
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/09db46d1-10ec-3502-b937-257453ccb40f.roa
File: 09db46d1-10ec-3502-b937-257453ccb40f.roa (raw, json)
Hash identifier: nBGb2bEPPKbTP6jFSpRInNq4xM5hd+PluOYGXp8fP/E=
Subject key identifier: 0A:A5:A1:6D:61:63:E0:59:E6:53:33:32:BC:3C:3F:8E:40:AD:D0:78
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D00B24303672432CF6E7BC580
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/09db46d1-10ec-3502-b937-257453ccb40f.roa
Signing time: Fri 27 Feb 2026 14:00:40 +0000
ROA not before: Fri 27 Feb 2026 14:00:40 +0000
ROA not after: Thu 28 May 2026 13:00:40 +0000
asID: 30036
IP address blocks: 2604:2e88:bc00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:00:b2:43:03:67:24:32:cf:6e:7b:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 27 14:00:40 2026 GMT
Not After : May 28 13:00:40 2026 GMT
Subject: CN=02ee0ecc-dd9e-4357-9fc7-d6d331d47a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:b8:67:14:5f:93:f5:59:25:05:75:d0:7a:
cc:7c:9a:04:2b:33:dd:d0:09:e7:3f:07:5d:ee:8f:
98:61:65:76:61:ce:82:f7:42:a0:3d:87:e5:0f:0d:
b1:0e:05:da:fe:ae:43:8d:a3:7f:81:52:3a:ea:c1:
89:28:f5:14:12:ed:57:a9:1d:37:4b:e1:2f:bd:f8:
b2:df:c0:a9:47:eb:72:1a:a6:75:d3:1f:f6:89:61:
8d:30:e4:ca:d6:7c:f4:86:19:37:2a:20:9c:20:bb:
9b:bf:6b:91:e4:e3:d4:af:44:a0:c8:bf:5a:a6:dc:
53:c9:6e:28:17:b8:47:25:90:23:9e:08:f0:0e:88:
90:fd:c5:66:12:63:03:24:27:36:bb:36:db:37:7c:
ad:39:2d:bd:1d:06:a6:e6:3c:9d:2b:d1:eb:f4:2b:
84:22:03:1b:07:26:e5:8f:5f:ef:e4:5b:66:fb:13:
65:b0:35:5c:f4:8d:d8:14:49:04:90:7e:15:32:95:
06:21:87:8e:78:a3:07:34:43:9b:1a:ec:f3:3f:3a:
c5:0c:8e:cb:7d:47:fa:2b:37:d2:61:9e:7d:6b:ad:
ba:84:a7:7a:53:45:6a:64:a0:af:3a:f2:1d:82:39:
f1:f8:06:0a:a5:c9:e3:34:d6:91:31:f8:e0:6b:62:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A5:A1:6D:61:63:E0:59:E6:53:33:32:BC:3C:3F:8E:40:AD:D0:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/09db46d1-10ec-3502-b937-257453ccb40f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e88:bc00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:8a:08:e8:39:74:eb:3c:ef:f9:0e:e8:24:59:bc:2b:15:73:
06:ac:50:d5:50:a7:07:a9:a1:5c:67:35:b5:f7:42:42:f7:35:
e2:e5:77:b3:50:26:c5:20:55:1e:8a:78:c7:87:d0:c1:6f:bf:
29:03:6b:e8:f7:c5:1a:c7:ca:a9:19:8d:b4:1d:37:ba:d6:26:
b1:77:41:c2:4d:b4:2b:f6:e4:f1:22:bb:69:4e:8c:96:57:b5:
4f:bc:79:02:c8:d4:49:bb:cf:44:3f:3e:e9:e7:95:08:30:86:
80:f8:32:0d:df:f5:bd:6d:3b:e8:46:92:10:a2:aa:e3:3d:0c:
6e:b9:53:1e:e0:e5:14:8a:a4:1a:73:74:75:9e:40:0a:55:57:
94:9c:1b:c3:59:06:e3:00:59:6d:ef:17:af:89:09:c0:1c:5b:
f3:db:b5:cc:88:95:4f:91:99:ea:07:a3:59:a2:f2:cf:e7:0f:
d6:9e:4e:d2:03:34:5e:40:aa:b4:87:ae:9b:ac:a6:85:7e:d7:
9f:31:d1:ea:04:d6:76:35:52:68:a0:9b:3b:94:81:58:0f:bf:
95:0b:8e:fd:81:ae:50:2c:63:62:3c:98:59:8c:08:46:a8:28:
14:6f:6f:a5:77:bc:8a:f1:5a:32:40:5d:3d:e1:9e:a7:51:c6:
e7:74:82:4c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0AskMDZyQyz257xYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk
MDJlZTBlY2MtZGQ5ZS00MzU3LTlmYzctZDZkMzMxZDQ3YTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHG4ZxRfk/VZJQV10HrMfJoEKzPd0AnnPwdd
7o+YYWV2Yc6C90KgPYflDw2xDgXa/q5DjaN/gVI66sGJKPUUEu1XqR03S+Evvfiy
38CpR+tyGqZ10x/2iWGNMOTK1nz0hhk3KiCcILubv2uR5OPUr0SgyL9aptxTyW4o
F7hHJZAjngjwDoiQ/cVmEmMDJCc2uzbbN3ytOS29HQam5jydK9Hr9CuEIgMbBybl
j1/v5Ftm+xNlsDVc9I3YFEkEkH4VMpUGIYeOeKMHNEObGuzzPzrFDI7LfUf6KzfS
YZ59a626hKd6U0VqZKCvOvIdgjnx+AYKpcnjNNaRMfjga2IB6QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAqloW1hY+BZ5lMzMrw8P45ArdB4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDlkYjQ2ZDEtMTBlYy0z
NTAyLWI5MzctMjU3NDUzY2NiNDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiLww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAm4oI6Dl06zzv+Q7oJFm8KxVzBqxQ1VCnB6mhXGc1tfdCQvc14uV3
s1AmxSBVHop4x4fQwW+/KQNr6PfFGsfKqRmNtB03utYmsXdBwk20K/bk8SK7aU6M
lle1T7x5AsjUSbvPRD8+6eeVCDCGgPgyDd/1vW076EaSEKKq4z0MbrlTHuDlFIqk
GnN0dZ5AClVXlJwbw1kG4wBZbe8Xr4kJwBxb89u1zIiVT5GZ6gejWaLyz+cP1p5O
0gM0XkCqtIeum6ymhX7XnzHR6gTWdjVSaKCbO5SBWA+/lQuO/YGuUCxjYjyYWYwI
RqgoFG9vpXe8ivFaMkBdPeGep1HG53SCTA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:59 2026 by rpki-client