
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea04ddc3-a272-344b-962e-875bc2ffc4f6.roa
File: ea04ddc3-a272-344b-962e-875bc2ffc4f6.roa (raw, json)
Hash identifier: 2yfykvwMuCOYy8S1afb0wTtcmtGAHDUO3zfYJCmUubA=
Subject key identifier: 65:6A:01:E6:54:F3:77:43:9B:85:FF:0D:DE:DF:B3:08:65:0A:78:70
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584E4129C8ED01E8BC039A40CD00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea04ddc3-a272-344b-962e-875bc2ffc4f6.roa
Signing time: Mon 22 Jun 2026 09:00:11 +0000
ROA not before: Mon 22 Jun 2026 09:00:11 +0000
ROA not after: Sun 20 Sep 2026 09:00:11 +0000
asID: 30036
IP address blocks: 192.119.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 25 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:41:29:c8:ed:01:e8:bc:03:9a:40:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jun 22 09:00:11 2026 GMT
Not After : Sep 20 09:00:11 2026 GMT
Subject: CN=9aa049ce-38d6-44d1-a551-453cf8b3affc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:87:cf:06:0a:b2:62:bc:d1:3f:69:96:8b:
28:61:1f:52:d2:72:12:99:b7:5c:6c:cb:4c:31:6e:
95:8c:f8:9c:a4:fb:59:cf:96:88:b1:25:7c:64:50:
e6:bc:a7:73:c6:30:d2:b4:a2:73:69:c7:28:2f:14:
4a:9c:4a:2d:77:ed:36:ee:77:fd:e0:0c:13:61:52:
75:a5:e3:fe:b3:fd:84:ea:96:89:94:1c:83:a4:53:
d8:8f:58:87:db:2b:95:eb:1d:ab:67:23:23:cf:f8:
8d:ba:75:4c:5d:7d:3f:90:95:5d:49:d9:55:80:c9:
d2:7c:d0:f6:b0:b2:6b:31:4e:7d:99:52:fe:63:58:
08:16:40:6a:e2:2e:c1:05:12:c0:6e:ee:28:9d:60:
77:76:d0:6e:86:f0:62:8d:7a:ca:4d:35:8f:5a:c0:
f7:97:cd:9c:f1:c5:ca:87:f2:10:63:67:c5:b5:3f:
90:64:be:4f:2a:40:9b:11:0f:ee:e0:f5:fb:87:4e:
a0:37:ac:82:4d:f6:8c:16:70:6b:c8:34:b9:60:65:
9c:eb:da:0d:91:9b:de:5f:26:44:a1:80:c9:eb:9e:
47:e3:a9:82:c9:d0:41:26:ea:e9:3b:b2:fe:4e:4a:
04:f3:15:32:fb:ca:a5:05:65:62:5e:ed:f8:bf:a2:
e5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6A:01:E6:54:F3:77:43:9B:85:FF:0D:DE:DF:B3:08:65:0A:78:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea04ddc3-a272-344b-962e-875bc2ffc4f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
192.119.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:81:70:2e:c8:63:83:8b:8d:ac:60:43:ac:08:50:e4:c9:70:
5e:60:3a:3a:0d:53:d6:f6:3c:1b:cf:49:a9:e0:14:43:93:89:
59:77:30:8c:0c:ff:b1:dd:dd:b7:07:2b:8e:e6:8d:58:d2:ae:
b3:d0:35:c9:3b:7c:a1:9d:59:82:41:2a:44:f1:38:d9:ef:0e:
c1:c5:42:64:7e:b3:02:a8:cb:58:93:e6:1d:f6:4b:c4:c8:24:
77:13:88:38:91:65:c7:df:5c:36:8b:48:73:aa:89:07:9a:d4:
51:42:c4:ee:16:32:33:d2:3b:e1:15:bf:99:73:29:c4:91:30:
7b:75:f3:d3:63:af:cc:34:78:14:7a:3f:d8:39:cb:0e:b6:44:
22:ac:64:2a:9d:87:78:03:9e:39:8b:d6:c1:02:f8:c4:eb:f1:
6f:18:78:e6:62:a2:0b:54:86:8a:c9:36:ad:14:54:04:48:fa:
58:e5:c5:77:d3:c6:f6:c5:03:88:31:73:97:92:18:16:19:15:
5a:c4:80:73:46:34:9c:29:76:3f:dd:98:a0:e5:16:9c:57:66:
05:f9:bc:a7:c8:b4:af:fc:2a:be:a4:5b:af:38:56:ad:5f:0d:
a6:bb:35:b0:b0:08:46:ac:1c:e5:1f:00:27:c8:d2:28:e4:f4:
63:e7:e0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:14:45 2026 by rpki-client