
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5004927c-f4ba-3439-b90d-72853318b574.roa
File: 5004927c-f4ba-3439-b90d-72853318b574.roa (raw, json)
Hash identifier: bGYmt6smEAWsnQKZncl2qnjIknQAKlKhlOTGHfxKfd4=
Subject key identifier: A5:2B:52:EA:26:2C:9D:ED:73:40:C1:70:A5:9F:05:00:E5:B5:B5:E2
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C7D7C3C0563FECB695D5F5300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5004927c-f4ba-3439-b90d-72853318b574.roa
Signing time: Sun 11 Jan 2026 14:00:39 +0000
ROA not before: Sun 11 Jan 2026 14:00:39 +0000
ROA not after: Sat 11 Apr 2026 13:00:39 +0000
asID: 30036
IP address blocks: 2604:2e87:3400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:7d:7c:3c:05:63:fe:cb:69:5d:5f:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 11 14:00:39 2026 GMT
Not After : Apr 11 13:00:39 2026 GMT
Subject: CN=5e500e67-342f-4dcf-b3cb-8828bf9f4c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:65:57:12:99:86:01:03:e9:02:fc:b9:19:2c:
11:da:cb:6f:8f:69:42:af:3d:df:37:78:ce:c6:7f:
26:da:8f:7d:a7:d0:9e:f5:ac:8d:49:e0:02:f9:ed:
24:2b:37:94:9f:30:5e:98:e2:c9:87:e3:22:64:51:
50:17:2f:b5:4d:cc:4e:ea:2e:5b:0d:30:e9:44:95:
76:ca:5b:95:ec:aa:47:c8:b3:eb:67:77:d9:ab:98:
ed:80:8a:1b:22:bc:29:f7:5b:6c:54:6e:07:01:2d:
6b:3f:00:2a:ba:07:8f:c9:3a:ee:ae:33:85:7f:a1:
5e:d0:a4:cc:36:f4:5c:d8:26:ab:f5:2a:c6:19:5b:
9c:47:98:a1:0b:9d:fd:ae:fe:7a:cc:9a:22:fe:b5:
fa:0b:28:73:4e:7e:42:fb:ea:bd:55:52:17:25:b3:
1b:66:4a:d3:f5:27:b6:cf:bb:f3:c2:2e:10:45:d9:
ee:b7:78:1d:8d:8d:10:ee:e6:7a:9b:10:7f:bb:5b:
4c:d9:f7:d4:41:a7:20:53:77:10:77:3b:20:3f:f3:
d8:00:26:fc:e5:f6:06:5f:2f:39:5d:74:c6:85:81:
9c:f3:ae:18:66:a1:bb:74:50:32:74:39:12:6b:9b:
e8:cb:d0:5d:5d:db:a3:5b:a6:8d:de:49:13:e3:c9:
c8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2B:52:EA:26:2C:9D:ED:73:40:C1:70:A5:9F:05:00:E5:B5:B5:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5004927c-f4ba-3439-b90d-72853318b574.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e87:3400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:bc:78:ed:e0:e6:78:06:61:18:69:c3:ec:53:ec:bb:a1:4e:
d8:91:2c:b0:f2:1d:4a:86:94:eb:64:07:e0:c7:af:27:2e:82:
1a:39:00:57:de:23:d4:14:27:34:59:7d:d8:64:0f:cf:55:42:
d5:0a:2c:5d:c0:9b:a9:13:62:a3:df:36:fd:83:28:99:fb:ef:
a2:b6:ca:4b:3c:c8:33:d3:ae:ac:f4:e3:10:ac:87:2b:f1:41:
83:37:19:cc:31:c9:aa:f1:61:ba:0c:bd:e7:77:e6:b3:2b:e6:
69:e0:26:c0:41:9b:4a:46:24:d1:48:0f:34:b2:9e:9f:2e:00:
03:46:14:6c:70:35:3c:25:2b:be:64:34:a9:1e:22:0a:93:ad:
30:c8:51:04:67:18:d5:5e:98:de:a7:96:63:e5:62:2b:42:ca:
d1:03:35:ba:41:22:32:db:95:a4:3c:10:b2:8d:b9:9f:d5:9a:
f3:fa:0b:36:bc:c5:66:43:8b:f3:76:2b:84:dd:d3:d7:50:59:
04:9c:f7:0c:56:89:9f:55:94:c4:9b:0a:12:5e:79:7c:51:c9:
da:59:2c:e2:b7:d1:d8:97:7b:c2:ff:74:a5:fe:88:d4:4e:de:
d0:4b:ac:30:d6:ac:ea:7a:5d:1b:dd:f0:11:fb:9b:8c:5c:d1:
b1:3e:41:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:12:22 2026 by rpki-client