
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/598a07d9-5137-35a4-9464-b3e25ddea817.roa
File: 598a07d9-5137-35a4-9464-b3e25ddea817.roa (raw, json)
Hash identifier: qZGy6qjbjnK6ZCxih9qgmmSJd5PbrzGBXvDYg/UA7+s=
Subject key identifier: 76:69:90:4A:60:6E:F8:31:E0:8A:D0:F0:0B:A5:D8:58:99:CE:4E:AF
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584CE57E725FDDE3059FB360B990
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/598a07d9-5137-35a4-9464-b3e25ddea817.roa
Signing time: Tue 17 Feb 2026 20:09:31 +0000
ROA not before: Tue 17 Feb 2026 20:09:31 +0000
ROA not after: Mon 18 May 2026 19:09:31 +0000
asID: 19905
IP address blocks: 2604:2e8a:3800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e5:7e:72:5f:dd:e3:05:9f:b3:60:b9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 17 20:09:31 2026 GMT
Not After : May 18 19:09:31 2026 GMT
Subject: CN=94ddf3a9-0586-446a-b8a0-7eaff259c501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:07:c9:c7:8f:09:ad:8b:cb:05:b0:8b:ca:
4b:44:ed:fa:f1:53:50:25:0a:80:9d:ec:3b:5e:99:
55:a2:1e:08:ac:09:95:99:82:50:a7:2f:e6:68:b0:
32:9a:a9:07:06:28:64:50:2c:a0:e5:6e:ad:f1:eb:
0e:09:f7:ee:8b:9b:ed:fd:ef:0c:57:8c:15:68:2b:
de:4c:46:b5:4a:32:4a:2d:ca:ac:9f:af:c6:5d:a1:
47:e9:62:de:99:54:71:92:fe:b8:c4:9e:b2:f7:79:
97:56:3a:58:0c:13:39:1f:4d:dd:1d:15:63:b2:db:
57:93:04:a2:1b:a7:83:c8:43:2e:ab:3e:77:0a:be:
23:1b:d0:cf:cb:b0:4c:0c:5e:24:39:13:a8:04:1e:
16:2a:16:f2:01:2b:c1:d5:1e:a1:0b:c6:47:fe:75:
9a:42:68:28:a1:93:9e:97:52:81:3f:ec:a0:c4:4d:
68:06:e2:a5:0b:64:d0:93:05:ed:04:f9:05:43:85:
64:01:e5:e8:3d:64:33:bc:e8:75:8e:bd:c7:41:56:
38:5b:1b:47:9f:93:e5:25:25:97:4a:20:ee:5a:39:
f4:25:c9:a3:e2:99:c5:b4:87:5e:6d:aa:00:0c:f2:
8a:32:2a:d3:ad:f4:d8:e6:c9:87:bb:70:36:21:46:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:69:90:4A:60:6E:F8:31:E0:8A:D0:F0:0B:A5:D8:58:99:CE:4E:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/598a07d9-5137-35a4-9464-b3e25ddea817.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8a:3800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:53:91:00:e4:87:4c:d3:93:bf:ae:c1:fb:95:99:1d:73:9a:
5d:d9:b2:32:17:a0:02:b0:0b:9c:3d:b7:b8:60:a5:9f:d6:29:
39:3e:d1:66:9e:97:88:67:c4:7d:4c:97:31:d7:22:06:7e:2f:
97:83:2f:d8:62:60:f7:e5:70:4f:4c:1a:86:a9:a3:60:94:19:
c3:5a:1d:a0:e6:b3:71:d8:01:c3:c4:b8:89:21:30:e7:4c:67:
71:bb:12:b7:95:0e:ab:40:36:0e:84:4d:dd:b7:04:7a:dc:a2:
e7:84:ee:a1:a3:22:3a:04:3c:f7:67:dd:02:d9:bb:40:ac:d8:
d3:d7:42:3c:85:a4:a0:45:98:63:78:06:b3:5f:10:17:30:7d:
63:3f:2f:cd:d8:34:0c:4a:62:76:0d:d8:5d:19:38:b2:63:f1:
c4:76:df:dc:00:b8:25:1f:53:53:54:ee:4c:3c:bf:83:e4:c8:
9c:f3:22:fa:f5:1f:db:17:1e:d1:bd:6b:fe:aa:40:d2:ca:f4:
b6:c4:f0:fe:55:16:fe:27:c2:89:38:c3:aa:15:45:07:2f:97:
50:8b:fa:6b:ca:76:60:b4:e6:4d:84:f9:b5:7b:ec:67:f2:18:
74:3c:33:d6:1e:98:a8:34:16:eb:ca:73:12:1e:80:21:4c:24:
2e:5e:1b:d2
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzlfnJf3eMFn7NguZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDIxNzIwMDkzMVoXDTI2MDUxODE5MDkzMVowLzEtMCsGA1UEAxMk
OTRkZGYzYTktMDU4Ni00NDZhLWI4YTAtN2VhZmYyNTljNTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5gHycePCa2LywWwi8pLRO368VNQJQqAnew7
XplVoh4IrAmVmYJQpy/maLAymqkHBihkUCyg5W6t8esOCffui5vt/e8MV4wVaCve
TEa1SjJKLcqsn6/GXaFH6WLemVRxkv64xJ6y93mXVjpYDBM5H03dHRVjsttXkwSi
G6eDyEMuqz53Cr4jG9DPy7BMDF4kOROoBB4WKhbyASvB1R6hC8ZH/nWaQmgooZOe
l1KBP+ygxE1oBuKlC2TQkwXtBPkFQ4VkAeXoPWQzvOh1jr3HQVY4WxtHn5PlJSWX
SiDuWjn0Jcmj4pnFtIdebaoADPKKMirTrfTY5smHu3A2IUZluwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHZpkEpgbvgx4IrQ8Aul2FiZzk6vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNTk4YTA3ZDktNTEzNy0z
NWE0LTk0NjQtYjNlMjVkZGVhODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuijgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAHFORAOSHTNOTv67B+5WZHXOaXdmyMhegArALnD23uGCln9YpOT7R
Zp6XiGfEfUyXMdciBn4vl4Mv2GJg9+VwT0wahqmjYJQZw1odoOazcdgBw8S4iSEw
50xncbsSt5UOq0A2DoRN3bcEetyi54TuoaMiOgQ892fdAtm7QKzY09dCPIWkoEWY
Y3gGs18QFzB9Yz8vzdg0DEpidg3YXRk4smPxxHbf3AC4JR9TU1TuTDy/g+TInPMi
+vUf2xce0b1r/qpA0sr0tsTw/lUW/ifCiTjDqhVFBy+XUIv6a8p2YLTmTYT5tXvs
Z/IYdDwz1h6YqDQW68pzEh6AIUwkLl4b0g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:44:58 2026 by rpki-client