
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c1c9439-d3c6-379d-8af4-7b740cf5aec8.roa
File: 5c1c9439-d3c6-379d-8af4-7b740cf5aec8.roa (raw, json)
Hash identifier: XtmxieTRKpSRVQJHDkCpwiZGUCWGcdGTmiJ0aw6U9GI=
Subject key identifier: BF:5A:3E:28:BB:34:F1:F9:8E:EE:03:6C:E7:B9:F7:C1:B0:D4:1A:2A
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C45A66916274D3AACFA094400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c1c9439-d3c6-379d-8af4-7b740cf5aec8.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 2604:2e8e:e400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a6:69:16:27:4d:3a:ac:fa:09:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=01aae41b-3b9a-4978-845b-a0a3ec0270ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:22:f5:d0:7c:f9:1c:7c:c3:07:75:88:c9:e1:
0a:34:e5:9d:c5:f4:56:6e:4e:e6:42:5c:8b:f8:dc:
c6:54:20:8d:f1:34:ca:c9:f9:6d:a6:5e:d3:7e:c0:
cd:f7:b5:8e:e8:4e:3f:c0:06:36:b4:21:69:d7:82:
18:7a:1e:5e:88:c8:33:d0:29:04:b8:e2:8a:f2:4d:
de:f5:1b:53:36:f7:69:5e:87:0b:f5:ef:49:45:88:
80:91:53:9e:fb:be:1f:fd:08:05:ab:22:03:68:51:
4d:bb:c3:db:87:c0:ad:37:f3:2c:07:35:b0:71:a4:
29:0f:83:09:b2:91:46:84:85:17:91:d6:e0:3d:d9:
2f:a4:45:db:3f:65:51:34:cf:41:f1:30:b6:d2:fc:
a5:66:ce:05:b1:f3:e7:46:80:76:19:5a:8b:78:33:
a9:ba:b0:c6:64:26:f7:9e:b6:be:31:85:53:9b:35:
32:6a:e7:ae:39:3b:59:2b:0b:2a:3f:e2:d9:00:32:
f3:ac:03:8d:eb:21:09:da:1d:69:b5:b3:e5:c3:ad:
a0:01:69:00:ad:90:5d:e7:5d:61:5d:28:09:d9:df:
d2:c9:ad:97:5c:94:fd:6f:bb:f5:5e:fc:3a:ac:99:
91:3a:a1:0f:43:bd:f0:5d:71:4f:47:87:24:b5:47:
b3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5A:3E:28:BB:34:F1:F9:8E:EE:03:6C:E7:B9:F7:C1:B0:D4:1A:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c1c9439-d3c6-379d-8af4-7b740cf5aec8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8e:e400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:4b:20:af:21:a9:15:f6:dc:2b:26:ea:16:5d:21:d9:ba:6e:
8d:13:e9:13:f7:2c:76:06:58:c1:1b:09:2f:19:81:be:a5:14:
7b:7f:fa:3c:9a:91:88:33:53:05:28:06:1d:de:ec:97:db:41:
1a:db:8d:77:e2:d3:66:ba:f7:a2:5c:ad:e5:4d:aa:5a:b5:1a:
5f:2d:ef:dd:67:7a:59:0c:58:87:28:be:8a:b8:4b:df:33:43:
12:45:ae:cc:53:2f:aa:de:44:a6:2c:ef:36:3c:9e:c7:ae:e9:
8b:84:48:55:1b:e9:bf:c8:a4:4a:7f:43:ce:28:82:72:a9:66:
66:4d:4f:81:84:33:3d:e8:76:0e:a1:e6:f7:ec:70:a3:bf:3a:
c2:cd:76:55:8e:70:0d:10:f3:81:11:7b:9c:0e:55:c9:f8:32:
8d:87:60:6d:f1:3b:2c:77:d8:18:be:d1:a2:21:77:77:a5:db:
59:52:56:4c:c0:d2:19:67:10:d6:66:5d:72:b0:53:32:80:0c:
82:a6:bb:26:b1:5a:6f:02:1d:3d:50:98:fe:83:7b:23:16:2a:
c7:cf:4d:09:15:ac:d3:96:8d:a7:27:7e:16:26:43:a1:4c:59:
0f:9f:ae:d6:52:54:fe:2a:de:2d:6c:2f:c7:96:7f:01:d3:43:
bf:fa:40:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:02 2026 by rpki-client