
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9af86d64-0a7b-30ac-b32e-4856fce22c10.roa
File: 9af86d64-0a7b-30ac-b32e-4856fce22c10.roa (raw, json)
Hash identifier: iBLvOnUkGBW9KYm9V1amVZyCrGAPyREiA9yaCrdPQ08=
Subject key identifier: DE:14:09:34:64:46:EC:A5:A4:DC:A0:B4:45:C2:1A:09:95:AC:49:AB
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584EA78725B472B5935F10BCD1E0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9af86d64-0a7b-30ac-b32e-4856fce22c10.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 19905
IP address blocks: 2604:2e8c:3c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:25:b4:72:b5:93:5f:10:bc:d1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=df043aa2-5cc6-40f7-a264-dcc6810d68a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4d:d7:90:71:01:88:29:c6:3b:1a:4e:6e:ef:
a1:85:88:bb:ba:f5:89:f8:c5:8e:a2:e3:c6:16:3e:
90:60:8e:b5:c3:5d:c8:ed:12:73:0e:aa:82:9b:a7:
a4:17:3f:5d:f2:37:49:f1:84:b1:95:ab:fe:44:e3:
95:a2:41:20:b5:d8:06:e7:de:c1:fd:0d:26:2b:dd:
2b:0d:01:89:52:69:f3:b8:06:f3:5d:7e:14:9b:95:
6c:7b:3b:cd:b6:15:34:96:17:0e:70:d5:ef:0a:69:
66:d0:1d:7a:be:05:8f:dc:5f:ad:04:49:d4:24:26:
b5:71:bb:68:52:d9:47:dd:10:2f:e4:ae:6b:fd:73:
4e:6d:30:eb:48:1c:5c:7f:2c:0f:49:39:d6:cf:b8:
37:53:f1:f0:6b:ec:e2:f5:6c:1c:0c:ee:ac:1b:d1:
aa:5c:33:4e:f7:7b:0e:7e:c5:c2:87:c4:a6:1a:14:
36:3c:70:0b:52:ca:d9:00:16:db:ec:a8:22:8f:53:
73:1f:7c:b3:3a:0a:5a:c7:11:52:a3:fd:a9:76:79:
9d:a8:c0:92:7c:d2:a7:38:15:ad:b4:51:b2:ac:57:
b4:d3:ac:04:f3:19:a8:f7:4d:0a:ff:1a:c4:f5:ef:
07:b5:09:20:cd:4b:56:bd:a1:3c:9a:7a:8c:09:5b:
60:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:14:09:34:64:46:EC:A5:A4:DC:A0:B4:45:C2:1A:09:95:AC:49:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9af86d64-0a7b-30ac-b32e-4856fce22c10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8c:3c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:55:87:34:a6:90:85:7e:be:9b:79:a7:09:28:8e:d3:3b:1c:
e9:a3:70:64:98:9f:bb:69:33:8a:bc:ea:24:4b:71:1c:f5:28:
c1:47:bb:7e:1e:56:6a:43:ef:b2:07:b4:00:10:77:c1:5c:0f:
e4:c6:c1:b8:07:d9:74:71:81:9e:57:e8:0e:f5:75:76:8d:7e:
55:75:bf:6f:64:fd:23:92:40:d0:b6:f9:dc:be:22:4d:ef:03:
2d:9b:d2:0f:c8:df:16:bf:ff:91:cd:6a:e7:0e:04:96:9b:5c:
65:7a:9a:af:66:e0:6a:e2:26:3c:07:3e:74:e9:89:7e:02:b3:
da:a9:59:8e:04:c9:f1:f3:08:11:f1:46:c8:be:7a:f7:dc:23:
11:d5:2d:56:c2:8d:4f:2e:fd:3b:61:dc:46:4b:9c:02:db:3c:
8c:0b:6f:db:8c:fa:83:85:47:de:a2:f2:80:b9:04:9c:48:a4:
0c:b5:a5:a9:1d:af:df:f7:10:96:50:cb:57:34:32:e6:53:2b:
3e:56:3a:17:5d:0f:e4:2b:e0:39:88:9f:3f:ec:7a:9f:23:24:
33:17:7e:43:d6:c6:60:8a:b4:e5:a5:8d:5b:a8:cc:27:58:78:
76:46:0b:5b:63:32:5f:c9:29:37:05:46:f3:b2:bc:a9:43:bd:
35:26:f6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:27:34 2026 by rpki-client