
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28a5470f-f034-3a3f-ac49-9b49b6bd08b6.roa
File: 28a5470f-f034-3a3f-ac49-9b49b6bd08b6.roa (raw, json)
Hash identifier: uD8dokN0nE9J9aYtb8URNjvUn5wg+lrRsM5Pz9UCYr8=
Subject key identifier: 0A:AD:86:95:13:9B:C5:EE:F3:B9:77:64:DB:CC:FF:C7:B3:D4:38:CD
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584CAA272F91F8D486235800B24A
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28a5470f-f034-3a3f-ac49-9b49b6bd08b6.roa
Signing time: Tue 27 Jan 2026 14:00:36 +0000
ROA not before: Tue 27 Jan 2026 14:00:36 +0000
ROA not after: Mon 27 Apr 2026 13:00:36 +0000
asID: 19905
IP address blocks: 2604:2e87:a400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:aa:27:2f:91:f8:d4:86:23:58:00:b2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 27 14:00:36 2026 GMT
Not After : Apr 27 13:00:36 2026 GMT
Subject: CN=36a105bc-7d13-4589-9ea7-6aca7539236a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c6:72:cc:35:7f:6d:cf:01:4f:c9:f2:07:45:
3b:79:de:7c:d0:bd:81:1c:78:59:67:fb:eb:1e:8b:
5b:fe:5c:10:36:09:01:aa:5d:03:66:40:7e:b0:a2:
2e:aa:09:f9:82:6b:b3:45:f4:00:25:67:24:d2:7f:
3e:30:c5:63:8a:45:f8:f3:30:b4:4b:d8:42:97:1a:
f1:7e:d2:16:48:ad:8b:03:43:72:01:52:8a:d7:ba:
36:12:d1:88:5f:19:14:d0:ed:21:d7:e4:85:9a:28:
ce:ec:b2:12:c5:07:0b:7b:ac:1d:1c:cf:51:51:99:
a8:0a:5e:e8:06:b5:6e:1e:fd:61:73:af:7f:0d:7c:
f6:65:0c:4f:86:29:bc:04:27:36:83:7e:c2:8a:85:
cd:b0:6e:ba:09:d5:39:98:ab:07:12:87:92:ae:7d:
5e:ea:2a:d3:77:0a:68:9b:a5:39:25:b2:40:e1:8c:
92:b0:b7:8f:3d:1f:cf:a8:4f:3d:f1:43:24:05:8f:
81:03:e4:75:49:e3:2a:23:2c:56:37:a0:12:a6:8e:
8a:c3:3e:72:00:f3:74:4a:5a:a0:5f:ff:95:98:33:
9c:77:af:0e:7f:f3:0f:04:d8:d8:0e:05:bf:7b:e3:
0e:31:a7:98:37:7e:05:99:aa:e9:6a:0b:af:1b:2e:
a5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AD:86:95:13:9B:C5:EE:F3:B9:77:64:DB:CC:FF:C7:B3:D4:38:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28a5470f-f034-3a3f-ac49-9b49b6bd08b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e87:a400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:d5:8e:c7:3f:ff:25:59:f9:cc:df:f5:92:aa:b1:65:1d:1d:
39:67:73:02:b1:e4:fe:21:e0:2a:92:e2:85:c7:d4:c8:57:71:
1e:7e:ec:ba:0e:36:14:cc:b0:fa:d4:c4:73:d4:e9:e6:fa:52:
09:18:f9:d6:76:1e:4c:85:ff:1f:ea:db:c4:68:24:76:ae:bd:
75:2e:08:1d:ee:d5:1a:94:b1:47:08:bf:dd:5f:12:bf:08:43:
44:85:3c:9a:0b:5c:fe:12:9a:49:9b:bf:a1:8c:6f:e7:6b:25:
2d:bc:bd:6a:79:0a:83:3a:ef:2e:6b:63:f6:46:28:f0:95:ab:
a5:55:48:c7:f5:58:30:48:39:69:d0:77:84:c3:2d:66:32:92:
7e:ec:ec:f2:8c:90:15:f1:4f:16:21:2f:40:66:4d:3f:a1:02:
5a:50:32:87:69:5f:a5:3f:73:93:91:69:2b:b1:6f:9a:f5:fb:
c0:1b:39:1b:87:fa:48:37:fa:f9:39:42:6c:af:2e:87:ed:93:
e9:4a:8c:c8:3e:28:6e:a2:c4:9a:60:8d:02:3c:d7:2f:b4:ad:
ba:90:a0:4c:a4:f9:e2:3c:84:53:95:cd:61:56:24:4f:4b:e2:
52:17:46:62:2f:7b:59:04:a8:b2:9b:63:aa:5e:ae:57:8b:f3:
bf:d7:f6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:42 2026 by rpki-client