
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/67f1293c-5e21-30d4-be8b-ae2ddb012746.roa
File: 67f1293c-5e21-30d4-be8b-ae2ddb012746.roa (raw, json)
Hash identifier: Sr/CZenCR2k2GlW3Hjc5FFh3SeZMEJyvwJMGHSbHoqg=
Subject key identifier: 1A:52:22:E3:FB:1F:04:E2:B9:23:12:91:9C:43:F6:9A:CB:CA:D2:25
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584CA5F74453109A5FE7AD0ACD80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/67f1293c-5e21-30d4-be8b-ae2ddb012746.roa
Signing time: Mon 26 Jan 2026 02:00:32 +0000
ROA not before: Mon 26 Jan 2026 02:00:32 +0000
ROA not after: Sun 26 Apr 2026 01:00:32 +0000
asID: 30036
IP address blocks: 2604:2e8f:bc00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a5:f7:44:53:10:9a:5f:e7:ad:0a:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 26 02:00:32 2026 GMT
Not After : Apr 26 01:00:32 2026 GMT
Subject: CN=a524af2d-6ab0-46e2-9564-ac35699eecac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:90:b8:9c:46:fc:5f:2e:97:b3:03:3c:54:fb:
97:3e:6f:e8:63:50:71:24:99:22:1a:a1:6b:0c:51:
1b:8a:5c:f8:cb:29:04:96:fb:11:eb:c7:4d:5f:57:
bd:d0:a2:8a:2e:61:c6:ab:46:7e:ae:50:b3:2f:4d:
bd:88:13:5c:95:04:aa:f6:74:b7:55:a8:18:24:91:
ff:4c:bf:2c:e2:60:bc:6c:4a:bd:c7:7c:12:62:d0:
94:61:0b:aa:65:43:28:83:e7:86:da:a1:3c:cb:c0:
1b:bb:a6:bd:58:27:ca:0a:7c:9b:6c:d5:3d:c7:d2:
68:46:91:66:26:05:2e:d7:ec:0e:7c:0e:71:db:81:
ae:12:5e:1a:d9:86:dd:87:0c:ce:d5:57:02:af:97:
61:89:1b:65:91:b1:5b:99:00:37:13:60:3d:6b:e5:
39:50:bd:55:af:5b:a0:04:50:87:b3:86:dd:58:aa:
1e:4f:1b:04:f8:f9:8d:c2:63:f9:ba:20:2a:6e:c3:
43:61:98:d4:88:d5:3b:22:a7:7c:df:5f:2a:b8:08:
88:68:5c:67:ea:e9:a2:40:f7:ae:ff:1e:b3:71:24:
08:f4:37:02:02:c4:7c:8b:08:e3:69:7c:c7:d1:96:
72:03:6d:02:aa:26:83:c2:32:1e:4c:66:f8:ae:4e:
0e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:52:22:E3:FB:1F:04:E2:B9:23:12:91:9C:43:F6:9A:CB:CA:D2:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/67f1293c-5e21-30d4-be8b-ae2ddb012746.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8f:bc00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:62:88:6a:ec:aa:1d:d2:db:3a:7a:47:3e:b0:be:8e:09:aa:
d8:aa:8b:be:b7:fa:49:74:d9:91:88:ef:76:e0:70:c1:d0:e8:
92:89:2d:96:f2:77:4b:6c:08:aa:31:be:8c:da:c9:1e:6e:93:
8e:52:cc:2b:03:21:d7:9e:45:b4:db:48:b4:e6:e7:69:59:0d:
cf:2e:2c:30:f7:fa:5f:1e:7b:b6:85:63:6f:61:7d:5e:5b:a7:
ed:d7:34:ee:60:82:88:e0:e8:c4:eb:ae:fc:b1:2e:da:ad:f7:
ea:45:63:61:9b:97:96:ac:5d:24:dc:14:d0:16:be:66:9b:11:
66:04:7d:88:9e:5a:96:fe:2c:9e:52:c9:c4:71:e7:77:5e:a0:
02:42:5e:de:ad:13:f2:ea:56:b2:aa:0e:e6:db:32:44:2d:ab:
0f:fc:bc:28:14:fb:57:c4:1a:da:67:d7:bf:d9:29:3f:68:fa:
93:7b:ae:1c:ad:e6:94:19:24:f2:98:4d:cf:01:ea:d9:26:ce:
14:91:4e:25:69:9b:71:ca:6a:01:8d:b5:b3:76:83:3e:9e:b7:
1f:c4:af:65:15:79:78:00:bb:ef:6c:a1:43:18:5d:f1:62:b3:
29:00:af:91:ab:c6:ca:eb:22:2c:81:2d:5b:93:4d:02:da:ac:
1a:40:8a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:12:09 2026 by rpki-client