
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2dcaec5-e055-3e5b-9adf-edc1b59d0829.roa
File: a2dcaec5-e055-3e5b-9adf-edc1b59d0829.roa (raw, json)
Hash identifier: CzKfDBy140hzfOcx/kWd2bleDP0jTO9mI2kZ9lJMN98=
Subject key identifier: ED:BB:AA:5A:9F:6D:95:66:B2:C0:65:AA:BA:AD:8D:EA:D7:E0:E8:A8
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584F331D30E6A99FE9F89DCBEB00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2dcaec5-e055-3e5b-9adf-edc1b59d0829.roa
Signing time: Thu 17 Sep 2026 01:00:11 +0000
ROA not before: Thu 17 Sep 2026 01:00:11 +0000
ROA not after: Wed 16 Dec 2026 02:00:11 +0000
asID: 19905
IP address blocks: 2604:2e8a:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:33:1d:30:e6:a9:9f:e9:f8:9d:cb:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Sep 17 01:00:11 2026 GMT
Not After : Dec 16 02:00:11 2026 GMT
Subject: CN=b1d2510d-bbfe-4073-a062-d2237b058991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0f:3a:f4:f7:76:e2:2b:4e:01:34:1d:ac:96:
fd:26:a6:cd:a1:13:9f:80:21:5e:5f:e9:3b:c7:a1:
71:06:31:a9:f9:05:a9:31:a9:53:af:0e:a2:3e:ab:
be:94:52:a4:49:b2:5a:5e:bd:96:a9:fc:c9:f4:24:
9d:52:71:b9:70:ce:85:52:b9:60:7f:2a:14:b5:e3:
bb:52:f8:ed:96:01:c4:00:a9:be:68:f5:76:2c:a1:
c3:d8:48:af:f6:e3:a1:a5:af:1f:9c:95:2e:d2:24:
17:26:2c:51:5e:40:1f:f9:e5:7d:42:ab:e2:ab:07:
9f:0d:12:3b:35:e7:48:50:e1:80:91:9e:6a:84:32:
f7:a8:d0:23:cd:77:3e:b9:7c:ca:d3:35:34:a2:8b:
2e:e3:5f:16:bd:f8:01:2e:a8:85:fe:a3:09:dd:3e:
6e:4c:11:28:8a:05:51:d3:19:95:b6:11:d5:e5:86:
8e:0c:b3:7b:64:7b:e0:81:51:49:1b:7c:ec:b0:65:
4f:87:30:e9:3e:d4:51:46:16:39:a6:75:eb:72:30:
5b:29:c5:c0:1a:d5:25:3d:8f:33:5a:10:cf:7e:df:
04:0a:66:04:f2:a8:bc:5f:66:a4:ba:e8:f9:7c:ce:
02:4f:13:08:11:21:75:00:14:f8:1b:d6:86:c0:cb:
77:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BB:AA:5A:9F:6D:95:66:B2:C0:65:AA:BA:AD:8D:EA:D7:E0:E8:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2dcaec5-e055-3e5b-9adf-edc1b59d0829.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8a:400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:8b:27:cf:0d:b5:4f:7d:85:eb:1e:97:59:74:84:7c:9d:fd:
6e:58:c1:a3:b8:9e:46:74:3c:95:b1:9a:19:e9:09:3e:d5:e0:
f6:86:18:e8:15:eb:a3:c7:cb:2b:16:f6:f2:e3:c9:88:f0:a3:
b3:62:46:66:c9:14:7b:69:d5:ad:a0:d8:31:18:4a:f0:ca:ec:
d0:e8:2c:da:f0:1a:4c:98:9e:fd:9b:c3:00:01:6f:f6:61:82:
24:68:10:f5:63:25:02:13:44:79:9e:85:4c:b4:22:7e:ba:1c:
e6:4f:24:37:8a:5b:f4:57:a9:77:17:ee:67:39:47:1c:46:0b:
f0:c7:c0:42:84:b6:c7:16:59:fd:ae:58:7f:24:d5:4c:f7:b9:
bc:0d:12:01:8a:42:cc:99:aa:05:da:e6:bd:e3:69:05:01:bd:
79:e0:f0:52:ef:10:31:03:f4:b6:04:7f:4b:87:08:f9:88:96:
d7:d3:b9:9d:0e:f6:27:a6:0e:5d:0b:fb:36:8d:e9:e1:b2:3d:
12:f8:b5:65:11:61:cf:94:ae:18:e0:c4:ab:cf:60:3d:54:fe:
d0:82:36:53:8f:03:ee:74:bc:8f:69:d2:bd:a0:fc:03:2f:e6:
41:0d:3e:fd:8e:6a:c9:e1:b6:a7:22:2c:fa:f3:7d:db:0a:9f:
19:37:d2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:49:45 2026 by rpki-client