
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d90c9724-7ce0-3667-a810-c88ce03c5246.roa
File: d90c9724-7ce0-3667-a810-c88ce03c5246.roa (raw, json)
Hash identifier: kaKDImD0LgpUD+Ab57VS7G5TMVmvLDsHJ261Rg1xUnE=
Subject key identifier: 25:7A:11:B2:52:0A:A8:74:0E:F7:61:36:97:A8:D6:D2:FC:12:43:BF
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584EE4F1F0AFC5B36861B8F79AE0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d90c9724-7ce0-3667-a810-c88ce03c5246.roa
Signing time: Thu 20 Aug 2026 01:00:12 +0000
ROA not before: Thu 20 Aug 2026 01:00:12 +0000
ROA not after: Wed 18 Nov 2026 02:00:12 +0000
asID: 19905
IP address blocks: 2604:2e87:8400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e4:f1:f0:af:c5:b3:68:61:b8:f7:9a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Aug 20 01:00:12 2026 GMT
Not After : Nov 18 02:00:12 2026 GMT
Subject: CN=276700cb-f072-48b9-8bee-c91cd235c72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d9:6e:7d:a7:bc:f7:28:63:22:15:b9:ea:f8:
11:0e:4b:ef:bc:3b:5e:49:0a:73:43:ac:4f:41:fb:
ed:16:ca:60:0f:85:5c:7e:ce:b8:3f:e5:89:34:87:
bf:8b:56:a9:78:dd:a9:44:e9:70:ca:bb:1d:80:45:
94:0c:4b:c5:3a:9e:fc:65:32:8b:72:6e:ea:98:b8:
6e:2d:64:b3:0d:d2:21:19:e8:75:e8:0c:9e:01:1b:
4e:88:09:4e:39:2c:8c:d0:bf:46:a2:5b:b8:c3:b0:
aa:a1:f7:34:b1:3b:a8:af:53:e9:ea:7e:06:4b:9a:
05:67:fe:69:aa:4b:9a:23:66:1e:df:59:bf:e6:f2:
29:00:f5:80:d9:f0:1d:17:ef:91:86:e1:5d:7a:7c:
f5:88:0c:ab:40:f6:74:1b:1f:7e:7f:0e:0f:a1:40:
75:5a:23:89:02:36:d9:9b:5e:ca:8a:e0:a9:ec:01:
63:f2:42:5c:e1:0c:f3:23:c3:2e:39:e1:20:cc:b7:
0a:e7:6e:30:bd:7a:7c:f1:a2:c4:b1:a9:30:b3:a2:
94:38:c4:21:70:90:36:72:66:19:e2:b0:9e:1e:b5:
70:76:5e:2d:3f:2b:3e:cb:3c:e4:2f:51:f0:27:db:
e1:66:d5:a9:1c:f5:b7:28:b2:b5:bb:d4:c1:7a:61:
fe:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7A:11:B2:52:0A:A8:74:0E:F7:61:36:97:A8:D6:D2:FC:12:43:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d90c9724-7ce0-3667-a810-c88ce03c5246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e87:8400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:ac:2a:73:af:d1:ea:85:64:74:69:bd:47:dd:ef:93:84:58:
75:07:86:e7:17:37:75:26:bc:02:5a:18:7a:a4:a9:b8:37:eb:
b9:3d:01:cb:28:9f:be:f9:04:51:c6:24:67:0c:57:35:9d:f9:
1f:e8:d0:59:64:77:78:e8:c4:b3:20:83:f4:68:39:45:76:88:
e9:27:a4:b9:89:ae:fd:72:2f:b3:9c:09:dc:41:52:b8:97:eb:
d5:a1:72:05:93:fc:dc:41:60:4c:a8:08:a5:0c:89:be:e7:f5:
15:8a:e8:a3:17:a7:97:25:ee:3a:db:fc:c7:c2:47:17:8d:ee:
51:80:bd:45:85:f1:59:8c:53:47:46:21:c6:43:24:9b:98:6e:
0b:81:d1:7d:6f:d5:42:60:da:db:7e:6c:f5:a7:d2:02:ee:94:
13:46:76:e4:21:68:9b:fe:36:67:d9:cf:a6:e6:52:e4:72:d7:
68:b2:38:82:d7:96:39:50:f4:1b:b2:40:6f:9a:01:de:52:0d:
f3:f4:ed:99:6f:70:c8:af:d8:31:9a:aa:57:3a:09:90:32:66:
8d:ae:d2:d2:38:dd:e0:ce:5b:4e:52:cb:bf:97:64:ed:62:b3:
ff:43:c4:26:c1:86:3f:2d:ee:c6:54:99:8d:50:01:c9:97:48:
2c:82:d3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:29:42 2026 by rpki-client