
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/428b33ba-641e-3526-a67a-212e310bee09.roa
File: 428b33ba-641e-3526-a67a-212e310bee09.roa (raw, json)
Hash identifier: 3h0rBsu7tA++/sWPcztFAHiJzFkLKNRQn4HZz0rmO9I=
Subject key identifier: AD:E0:89:7D:1A:5D:4A:C1:B4:D1:22:BA:EB:34:FA:11:1D:DB:32:67
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C9536E050ED5A5A0B04393EE8
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/428b33ba-641e-3526-a67a-212e310bee09.roa
Signing time: Tue 20 Jan 2026 02:00:29 +0000
ROA not before: Tue 20 Jan 2026 02:00:29 +0000
ROA not after: Mon 20 Apr 2026 01:00:29 +0000
asID: 30036
IP address blocks: 2604:2e8e:9400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:95:36:e0:50:ed:5a:5a:0b:04:39:3e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 20 02:00:29 2026 GMT
Not After : Apr 20 01:00:29 2026 GMT
Subject: CN=38c0bf01-91eb-4e20-95d2-253bc9858857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:06:91:04:bd:be:f4:6d:a6:93:59:4c:f1:
10:ca:92:dc:a4:2a:71:4e:80:0d:56:ae:f5:72:4e:
02:f5:a0:e2:4c:86:63:ca:88:a8:43:1f:6b:f6:21:
53:f4:41:01:2c:20:e3:d1:fb:fa:1d:94:c4:67:6b:
0d:9b:0d:2b:93:df:1b:4c:a9:93:34:72:79:83:a3:
0e:52:e1:ba:0a:bc:46:e6:84:1e:05:6a:c6:aa:82:
18:b0:9b:a9:d0:a5:8a:00:f4:b6:8a:aa:a3:88:ec:
9e:a7:9e:b3:e0:49:6f:00:68:df:6c:8d:60:09:de:
1e:47:ac:fa:0a:3b:57:95:46:6b:bd:41:6d:51:9c:
b0:29:c4:c1:99:7b:1c:18:4c:6f:87:8a:07:18:b2:
c2:ac:ac:40:62:ee:50:26:8b:0c:2d:bd:89:0f:c5:
e6:c6:2e:b3:68:18:9c:03:83:4f:f5:3b:a8:c7:5d:
e6:2e:0a:dc:2e:86:50:5e:cc:44:16:8d:31:e2:a5:
50:b3:bc:72:06:3c:bb:6e:db:b0:6e:93:f6:c6:12:
b7:c8:47:51:37:29:ba:c3:6b:05:4c:9f:65:a1:90:
4f:b8:32:41:31:fe:42:22:7f:62:46:dd:87:7e:65:
87:34:64:4e:51:e1:66:1d:50:97:f9:2a:35:cd:e9:
f8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E0:89:7D:1A:5D:4A:C1:B4:D1:22:BA:EB:34:FA:11:1D:DB:32:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/428b33ba-641e-3526-a67a-212e310bee09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8e:9400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:d1:55:bd:1a:b3:4c:50:3d:d0:05:07:f7:db:f7:b0:f3:60:
e9:2a:48:ac:cc:f4:a1:e6:77:9c:e0:2c:7d:65:17:8d:30:39:
7e:0f:c4:a3:c9:4c:d0:54:33:b8:d0:e0:f8:87:9e:85:cf:47:
ea:4e:b8:99:f5:06:a7:87:d8:32:12:27:ea:7e:38:8d:1b:d9:
f4:0e:4f:2b:b2:6e:af:d1:ce:3e:b0:e5:48:e2:23:91:83:fc:
9a:e9:22:a3:16:67:c9:58:34:c1:cd:9f:08:1c:5c:d1:5f:c8:
21:bc:43:05:54:81:e7:43:2c:a7:a9:8c:e9:5b:e9:d4:42:10:
8f:75:7e:16:c7:6d:99:96:a4:7f:e8:c8:2b:bd:08:60:a6:8e:
8f:ba:f1:60:f1:a2:98:46:a6:af:ad:ea:17:aa:e2:a1:32:88:
e3:b1:ab:5e:74:57:7f:09:5b:45:2a:a1:f4:34:44:1d:8d:80:
b4:2d:02:87:a6:9d:86:c0:82:6a:83:28:64:1c:2e:ed:c6:b7:
c0:c4:1b:5c:b7:17:b5:d0:bf:ca:e7:e5:a8:cb:68:cb:b8:02:
46:c2:23:72:cd:74:9e:f6:88:f9:93:fc:a0:c6:56:3a:57:d8:
b3:ed:cd:ff:25:cb:21:ca:b1:4b:f9:f1:8b:d9:af:bd:81:6b:
f9:e7:02:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:37 2026 by rpki-client