
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0a214cbb-8112-3c83-b2b5-bdc8a5a9373f.roa
File: 0a214cbb-8112-3c83-b2b5-bdc8a5a9373f.roa (raw, json)
Hash identifier: dcj1rg23a+GE+zFVrV+aVJnAqtFZ9N69wg98kVTUYCA=
Subject key identifier: B0:0D:2A:8F:57:31:41:CD:A6:42:0F:D6:73:76:88:4D:54:53:01:AE
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C8046CA2AC37654340E673400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0a214cbb-8112-3c83-b2b5-bdc8a5a9373f.roa
Signing time: Mon 12 Jan 2026 14:00:40 +0000
ROA not before: Mon 12 Jan 2026 14:00:40 +0000
ROA not after: Sun 12 Apr 2026 13:00:40 +0000
asID: 30036
IP address blocks: 192.119.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:80:46:ca:2a:c3:76:54:34:0e:67:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 12 14:00:40 2026 GMT
Not After : Apr 12 13:00:40 2026 GMT
Subject: CN=28dce3e2-d26d-4876-b3d3-3f7eab310b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:57:03:d6:5e:b2:f5:67:34:f2:6b:87:8c:
c3:08:d4:21:6b:93:73:4e:17:b5:56:7e:5b:18:e1:
f6:d5:23:ce:7f:ae:5b:5d:d0:f3:e9:29:67:1d:3d:
1b:3a:5d:23:26:03:41:49:4d:bd:c2:23:3d:32:52:
30:8b:18:4e:a7:1d:64:06:45:00:6a:41:3d:25:06:
ea:7f:07:d5:4d:ab:91:16:bd:5a:c6:1d:9d:12:0e:
32:f5:0e:1c:d2:5a:d0:00:83:e7:6b:58:30:49:df:
e4:40:4a:51:13:80:3a:03:b7:07:9d:14:38:c0:35:
e0:56:44:73:86:00:1f:78:87:b6:91:d1:77:46:61:
16:d1:d1:ef:2d:51:1c:75:e6:07:de:31:87:1c:34:
8b:6f:5c:37:c1:8a:6a:6f:fd:65:45:f3:b1:d3:b5:
e1:35:68:25:ba:20:a1:c4:09:15:af:a5:48:75:e3:
60:09:be:48:ad:6b:e4:d5:4a:ba:0d:46:93:f3:63:
b8:0f:d5:d8:f5:8f:ba:12:1a:98:ed:97:58:38:37:
cd:ae:d5:b3:af:08:0d:37:cf:bd:a4:df:98:be:89:
0b:6c:67:ee:a8:b7:d6:51:24:26:e6:fc:ea:5d:2b:
89:33:3a:0d:bb:b9:05:1e:ff:d3:22:3c:ff:df:5b:
f8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0D:2A:8F:57:31:41:CD:A6:42:0F:D6:73:76:88:4D:54:53:01:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0a214cbb-8112-3c83-b2b5-bdc8a5a9373f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
192.119.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:5c:ae:99:16:06:53:40:8d:7e:25:98:a5:f9:22:e7:e0:93:
4e:cb:4a:14:cd:58:94:1b:1c:1f:82:8c:40:d4:8c:e2:56:4d:
34:8d:87:5a:25:94:e9:a3:c6:91:d9:a4:d6:1f:8d:55:3f:60:
7b:2a:73:8e:ad:67:43:4e:dc:57:f4:75:14:e8:e7:09:48:73:
23:06:51:86:57:e0:fc:9a:03:e5:04:99:f1:3d:80:23:88:3b:
a4:f8:d5:58:ab:b3:f6:40:3c:e8:a8:46:ae:76:99:c5:58:cb:
62:25:79:53:19:16:57:e8:e5:3d:e3:a2:d7:92:01:84:fe:c0:
f8:9b:a9:66:d8:bd:0f:96:9d:45:02:cf:f8:44:4d:f3:10:fd:
1b:c8:af:99:94:46:c7:e1:ea:8d:89:59:5f:a5:ef:bd:4f:84:
dd:6a:05:ef:69:a2:bd:a7:3f:88:51:09:7c:34:6d:4a:0d:54:
f2:c4:42:e3:59:3a:c8:50:db:30:4e:4f:6d:a6:5e:6f:d1:07:
08:d1:6d:70:a5:34:9b:13:1f:cc:f7:68:bf:9b:a4:29:06:b6:
0f:73:1e:1f:b6:d8:08:34:31:36:c2:00:4e:23:be:87:09:d8:
31:a8:41:a3:0d:b0:53:55:c2:66:9c:3d:65:6a:fe:fe:77:42:
ef:32:78:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:52 2026 by rpki-client