
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8bc0a1f2-f947-32fa-ad4a-9b868b430b10.roa
File: 8bc0a1f2-f947-32fa-ad4a-9b868b430b10.roa (raw, json)
Hash identifier: LXFXMGGMTvOyid4VkQJ7bPumrfTcoW8yR8+BNHDGbZQ=
Subject key identifier: 4A:C2:57:D9:FF:50:32:61:7C:C2:EA:E5:8E:BA:3D:8C:1C:7C:8C:23
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584CB81C83CD7DFC19C5F6AA6960
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8bc0a1f2-f947-32fa-ad4a-9b868b430b10.roa
Signing time: Sun 01 Feb 2026 14:00:40 +0000
ROA not before: Sun 01 Feb 2026 14:00:40 +0000
ROA not after: Sat 02 May 2026 13:00:40 +0000
asID: 19905
IP address blocks: 2604:2e87:3c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b8:1c:83:cd:7d:fc:19:c5:f6:aa:69:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 1 14:00:40 2026 GMT
Not After : May 2 13:00:40 2026 GMT
Subject: CN=8d584bfc-6cdf-4eb5-92dc-64b99bdcbecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:19:bf:e2:e2:bb:f0:fe:df:fd:00:4c:7e:bb:
3f:ee:56:5d:3d:a9:b6:af:0c:b9:4e:10:bc:28:29:
59:7a:80:16:6d:7d:33:2a:d3:57:90:93:39:5e:52:
de:00:e5:66:2d:46:6d:29:08:8a:a4:8c:0b:fd:26:
df:c6:c9:32:48:ac:63:50:10:2d:a2:58:68:66:87:
b8:5f:aa:c5:ce:c2:57:09:78:fc:d1:07:b6:ba:f5:
be:23:b3:e1:3f:c4:68:2a:98:ba:14:c6:2d:70:b3:
8f:00:b1:27:5c:bd:da:dd:cc:69:4f:51:e6:6b:ea:
b6:b0:9e:6d:f1:65:30:e0:2c:9b:2c:47:f3:1b:b4:
b0:63:f6:a5:5e:b1:80:02:bc:c9:cd:24:71:b7:a3:
5e:19:e4:5e:5e:a7:2d:ed:e2:38:3c:1e:1e:e3:fa:
4c:92:d2:b0:40:40:41:15:a6:bf:5e:ed:7a:fe:63:
25:c2:0f:7a:31:85:19:f0:e3:f0:c2:18:1b:bb:7a:
cf:a7:79:f1:a3:e6:4f:75:44:57:b9:78:4f:58:92:
3f:d3:c3:8b:1c:f4:de:4d:c2:06:6c:9d:24:ff:68:
c9:12:89:4b:02:46:dd:66:3f:a2:df:fb:c7:79:67:
6f:59:d6:a0:d0:3e:50:c2:e7:30:e0:1b:e9:5d:8e:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C2:57:D9:FF:50:32:61:7C:C2:EA:E5:8E:BA:3D:8C:1C:7C:8C:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8bc0a1f2-f947-32fa-ad4a-9b868b430b10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e87:3c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:8e:de:2c:59:0f:00:87:49:ce:01:61:82:b7:f0:1a:9f:ea:
62:0d:cf:8e:7a:d7:7c:d4:79:b6:65:38:57:76:c9:63:83:6d:
a5:c3:9a:c3:a8:b6:04:7e:67:f1:e5:7d:29:66:84:d0:17:b6:
85:5d:9e:f7:c8:97:23:c2:7f:1f:49:a5:6b:9c:c0:a7:68:8f:
34:cb:24:cf:c1:84:0f:03:ec:34:2f:8a:4b:ce:83:85:ed:1a:
6e:d4:a8:07:20:aa:76:76:c7:ed:ee:f1:2f:0d:d1:a8:2d:ef:
cb:51:d2:ae:13:cf:10:95:79:01:c6:01:52:12:c7:af:b3:35:
22:df:d1:3e:5a:dc:4b:e6:df:b3:93:7a:4e:f5:3f:9a:a2:e2:
33:d6:6f:59:24:f5:3c:2f:77:2c:1b:df:42:ad:f7:10:67:2d:
15:d0:c5:bc:3a:b8:e7:6f:47:9b:70:14:e3:cb:3f:b8:71:39:
a8:e6:84:f7:1b:e0:eb:cd:1a:06:64:4f:36:e5:ce:35:ee:1f:
f6:23:d4:20:9f:e8:97:a3:13:2c:d2:9e:7d:1b:6f:ff:b4:c8:
a3:d4:39:f4:2b:71:a1:d4:9a:13:c8:50:39:75:15:52:4a:e9:
52:c2:66:c2:63:f5:c4:52:9f:b6:38:04:34:cb:85:1e:f7:8c:
e4:9d:3e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:20 2026 by rpki-client