
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cff1ae13-6860-3641-9cf4-9691824d17fe.roa
File: cff1ae13-6860-3641-9cf4-9691824d17fe.roa (raw, json)
Hash identifier: 0f3jy93pnf0WwuREnpF+veWxH7D9qIyjA1pFhjscbGs=
Subject key identifier: 52:B8:6F:8B:B0:91:3B:87:85:96:5E:89:A4:5E:11:87:6D:93:82:13
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584EA79CEE9A00A6563BEC041410
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cff1ae13-6860-3641-9cf4-9691824d17fe.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 30036
IP address blocks: 2604:2e8a:7000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9c:ee:9a:00:a6:56:3b:ec:04:14:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=a7dc6d87-c8a0-4137-bcc8-cad84ca255ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:71:79:e7:46:d8:ae:09:22:e5:92:f3:a4:09:
ba:db:42:2e:9c:2d:f3:30:04:0b:04:7c:08:27:20:
a8:1f:4b:f0:93:16:01:74:ff:a6:77:18:6f:d5:a3:
ab:92:83:7f:dc:a7:25:ec:de:a8:81:ab:f2:dc:62:
fc:78:5e:82:55:35:ec:ef:10:c1:6c:de:1d:20:47:
3c:8f:b1:de:31:f1:d3:c1:ab:5d:aa:69:4f:c0:f4:
53:38:c8:53:d7:3f:55:16:5f:36:46:a8:a9:48:8c:
65:9e:04:78:84:74:5c:b9:58:36:11:55:df:eb:c3:
3d:4b:af:5e:d0:4b:90:e8:b7:db:9a:ff:58:91:b9:
c4:d6:e9:ca:17:e8:82:74:01:df:2d:68:43:27:0e:
7d:f8:31:60:67:a4:b8:03:e1:81:5f:33:43:71:42:
dc:34:ec:c4:2d:ed:d3:77:eb:2b:83:6c:2b:d4:55:
99:ea:fa:d6:db:96:6b:0c:35:f1:ab:4f:ef:1f:77:
91:b4:fe:57:1c:0c:8a:f9:90:fc:a7:ac:86:49:f5:
e4:69:43:05:8c:31:99:ad:6f:0d:ac:dc:f9:82:82:
e3:b3:9f:67:73:49:e8:be:ee:1c:f6:cb:2d:30:99:
93:31:47:1e:1a:ab:0e:6c:98:29:c3:70:9e:54:26:
9b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B8:6F:8B:B0:91:3B:87:85:96:5E:89:A4:5E:11:87:6D:93:82:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cff1ae13-6860-3641-9cf4-9691824d17fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8a:7000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:d5:75:be:77:82:4a:bb:64:44:2c:e8:eb:c4:70:ee:76:c6:
c2:90:5e:c9:74:b8:3b:dd:bf:36:99:f7:46:0f:ba:55:17:b4:
73:fa:ed:56:21:90:9e:ac:0b:0f:8b:58:d8:8a:d0:6b:9b:74:
64:db:ae:66:84:d3:41:ea:f3:4c:a9:93:79:be:3b:bd:98:ac:
cd:6a:27:c2:65:1d:8f:e2:ca:74:33:ba:47:f3:9f:91:1b:b5:
c1:d5:9a:99:c4:90:de:ee:ec:d8:e9:c0:0f:a3:d6:21:e2:31:
a8:2a:05:5c:2e:66:07:f4:14:e4:81:75:67:d1:8a:3e:d9:28:
04:16:6b:da:cd:89:bc:0a:2d:02:e2:28:96:d3:69:94:c6:0d:
f8:c6:15:85:cc:37:17:b8:80:eb:9d:43:4d:9a:92:b9:52:9f:
73:05:90:2d:68:1d:66:c4:51:ec:c6:1e:68:22:4f:c3:ef:22:
c0:5e:61:c7:af:d2:8f:73:a9:93:80:4e:31:91:7e:aa:b8:3e:
25:70:b3:b8:0c:b6:33:2d:8e:7b:91:f2:7b:4d:96:da:92:78:
3f:04:e6:45:bf:b3:f6:0b:f0:23:85:f8:80:48:0d:f0:1b:84:
69:9a:17:df:6c:b3:91:ef:03:6d:b0:5a:6e:b0:f3:a2:c8:c9:
da:63:ef:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:30:04 2026 by rpki-client