09:e1:66:43:30:8d:27:bb:e5:
93:68:c3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:23:58 2026 by rpki-client