
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bacf42f5-7dd1-355c-a59d-50c8e40c4a7b.roa
File: bacf42f5-7dd1-355c-a59d-50c8e40c4a7b.roa (raw, json)
Hash identifier: dAnUkTMnzNAEVDLTcAdr2KdCP63bxE4/Alo7YlBImX8=
Subject key identifier: FE:E0:B3:C1:32:6E:57:56:27:68:75:69:FC:D8:CC:9D:8E:FB:F0:57
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584CEDCF8D88576717EC5BFB9B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bacf42f5-7dd1-355c-a59d-50c8e40c4a7b.roa
Signing time: Fri 20 Feb 2026 19:39:25 +0000
ROA not before: Fri 20 Feb 2026 19:39:25 +0000
ROA not after: Thu 21 May 2026 18:39:25 +0000
asID: 19905
IP address blocks: 2604:2e89:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ed:cf:8d:88:57:67:17:ec:5b:fb:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 20 19:39:25 2026 GMT
Not After : May 21 18:39:25 2026 GMT
Subject: CN=2a9598f0-95bb-4d0c-a309-db0b98961fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:09:4b:ac:e3:15:62:ba:7a:ac:67:bf:6e:f2:
aa:5e:ef:5d:44:d5:d2:d5:a1:ad:cf:84:eb:4c:f6:
67:c0:98:aa:fd:ee:f2:d9:ea:96:b3:17:cc:8c:d9:
76:20:4b:7b:f8:1a:3b:5c:a8:83:f3:9a:5e:fa:c7:
31:2b:3c:d6:1a:3c:6f:27:ce:1e:85:97:f8:52:cc:
81:6e:ab:80:90:34:9a:75:b1:24:54:ce:03:3e:5d:
5b:d0:49:3d:dd:7a:dd:a5:33:18:a7:09:c7:0d:c3:
31:6f:22:b2:5f:8e:57:00:45:0c:a2:92:0c:8e:33:
80:3f:7f:6f:37:86:f4:2b:42:a0:88:c9:18:1f:8c:
be:26:0a:6a:29:9e:2e:fd:ee:65:4f:a5:02:86:b1:
17:4c:99:73:44:22:84:3c:e8:53:2d:aa:d3:8a:23:
82:5b:42:f1:51:cf:6c:02:bf:93:72:19:5c:c6:fd:
5f:f9:2e:bb:96:2d:8e:4d:3d:ed:6f:6d:c2:83:a7:
80:17:3f:1b:6e:8a:cf:c0:3a:93:b0:6e:4e:49:bf:
0e:17:02:2d:d6:50:50:19:2b:97:b3:e3:fc:b5:cb:
8b:cb:1b:56:10:60:b0:dc:42:94:b5:76:b4:ff:07:
c9:ec:96:b9:b2:3b:af:31:11:be:ee:5f:95:30:53:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E0:B3:C1:32:6E:57:56:27:68:75:69:FC:D8:CC:9D:8E:FB:F0:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bacf42f5-7dd1-355c-a59d-50c8e40c4a7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:9d:32:20:c2:81:ac:a0:22:56:af:2c:cd:fc:1a:b9:2e:e2:
40:76:6c:27:8c:70:cb:4c:a7:50:85:25:0c:ff:23:8d:7c:ef:
61:ac:ba:fb:1a:ff:08:fc:8f:92:b7:d6:fd:e2:02:99:f9:86:
6a:64:b6:09:8c:0e:21:65:34:a4:14:e5:04:bb:2b:76:32:74:
91:e4:7c:73:eb:c9:23:21:c0:89:9d:ed:3a:35:fa:bc:68:1d:
1f:6b:3d:ca:66:29:1f:ee:25:e7:ba:e1:3a:cd:3a:64:39:e7:
01:5b:bf:f0:c5:9b:b1:14:d9:68:dc:ec:9f:e0:cf:eb:a1:9f:
c3:93:8b:4d:71:c8:b3:76:87:38:d7:93:04:c7:43:91:2f:b1:
70:61:db:ca:f7:61:05:4d:83:2c:10:26:89:4f:21:e1:d5:d6:
dc:41:42:7d:c5:23:c2:cd:6c:57:e0:e0:4f:02:21:2e:9e:be:
4f:ee:86:de:e8:a7:b5:7b:ec:ef:36:93:f3:a7:25:84:11:30:
c2:e3:3e:43:37:9e:8e:55:9c:e2:33:f9:ab:7c:c0:e4:34:11:
25:3e:fc:c2:6a:9d:d2:36:50:3f:96:99:5a:13:9a:e5:f1:73:
d4:2d:6d:da:dd:31:43:10:1d:28:9d:d7:f3:f4:22:5a:8b:ec:
3a:06:44:31
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEztz42IV2cX7Fv7mwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDIyMDE5MzkyNVoXDTI2MDUyMTE4MzkyNVowLzEtMCsGA1UEAxMk
MmE5NTk4ZjAtOTViYi00ZDBjLWEzMDktZGIwYjk4OTYxZmJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAlLrOMVYrp6rGe/bvKqXu9dRNXS1aGtz4Tr
TPZnwJiq/e7y2eqWsxfMjNl2IEt7+Bo7XKiD85pe+scxKzzWGjxvJ84ehZf4UsyB
bquAkDSadbEkVM4DPl1b0Ek93XrdpTMYpwnHDcMxbyKyX45XAEUMopIMjjOAP39v
N4b0K0KgiMkYH4y+JgpqKZ4u/e5lT6UChrEXTJlzRCKEPOhTLarTiiOCW0LxUc9s
Ar+Tchlcxv1f+S67li2OTT3tb23Cg6eAFz8bborPwDqTsG5OSb8OFwIt1lBQGSuX
s+P8tcuLyxtWEGCw3EKUtXa0/wfJ7Ja5sjuvMRG+7l+VMFNJ2wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFP7gs8EybldWJ2h1afzYzJ2O+/BXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmFjZjQyZjUtN2RkMS0z
NTVjLWE1OWQtNTBjOGU0MGM0YTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiQww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAkJ0yIMKBrKAiVq8szfwauS7iQHZsJ4xwy0ynUIUlDP8jjXzvYay6
+xr/CPyPkrfW/eICmfmGamS2CYwOIWU0pBTlBLsrdjJ0keR8c+vJIyHAiZ3tOjX6
vGgdH2s9ymYpH+4l57rhOs06ZDnnAVu/8MWbsRTZaNzsn+DP66Gfw5OLTXHIs3aH
ONeTBMdDkS+xcGHbyvdhBU2DLBAmiU8h4dXW3EFCfcUjws1sV+DgTwIhLp6+T+6G
3uintXvs7zaT86clhBEwwuM+QzeejlWc4jP5q3zA5DQRJT78wmqd0jZQP5aZWhOa
5fFz1C1t2t0xQxAdKJ3X8/QiWovsOgZEMQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:45 2026 by rpki-client