
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/474a9147-b845-3ae9-8166-38a9f07904b8.roa
File: 474a9147-b845-3ae9-8166-38a9f07904b8.roa (raw, json)
Hash identifier: XlBY9GLryPIioJlgquViRYVrgvAh6FRiFhowIofE5cA=
Subject key identifier: 28:32:26:98:4E:D5:67:74:47:18:D5:F2:5F:6C:E4:90:A8:3D:92:D1
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D5024E109BB00442B692B1A00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/474a9147-b845-3ae9-8166-38a9f07904b8.roa
Signing time: Sat 28 Mar 2026 01:00:31 +0000
ROA not before: Sat 28 Mar 2026 01:00:31 +0000
ROA not after: Fri 26 Jun 2026 01:00:31 +0000
asID: 30036
IP address blocks: 2604:2e8f:f000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:50:24:e1:09:bb:00:44:2b:69:2b:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 28 01:00:31 2026 GMT
Not After : Jun 26 01:00:31 2026 GMT
Subject: CN=aabba89a-86a7-4c56-937c-befe0e397361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c6:a6:56:32:a2:10:46:ef:fd:35:0b:4f:e5:
2c:fb:83:45:f4:1d:41:43:9d:77:f3:12:56:67:f5:
1c:e0:1d:af:bc:ac:55:5e:9d:00:4d:ee:f7:aa:67:
fb:0e:a8:1a:37:36:26:24:32:17:e7:0b:6f:5f:72:
da:ab:79:29:f9:1b:ac:6d:3b:28:50:3e:84:c0:21:
04:65:e4:53:7d:67:93:d7:19:7a:7e:6e:31:ec:fb:
6b:3d:70:c6:2f:77:82:af:29:16:e0:8d:77:58:36:
05:37:d1:2e:51:80:0f:35:17:28:d2:3f:64:99:10:
41:9a:16:19:7f:c8:b6:68:0c:70:99:f2:40:96:1c:
a2:85:64:73:c1:b4:a2:18:88:8c:95:48:54:f4:4a:
f1:b9:b6:e2:2f:a1:e4:a9:dc:ac:ec:5f:06:1d:1b:
35:cf:45:09:a5:be:a4:0a:cf:d3:38:4c:49:3a:13:
2c:aa:93:60:75:d4:f1:a1:e0:e9:58:c8:fa:5d:0e:
35:84:f5:6a:2b:37:45:b0:ae:07:36:79:dc:52:9d:
14:42:a1:b8:12:e8:39:cd:22:49:95:7e:55:b0:0f:
12:74:84:8b:c4:0d:72:d8:32:75:5a:f3:52:29:dd:
94:1f:aa:45:4a:fb:db:8e:71:b6:63:78:48:3f:1d:
63:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:32:26:98:4E:D5:67:74:47:18:D5:F2:5F:6C:E4:90:A8:3D:92:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/474a9147-b845-3ae9-8166-38a9f07904b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8f:f000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:2c:10:bc:15:e5:ca:c2:20:a7:22:bd:a1:81:33:3e:0d:56:
2a:b3:b1:ca:23:b6:bb:28:4f:ca:c0:bb:e8:59:b8:8f:f4:8a:
e9:78:0b:11:f5:72:c6:84:41:cd:b6:8d:61:69:0d:60:40:91:
96:b6:d4:04:99:00:ff:c7:b2:be:7b:ba:09:a3:b5:81:21:2a:
fb:8d:04:f0:11:ef:20:dc:38:8e:20:ff:01:bd:49:17:78:72:
05:81:8c:51:dc:0c:67:ef:ab:34:86:07:f3:1d:57:4e:90:61:
c2:bd:8c:85:9d:93:24:58:15:49:35:5f:6d:cb:20:ca:05:b7:
82:8b:96:69:22:3f:ce:80:d4:1a:4b:da:51:e3:d8:b5:1a:82:
a9:10:f9:b4:33:0c:38:9b:db:1f:7d:a1:42:77:67:26:cf:b0:
ef:28:7f:ee:a1:eb:0a:6c:84:27:41:82:8c:f2:c9:fd:60:44:
8f:d5:26:d6:6f:79:38:0f:af:ba:d0:7f:ee:fa:1a:c5:2c:08:
f1:ee:9a:29:40:9e:64:ce:b1:be:ad:d3:86:82:d2:1c:d4:10:
0e:20:94:40:22:e7:bf:21:d5:b1:4e:b1:93:00:62:bf:9b:b4:
7a:ab:95:fa:e9:79:4b:ed:dd:f5:41:e2:4a:92:3e:d1:b9:7b:
55:1d:32:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:49:40 2026 by rpki-client