
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8f5d81b4-6393-3f46-863d-83776f0c2793.roa
File: 8f5d81b4-6393-3f46-863d-83776f0c2793.roa (raw, json)
Hash identifier: kKUmPfMMDO5WQAP63zN/zq0drQaWZ7ln9nDp0MKrZ5s=
Subject key identifier: 29:68:7F:C7:D5:C7:A9:DE:D5:FF:9F:54:8B:58:1E:85:ED:A8:10:9A
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C8046DECCF41CE582811A5620
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8f5d81b4-6393-3f46-863d-83776f0c2793.roa
Signing time: Mon 12 Jan 2026 14:00:40 +0000
ROA not before: Mon 12 Jan 2026 14:00:40 +0000
ROA not after: Sun 12 Apr 2026 13:00:40 +0000
asID: 30036
IP address blocks: 192.119.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:80:46:de:cc:f4:1c:e5:82:81:1a:56:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 12 14:00:40 2026 GMT
Not After : Apr 12 13:00:40 2026 GMT
Subject: CN=e0a2feb3-51fb-4ecc-a0ad-f4c7a0741a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e6:e3:c3:e5:36:cc:f7:3e:b4:38:a6:28:0c:
b8:a9:ca:16:80:24:4b:29:12:fd:5a:74:25:74:a4:
ba:00:bc:a7:6f:cd:3f:8b:93:46:78:a2:87:10:c1:
05:63:b9:a4:e4:a1:49:f9:1a:f9:c7:05:43:66:66:
ca:95:21:26:20:49:ce:18:14:55:31:25:df:5d:f7:
57:ee:a7:d6:de:4c:a0:d5:8c:39:80:3f:1d:68:cd:
e0:64:b2:54:2a:6d:6c:c1:ae:81:80:08:5e:2d:49:
f5:e4:ae:05:dc:4c:59:a3:90:5b:da:e9:36:3d:f0:
9d:49:eb:76:2f:01:65:e9:44:42:62:01:12:51:7c:
99:dc:ec:b3:cf:43:0d:c2:07:c1:39:17:96:5c:9f:
70:0b:01:11:9a:e9:1b:25:66:7c:50:48:fb:97:e7:
04:ef:83:c4:5c:99:3b:27:eb:26:b1:ea:9d:da:64:
b3:77:f9:2d:2f:b8:0d:ab:29:68:02:1e:fe:59:93:
28:1a:1e:66:7c:9f:ca:1b:b2:e2:a1:fd:a2:8d:6b:
6c:a7:73:03:ee:0f:cd:35:9c:a0:7a:f1:2a:0f:5d:
13:db:6b:4d:70:3c:09:55:ed:3b:3f:9a:6d:66:54:
cf:88:be:92:45:b6:88:0a:d6:e8:5c:db:89:c7:74:
df:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:68:7F:C7:D5:C7:A9:DE:D5:FF:9F:54:8B:58:1E:85:ED:A8:10:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8f5d81b4-6393-3f46-863d-83776f0c2793.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
192.119.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:d1:b9:b4:3c:b5:4e:58:aa:1a:ec:ba:d5:bc:6b:de:93:68:
53:b7:f2:02:4b:45:03:04:55:71:65:5e:ae:ab:6a:0d:49:39:
fe:55:7e:2c:ac:73:1b:f5:9d:db:58:a1:a7:b1:a9:b0:00:a5:
34:e3:b4:a3:51:34:ac:75:f5:11:2f:12:a8:3e:41:5e:e3:12:
95:74:5a:01:7e:19:b8:11:f2:eb:09:e7:7f:5a:2a:d9:76:a2:
41:71:41:8f:9b:96:85:97:00:bf:7e:3e:53:8b:dd:25:b4:2c:
fa:19:cb:03:ae:8c:ae:88:88:dd:9f:ee:52:d4:23:42:b4:a4:
e0:74:04:25:c4:b6:ba:ea:48:41:53:4e:13:71:0b:ea:34:56:
70:0e:bc:ab:79:8b:57:bb:c3:10:2c:dc:b1:e6:76:a6:e3:f9:
d8:4b:07:6a:f7:fc:dd:10:f7:6b:73:7d:64:0f:08:3d:1c:6c:
f6:63:0f:9e:ef:eb:89:d0:7f:6e:2c:e9:f6:92:79:7c:db:1f:
c8:3e:31:99:2b:59:65:ed:31:03:19:18:e5:e5:08:dc:ad:c7:
b2:a5:60:b0:57:1a:57:ed:3b:31:eb:b9:2b:73:46:9c:c5:44:
31:37:45:a3:19:48:c5:6a:07:93:5b:21:5e:1b:ff:5b:3e:47:
74:4c:06:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:26:34 2026 by rpki-client