
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7d395a44-73e1-35e8-8b84-341309c63cd9.roa
File: 7d395a44-73e1-35e8-8b84-341309c63cd9.roa (raw, json)
Hash identifier: Ao5gVQjNd2OLsP3q0jVdafyFhd7H9F7x9lVTlANMQRg=
Subject key identifier: FE:BC:49:4B:39:4E:BF:65:D3:78:02:14:8E:B6:66:26:5E:80:7E:A4
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584CC3473763E53A0A10D4DC1200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7d395a44-73e1-35e8-8b84-341309c63cd9.roa
Signing time: Thu 05 Feb 2026 14:00:40 +0000
ROA not before: Thu 05 Feb 2026 14:00:40 +0000
ROA not after: Wed 06 May 2026 13:00:40 +0000
asID: 19905
IP address blocks: 2604:2e89:8000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c3:47:37:63:e5:3a:0a:10:d4:dc:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 5 14:00:40 2026 GMT
Not After : May 6 13:00:40 2026 GMT
Subject: CN=34bc4147-40db-4390-8e0f-c1056e2badf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:d5:ef:ff:aa:d8:0e:53:b2:29:9e:38:d8:
3b:d5:86:27:ae:49:26:9e:e2:12:14:bb:4b:bf:7f:
75:b1:c5:6f:bc:53:19:e2:dd:e9:f0:02:d7:49:bc:
ad:86:60:8f:50:21:9e:a5:d3:82:c6:90:c9:04:34:
97:8d:fb:b3:d5:16:c7:65:3d:e1:fb:7d:13:94:ed:
cc:6f:c7:b9:84:b6:2f:16:b2:ee:d5:f9:b0:e3:6b:
56:69:6f:e5:44:ea:dd:44:ef:e1:ef:1b:87:e4:ae:
be:d5:ed:d7:2c:25:e9:4f:89:f5:e8:21:c8:cc:48:
a0:71:09:02:3f:3a:a6:c8:a4:38:3f:87:9c:bd:a4:
1b:3d:26:23:2d:ec:5b:88:d6:1c:99:c6:da:bb:00:
50:5a:d1:38:fe:60:d4:cc:4c:38:cd:14:f4:12:43:
0f:fe:fd:b4:3e:f1:48:0a:af:c8:ea:02:58:c0:ae:
0d:a1:2a:5d:03:b2:0d:42:76:8a:65:38:71:bf:8c:
29:46:b4:63:c9:f5:62:1f:f5:41:60:ca:73:4e:10:
f3:5b:b0:81:43:84:bb:a2:88:a9:48:52:5a:02:68:
f0:5e:a5:f9:b6:6f:ff:66:b7:5b:c1:48:0c:08:7a:
6a:f7:31:95:70:ee:1f:e3:fa:ee:86:a8:d6:78:ae:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BC:49:4B:39:4E:BF:65:D3:78:02:14:8E:B6:66:26:5E:80:7E:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7d395a44-73e1-35e8-8b84-341309c63cd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:8000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:d8:1f:22:25:ae:d5:d7:ac:d9:81:ec:77:cc:c4:15:6b:88:
25:ec:2c:91:a1:81:dd:b9:d0:30:17:64:ce:50:34:1c:f6:64:
9f:62:83:2a:24:9e:37:3e:a6:e8:0b:d7:0f:ce:18:96:da:5b:
9f:29:3f:d8:7d:1a:62:ed:02:49:9c:10:02:4f:2d:8c:56:fe:
6a:f3:a7:03:cf:54:d4:28:dd:f7:c3:52:d3:72:3a:74:b4:b1:
e2:21:76:68:97:55:51:da:ec:95:3d:fe:7a:e0:99:d1:e5:31:
ef:dd:8a:55:8f:b4:80:29:85:63:ef:37:d5:18:38:e5:3c:60:
04:39:8f:06:fe:9a:ed:ff:74:80:b8:41:1e:77:e8:50:79:d6:
72:8e:c8:e9:6d:64:0f:03:c9:46:d1:c4:27:9f:f3:cc:6a:d2:
40:34:10:b2:d2:a7:40:58:b9:08:13:fa:eb:90:09:7e:3d:f8:
f3:60:ae:6a:f9:71:a7:3a:b5:7c:89:ac:42:0e:43:18:76:ec:
e8:6f:6a:ce:30:9d:44:01:79:70:4c:49:73:97:31:34:1d:2a:
d8:fd:ec:fc:64:53:22:ca:76:99:e1:ce:2f:0d:7b:9e:3e:6d:
00:4a:a5:e1:ca:dd:f1:7c:38:b5:a1:89:97:1e:bc:11:1e:d0:
c2:47:f6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:42 2026 by rpki-client