
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de9d260d-9a7b-3cd0-b6f5-bf073a960ac5.roa
File: de9d260d-9a7b-3cd0-b6f5-bf073a960ac5.roa (raw, json)
Hash identifier: OQcRf4dg+n/LFcnAAhtTDgStC3KlIJ5/O1Mfq+PBCv8=
Subject key identifier: BB:DD:0B:5A:FC:40:48:E8:E4:33:C7:9D:83:A7:D3:7B:AB:F6:BD:AA
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584EBC77005434B43369F8181500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de9d260d-9a7b-3cd0-b6f5-bf073a960ac5.roa
Signing time: Wed 05 Aug 2026 13:00:12 +0000
ROA not before: Wed 05 Aug 2026 13:00:12 +0000
ROA not after: Tue 03 Nov 2026 14:00:12 +0000
asID: 19905
IP address blocks: 2604:2e88:b000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bc:77:00:54:34:b4:33:69:f8:18:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Aug 5 13:00:12 2026 GMT
Not After : Nov 3 14:00:12 2026 GMT
Subject: CN=67fa1456-3144-4b44-83f5-b81c98027a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:99:37:4b:b1:fc:18:dd:cf:57:5d:96:d3:9a:
f9:56:bd:b7:d1:93:43:04:ea:e5:c6:0c:37:01:ce:
67:11:e5:91:c9:2d:b9:58:e7:48:8f:e0:d2:14:55:
2d:c8:d5:28:96:1a:d2:88:27:7f:19:4c:11:94:55:
10:54:e5:6d:b1:24:19:d5:f8:39:b1:ae:ae:8e:a9:
35:14:06:8c:8b:a3:3b:03:6d:cb:19:36:ae:e1:d9:
13:64:a1:f5:4e:2d:47:77:5b:19:78:00:27:09:c2:
7c:56:d5:6d:7a:eb:13:53:ef:0b:9f:04:6c:90:20:
97:9f:7e:fc:c2:d9:59:2a:bc:25:d6:64:1f:1d:c1:
7c:3a:83:8c:8e:84:c4:bb:23:c6:b1:0b:76:d1:48:
eb:5f:71:5a:d0:fb:bd:e7:90:ee:71:48:af:06:67:
09:21:e3:57:a9:f7:c0:b3:1f:01:34:5e:9a:53:43:
2f:af:cb:c9:fb:3e:11:64:56:f5:68:85:91:46:38:
d1:19:ca:f6:8d:9f:97:78:78:aa:e0:40:46:61:c2:
e7:f5:bc:97:bf:e8:47:b6:1e:b6:b4:9c:57:00:c6:
9a:ff:d6:1d:c6:b5:7f:7b:6b:d9:67:ce:29:75:2d:
a4:bb:d8:84:e6:c1:fc:c3:44:e9:22:4f:d8:00:37:
e0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DD:0B:5A:FC:40:48:E8:E4:33:C7:9D:83:A7:D3:7B:AB:F6:BD:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de9d260d-9a7b-3cd0-b6f5-bf073a960ac5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e88:b000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:ef:d9:7b:6b:09:2f:9f:e3:f5:f3:1b:cc:15:8d:03:9f:69:
9b:f8:00:38:37:5e:6b:8e:d4:d1:0a:ea:ca:ac:70:e4:c0:5c:
04:ea:6e:f3:6c:81:30:1c:ee:f0:e3:75:af:dc:1c:86:21:2d:
95:9a:db:93:1a:dd:8f:f0:97:f8:2f:49:e9:1d:23:f8:94:fd:
1b:df:cb:7b:8c:e8:ef:73:58:97:72:1d:e3:c7:db:bb:43:6c:
f5:b9:18:b4:04:92:eb:fc:71:40:1d:30:aa:ba:9d:0d:2b:38:
34:d0:18:75:4c:c7:d3:c8:6f:80:ca:14:1e:dd:a8:95:0f:16:
0f:4c:56:21:f1:ae:9d:b5:0f:d5:82:0f:99:8e:96:e7:c6:9a:
bf:dc:f5:43:36:20:5d:87:70:1b:48:94:82:1c:9e:2c:1f:1e:
c4:84:68:71:59:fc:60:6c:fb:76:4c:24:1e:7c:98:44:f7:65:
95:c2:8a:b4:92:8b:f7:75:67:68:55:cc:8f:4b:94:31:e7:64:
e5:5b:fc:42:04:3c:ce:f5:c9:75:8b:70:c9:0a:f6:f8:9a:6c:
53:95:dc:06:9c:03:5b:b9:49:ed:9a:30:58:a9:ca:9a:ab:a5:
da:34:bf:2e:8a:a8:70:30:56:21:e5:62:d2:90:80:f5:d7:ab:
a0:ce:f6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:25:47 2026 by rpki-client