
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1f26942-1468-3231-a4ef-8ec2a1d9617d.roa
File: d1f26942-1468-3231-a4ef-8ec2a1d9617d.roa (raw, json)
Hash identifier: 9SeOxCKGBW7RBpUBbxe2oHlwyDtxG+Bn5qyP6+ULWyk=
Subject key identifier: 25:04:40:56:28:8E:4F:97:00:00:CA:ED:C8:1A:12:A8:1F:41:0C:7A
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584EA79D53BA9EB76D5F912B1580
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1f26942-1468-3231-a4ef-8ec2a1d9617d.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 30036
IP address blocks: 2604:2e8e:1000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:53:ba:9e:b7:6d:5f:91:2b:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=e8c54b89-4e46-433c-ba9a-32f41ba39f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7d:3f:0e:2a:3f:f3:03:34:2e:54:7b:8d:0f:
f4:ae:c0:8a:a8:84:ae:27:58:d9:24:08:e2:7c:76:
65:ed:d7:a5:f7:de:87:31:12:12:4f:93:7a:df:54:
51:31:b4:24:99:0d:ea:14:ba:68:50:33:dd:17:57:
5c:bf:b1:ad:b1:14:85:e2:06:95:c1:0c:e6:a7:9b:
7f:65:b7:21:d2:fc:53:f9:3a:7a:c5:ba:e7:b4:e0:
5c:ea:58:0e:4e:e7:0e:00:b3:61:08:7a:d9:21:82:
22:15:d7:ce:05:91:3b:40:2d:89:97:9d:26:bf:a3:
e3:2d:38:76:17:99:ef:30:a2:22:c2:61:1a:2c:4b:
22:9e:a7:29:4f:06:0d:24:31:b4:f5:5a:8a:e2:90:
18:68:c5:61:e7:da:c4:fe:a3:da:a0:36:07:6d:55:
c8:94:ba:e7:a2:85:4c:e7:39:18:c3:6f:02:67:6a:
52:01:f4:61:ec:e1:de:7c:a5:31:d5:cc:cc:d8:ef:
00:a4:5e:7b:4e:14:03:79:37:7a:b6:8d:02:da:a1:
05:c2:51:e0:4b:aa:98:b6:a9:1f:88:3a:39:94:e8:
27:e5:78:a8:c0:80:73:90:64:e0:6d:b9:22:56:73:
b4:4c:20:40:68:0d:71:67:e8:30:49:a3:94:16:7e:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:04:40:56:28:8E:4F:97:00:00:CA:ED:C8:1A:12:A8:1F:41:0C:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1f26942-1468-3231-a4ef-8ec2a1d9617d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8e:1000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:39:0f:31:0f:71:f5:c7:12:15:c5:d7:11:db:25:e6:b7:e6:
97:56:f7:ba:21:3c:d2:b0:c3:07:55:03:93:1c:1e:06:e8:48:
05:c3:02:7f:32:18:65:32:5d:a0:64:70:17:9e:5a:00:0e:a8:
60:5c:2c:d8:c3:f3:db:6e:05:45:d7:38:4f:72:22:44:88:76:
40:c5:b2:75:29:4b:1c:f5:12:46:2b:83:8d:c2:d4:56:7d:27:
d7:4d:f4:da:9a:6e:49:a0:0c:03:0a:3b:0d:39:e7:77:af:7c:
04:66:ee:f5:40:ae:39:6d:45:b6:47:5e:0d:dd:a7:67:91:93:
38:e5:50:bf:1e:37:22:71:75:23:de:00:92:a1:00:bc:e6:52:
7c:79:50:4f:bb:6e:3b:cd:89:49:7f:cd:4d:fb:90:02:ab:93:
df:7c:02:4b:48:96:d9:38:80:43:e2:be:2a:cc:0e:da:49:fb:
c2:e3:54:2b:f9:ad:b9:e1:cb:d5:38:03:57:74:d5:bf:d8:f7:
f8:18:3d:3b:59:07:a7:1f:8a:64:bb:e4:e2:53:9d:ad:36:00:
e1:28:bd:84:c6:ac:ee:a7:21:79:9c:82:dd:ec:d3:9d:e1:09:
d5:4c:03:2e:27:27:b9:27:8b:af:50:43:f5:2e:00:83:b7:f1:
69:03:4c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:46:45 2026 by rpki-client