
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9bd4dd2f-a8a9-3c54-8a1c-44eacfb77803.roa
File: 9bd4dd2f-a8a9-3c54-8a1c-44eacfb77803.roa (raw, json)
Hash identifier: 0eKPbB7Ghofv8RX9GcH8ckvWM4mabS+uvK/xsAkEIck=
Subject key identifier: 27:1A:71:3D:E2:05:FF:40:B9:ED:4A:F3:E4:78:D1:5C:2C:01:33:71
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C953709C383111E1FF5E8AD00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9bd4dd2f-a8a9-3c54-8a1c-44eacfb77803.roa
Signing time: Tue 20 Jan 2026 02:00:29 +0000
ROA not before: Tue 20 Jan 2026 02:00:29 +0000
ROA not after: Mon 20 Apr 2026 01:00:29 +0000
asID: 30036
IP address blocks: 2604:2e8e:5800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:95:37:09:c3:83:11:1e:1f:f5:e8:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 20 02:00:29 2026 GMT
Not After : Apr 20 01:00:29 2026 GMT
Subject: CN=b5fb4866-0377-47a1-b86b-ce1dfacfd7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e9:50:18:b4:99:7b:96:ff:b9:d8:39:ac:05:
4c:65:53:68:0b:73:84:66:7a:fd:ec:02:25:aa:5a:
b2:f6:16:48:c4:8d:28:b0:f7:59:9e:27:f8:98:d1:
39:ec:d4:ab:72:2d:6b:5a:4a:30:60:a3:c6:97:e1:
fa:61:d5:06:c5:af:17:2c:23:bb:f0:14:cd:84:4b:
4d:ae:21:45:fe:6f:6d:35:25:e3:f7:43:95:2b:21:
a1:54:29:a1:19:ae:38:9d:fb:fb:51:9d:16:85:1c:
ae:35:50:3e:9c:4e:94:57:89:9d:1c:3f:52:70:b7:
c7:16:76:3b:7e:6b:60:f1:7b:0a:e5:0b:5e:b5:62:
7f:d8:f0:98:8a:1c:04:55:5e:74:74:b1:de:a5:fb:
a0:60:67:b6:e4:a6:73:dd:cb:26:fa:21:82:0c:60:
9a:89:ed:6f:4b:07:8a:bc:f4:17:b6:3f:0c:ca:1c:
02:14:ee:d0:78:6f:4b:37:c8:f9:d2:af:81:5c:7f:
4e:87:99:7a:c3:43:14:29:64:80:75:37:2d:a4:ea:
40:b9:0e:1c:f8:95:30:52:10:98:7b:41:25:82:b8:
09:be:cb:e5:69:f1:84:07:d2:ed:f6:2b:62:bf:72:
4b:8a:d5:d8:bb:da:a5:24:b1:b2:15:06:67:24:a4:
d3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1A:71:3D:E2:05:FF:40:B9:ED:4A:F3:E4:78:D1:5C:2C:01:33:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9bd4dd2f-a8a9-3c54-8a1c-44eacfb77803.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8e:5800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:82:3a:63:f4:16:50:2f:72:e4:2d:ad:00:4c:9c:c6:11:5c:
24:9e:3c:4b:c1:52:a6:90:dd:da:76:03:3c:1a:cc:31:40:3a:
e6:dc:11:eb:2f:30:4c:d3:85:cc:33:46:ee:4c:03:6e:7f:5f:
be:26:ff:0c:33:9e:b6:90:a5:8c:ca:69:3e:61:e3:95:be:3e:
be:6f:39:cc:65:be:3b:4b:be:8e:80:f2:d1:2a:19:f6:38:54:
e1:cf:e3:63:6f:50:ff:13:1e:e1:fe:f2:50:4e:cd:4a:ba:71:
bf:6e:b1:11:e9:d8:78:18:d2:3b:d5:1b:b7:2c:f8:ab:7e:f1:
20:8e:5d:4c:80:d9:3c:30:6c:50:49:62:e9:81:b9:76:39:10:
d6:ca:0c:3e:7e:5a:cc:20:64:e1:da:4f:3d:2e:17:c8:d0:a9:
09:9f:84:b3:86:62:f9:35:af:50:70:b5:b7:5f:09:2e:e0:e0:
a3:53:7b:cf:99:ba:e9:f5:3b:ca:cf:2c:a3:17:19:3f:c0:bb:
b1:37:a9:28:41:ab:d0:4a:06:8c:47:66:9a:76:aa:a6:d7:ec:
09:7f:3b:1e:c6:28:15:63:dc:d9:11:ee:34:22:e6:ef:2b:67:
1b:c9:49:96:5d:aa:27:11:fc:ab:7e:f2:80:c7:64:a7:3f:4e:
56:d6:11:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:39:54 2026 by rpki-client