
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/168dd68b-76ca-3221-a42f-f725fa7f9374.roa
File: 168dd68b-76ca-3221-a42f-f725fa7f9374.roa (raw, json)
Hash identifier: X/x67uoOum1mzpCrY7H4VqNq7XjKIMoXT3AxZ0PKj9o=
Subject key identifier: 9B:08:A0:31:12:9A:2E:17:09:40:38:50:9A:D4:F3:35:CA:C6:10:B8
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584F4974E2D96EF3A7E22CF33590
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/168dd68b-76ca-3221-a42f-f725fa7f9374.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 19905
IP address blocks: 2604:2e89:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:e2:d9:6e:f3:a7:e2:2c:f3:35:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=587a8bcc-aeda-45c4-ae3b-3a276e73d3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e9:11:cd:9d:1f:7f:0c:89:d6:ff:59:f4:46:
a7:a5:59:aa:13:92:61:28:1f:a0:db:38:4c:2d:49:
2b:a3:7e:e8:38:6e:bb:1a:d0:30:bc:be:bf:d5:c7:
74:9d:e6:88:79:85:84:09:0d:2a:b6:5f:b8:b9:4b:
98:bc:e6:1c:ed:ab:21:32:15:56:60:e9:f9:bb:3c:
df:2c:5f:39:ae:31:d0:38:db:aa:a9:fe:b1:79:6f:
c8:a0:4a:40:a7:a0:9b:45:09:57:e5:7f:29:48:35:
fe:6e:18:c7:0e:bb:42:a5:4e:c0:cf:2b:a8:d5:b6:
04:e5:28:20:10:b5:19:e4:62:40:83:61:54:53:92:
30:09:c3:18:03:12:01:43:48:f9:80:1f:30:17:b5:
78:14:25:28:b9:90:00:23:5b:55:fc:6f:aa:f6:6a:
d5:ea:c8:5f:30:c3:af:9a:bb:6c:5a:d4:f5:0f:4f:
da:b8:39:f8:82:6b:5e:21:0f:51:72:37:e9:d8:1c:
3c:98:dd:67:d3:84:8d:ca:84:00:4b:fc:23:23:b2:
5b:bf:ed:12:e6:14:f0:88:99:2a:06:04:0d:41:ee:
b8:03:9f:5b:fa:1c:84:4d:89:bf:29:da:68:fe:8d:
68:30:bb:ed:c6:ef:c7:4c:92:52:ba:a9:4e:94:58:
6e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:08:A0:31:12:9A:2E:17:09:40:38:50:9A:D4:F3:35:CA:C6:10:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/168dd68b-76ca-3221-a42f-f725fa7f9374.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:b3:7e:68:74:d9:fc:2c:b8:d4:5b:8b:ab:a7:f3:88:ca:c6:
a6:53:79:d9:4b:91:2e:12:f9:0c:7d:36:36:9f:b1:01:dc:7d:
e4:50:a6:74:a3:00:f8:3a:66:b0:ca:8e:e5:87:1a:b6:63:2c:
83:99:27:87:37:f6:28:b8:dc:68:67:40:6f:21:46:2f:85:bb:
f9:54:2e:f2:2f:df:41:b8:f0:3e:d0:b8:20:d5:b0:81:c5:28:
35:d5:ff:75:ab:7b:81:3a:90:9c:9c:39:1c:d3:da:23:05:5b:
6b:a3:f4:87:50:22:90:a1:7b:e4:f7:c9:c6:07:92:ac:ae:41:
a4:13:89:c3:7c:bf:c0:2e:51:02:d4:bf:17:88:9b:db:53:dd:
30:6e:3c:2b:e4:bf:83:ec:f7:56:a5:79:c9:d7:ab:76:74:c7:
7f:77:ba:26:1f:72:b9:64:67:50:74:48:6a:97:3c:c9:c6:90:
99:b3:cc:35:cd:70:63:09:a8:f8:39:c7:97:46:3f:40:0d:2f:
41:d7:12:41:ee:6e:d7:02:24:c7:8f:8b:cf:55:df:3e:e7:90:
c1:e5:bd:8c:d6:6e:8b:f2:74:a2:31:cd:72:01:60:3d:1a:ae:
f4:a9:44:f3:c7:95:f5:1c:b5:9b:ad:4c:da:61:94:f7:05:b8:
cc:0e:1d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:45:40 2026 by rpki-client