
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/373bc2d1-29e2-31a5-bbbc-077d7849242d.roa
File: 373bc2d1-29e2-31a5-bbbc-077d7849242d.roa (raw, json)
Hash identifier: RH0IAtU/5Czd8+mc5IWKVy+FipF5Bk+83PACixv3h4c=
Subject key identifier: FA:F7:BC:58:64:1E:F7:C0:87:31:C6:A6:5B:45:82:8C:07:1A:DC:72
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584CC34736F7754E41EA91B024C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/373bc2d1-29e2-31a5-bbbc-077d7849242d.roa
Signing time: Thu 05 Feb 2026 14:00:40 +0000
ROA not before: Thu 05 Feb 2026 14:00:40 +0000
ROA not after: Wed 06 May 2026 13:00:40 +0000
asID: 19905
IP address blocks: 2604:2e89:7400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c3:47:36:f7:75:4e:41:ea:91:b0:24:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 5 14:00:40 2026 GMT
Not After : May 6 13:00:40 2026 GMT
Subject: CN=05211d48-b40e-469c-bf06-5ac40bdb31ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:66:08:60:92:94:79:72:f5:7e:0a:3e:cb:
eb:11:f6:be:a5:e8:6f:0f:d1:64:1b:36:df:bb:3c:
de:40:45:f6:e2:2d:da:54:96:a5:79:3b:11:e7:28:
8a:37:e2:e6:3b:06:6b:80:a8:fe:4c:af:df:af:74:
68:76:d9:6f:fa:21:ff:3e:07:bf:89:5d:f0:98:ac:
a3:df:87:34:59:12:55:31:50:ce:00:58:c7:df:fd:
a9:6f:c1:57:c3:37:e8:fd:6f:eb:c7:5c:45:5a:9e:
b6:38:fe:a2:04:d3:9f:7a:5a:d2:08:b8:22:e3:3d:
dc:63:5d:f7:95:cb:ab:37:ca:af:78:da:4e:79:b5:
b5:4c:78:bc:31:b3:b4:4e:e2:0e:48:79:61:23:0f:
a4:90:60:e8:f1:29:bf:22:68:4b:ea:b7:64:24:f5:
8b:7d:48:9d:af:ac:b3:a0:45:f3:43:24:ae:ff:0e:
17:12:b8:23:ac:4b:9a:2e:35:e2:6c:17:36:08:17:
f1:ec:30:19:f5:0a:3c:29:e4:5f:0e:86:e7:55:2b:
6f:52:ac:6c:98:a4:76:a1:ed:65:65:d7:57:83:f8:
e4:68:3b:5d:71:e7:ea:bd:19:db:05:e8:82:18:f9:
df:ba:84:26:b8:f0:ce:b1:b7:59:c9:2c:68:c4:a9:
d7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F7:BC:58:64:1E:F7:C0:87:31:C6:A6:5B:45:82:8C:07:1A:DC:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/373bc2d1-29e2-31a5-bbbc-077d7849242d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:7400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:58:53:5c:32:53:04:94:53:ce:77:a0:3a:c5:e5:e2:51:42:
77:56:97:f1:90:f5:4e:97:0f:6f:f8:78:13:0c:90:a4:ee:ea:
2b:ff:a4:54:1c:51:76:4d:21:6c:d4:5e:8b:13:05:c9:79:a8:
68:22:ba:a4:fc:fb:16:ef:5a:15:35:ff:59:14:65:4e:68:9f:
7d:df:35:41:6f:d0:12:7d:52:19:2d:09:6a:4c:e0:8c:e3:07:
af:10:c2:55:12:ae:92:55:44:45:80:54:4e:4e:9f:60:55:41:
56:3b:4f:ac:20:3a:83:db:b6:52:c0:09:62:25:cf:18:5e:96:
53:a6:8c:de:ea:11:79:f8:48:3d:d4:e6:51:15:3a:d8:41:f0:
31:4f:88:8b:97:b6:99:dd:2a:8d:f4:79:e0:e9:5d:33:f9:87:
ed:26:98:76:2f:53:38:31:4a:07:57:75:46:b8:c0:47:95:d4:
5f:81:07:74:3e:5a:38:4d:33:68:9c:a6:cb:c5:e3:46:40:dd:
43:17:d8:cc:a3:e4:8e:6d:e0:37:70:63:41:c0:b2:75:05:25:
79:b3:ec:c7:0e:f4:97:74:82:7a:a5:24:5c:38:7f:8a:bb:75:
78:dc:82:22:c2:0e:59:75:5d:77:aa:5a:63:23:c8:be:07:bd:
5a:c2:21:f1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzDRzb3dU5B6pGwJMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDIwNTE0MDA0MFoXDTI2MDUwNjEzMDA0MFowLzEtMCsGA1UEAxMk
MDUyMTFkNDgtYjQwZS00NjljLWJmMDYtNWFjNDBiZGIzMWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlytmCGCSlHly9X4KPsvrEfa+pehvD9FkGzbf
uzzeQEX24i3aVJaleTsR5yiKN+LmOwZrgKj+TK/fr3Rodtlv+iH/Pge/iV3wmKyj
34c0WRJVMVDOAFjH3/2pb8FXwzfo/W/rx1xFWp62OP6iBNOfelrSCLgi4z3cY133
lcurN8qveNpOebW1THi8MbO0TuIOSHlhIw+kkGDo8Sm/ImhL6rdkJPWLfUidr6yz
oEXzQySu/w4XErgjrEuaLjXibBc2CBfx7DAZ9Qo8KeRfDobnVStvUqxsmKR2oe1l
ZddXg/jkaDtdcefqvRnbBeiCGPnfuoQmuPDOsbdZySxoxKnXTwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPr3vFhkHvfAhzHGpltFgowHGtxyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzczYmMyZDEtMjllMi0z
MWE1LWJiYmMtMDc3ZDc4NDkyNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiXQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAllhTXDJTBJRTznegOsXl4lFCd1aX8ZD1TpcPb/h4EwyQpO7qK/+k
VBxRdk0hbNReixMFyXmoaCK6pPz7Fu9aFTX/WRRlTmiffd81QW/QEn1SGS0Jakzg
jOMHrxDCVRKuklVERYBUTk6fYFVBVjtPrCA6g9u2UsAJYiXPGF6WU6aM3uoRefhI
PdTmURU62EHwMU+Ii5e2md0qjfR54OldM/mH7SaYdi9TODFKB1d1RrjAR5XUX4EH
dD5aOE0zaJymy8XjRkDdQxfYzKPkjm3gN3BjQcCydQUlebPsxw70l3SCeqUkXDh/
irt1eNyCIsIOWXVdd6paYyPIvge9WsIh8Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:44 2026 by rpki-client