
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/849f8645-e463-3c64-a0a0-fb03b27e32a3.roa
File: 849f8645-e463-3c64-a0a0-fb03b27e32a3.roa (raw, json)
Hash identifier: INsYXXcDQFnsbJe68dQiIimKk0zNlVPi1aBaVxK8TH4=
Subject key identifier: 07:F3:71:AF:20:1E:6F:DB:EB:B1:9C:5F:3F:B5:E8:78:08:11:A6:1E
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584EA7A0C3D8450965CEB24D27C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/849f8645-e463-3c64-a0a0-fb03b27e32a3.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 30036
IP address blocks: 2604:2e8e:2400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:a0:c3:d8:45:09:65:ce:b2:4d:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=1caf18de-33e6-49fc-9882-fa27419f1657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c5:89:5f:24:58:c5:8c:bc:14:41:c7:c5:23:
e4:2e:0d:69:bd:6c:0f:f2:c5:86:cb:64:b6:7c:8f:
fc:fb:36:03:43:cd:e1:fe:79:73:2a:0c:11:a8:e1:
e0:77:d5:3c:71:93:3a:c7:74:a1:f6:39:86:b7:ac:
68:23:4e:83:da:86:f5:d5:c7:4f:00:fa:6b:7b:a0:
f0:c3:b7:61:be:88:ee:0b:9e:5c:4e:20:95:53:d8:
b1:87:60:3e:f2:ce:58:2b:d6:04:96:29:64:f3:1c:
e1:64:d6:6d:7b:a6:ee:70:d8:f0:e2:6b:d6:56:bc:
60:8d:0e:1b:97:2b:e9:36:d1:df:c9:07:e1:aa:ba:
c3:fa:48:72:8e:b5:bb:ed:41:68:31:fb:99:a0:5e:
57:42:83:21:c7:07:37:f4:45:34:c5:bc:48:12:7e:
c5:6a:d0:ff:68:fe:88:04:17:52:17:e0:e6:20:0f:
2e:f7:ac:e9:09:77:69:6f:57:c2:c9:31:5d:f9:be:
48:8c:5f:dd:6d:5d:94:23:f8:7f:eb:e6:82:1c:ab:
22:f7:95:fc:90:25:d5:3f:3b:0b:0f:c5:9c:83:f1:
78:99:df:d4:bd:a0:54:73:d8:0b:43:03:a1:92:df:
86:1e:d5:49:a9:bb:ce:3e:a5:dd:07:22:b3:5c:09:
be:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F3:71:AF:20:1E:6F:DB:EB:B1:9C:5F:3F:B5:E8:78:08:11:A6:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/849f8645-e463-3c64-a0a0-fb03b27e32a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8e:2400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:63:d6:31:9a:3c:9f:53:7a:eb:78:e0:2f:12:c8:89:f0:26:
2e:ec:b3:e2:da:c5:d8:8e:ba:92:04:18:98:67:3a:3c:19:d0:
26:9e:69:60:32:ca:95:c0:41:5a:b4:c9:c6:ab:b6:19:6d:1d:
15:86:ec:62:d0:18:7a:c7:04:18:b7:7e:53:4f:6f:2f:f1:b6:
0b:67:f0:e4:65:02:fe:15:b6:dc:b5:9a:f1:96:29:e4:03:13:
4e:f6:da:1b:b1:67:c0:ec:e5:ff:e9:d0:7b:40:3e:55:ff:3d:
78:f5:55:08:8f:cf:33:fd:d8:0d:ae:26:62:fe:55:32:67:d4:
5a:a9:49:9a:ca:aa:eb:f3:c2:6a:e5:5e:10:9e:a2:3d:44:2b:
7d:24:c7:13:b0:4f:c1:09:d2:b6:80:0b:38:82:75:87:e8:31:
3b:4e:3d:aa:a3:57:28:40:f9:14:11:39:f8:14:ab:29:0d:9b:
c5:4e:22:7d:89:3b:56:38:5f:aa:07:84:7e:a0:ba:95:51:7e:
4c:55:bc:60:65:f7:18:9e:1e:1a:31:96:02:b9:18:9b:f2:62:
f5:03:64:74:dd:8d:bb:a4:6c:e7:56:49:95:f6:83:c7:9f:dd:
e2:e7:fa:5f:01:40:31:31:da:bf:b2:fd:4a:6c:46:00:96:5a:
18:6c:b2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:07:18 2026 by rpki-client