
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cbfe86d9-6fc9-3c47-8b42-2422ad59647e.roa
File: cbfe86d9-6fc9-3c47-8b42-2422ad59647e.roa (raw, json)
Hash identifier: eBPqfIGNZ5LiYNw3PqZVUpElET3gbM1E/CGAUZ7d3+c=
Subject key identifier: 9B:0D:58:17:A2:A1:49:D9:84:B4:E7:9E:AD:C7:7C:4A:25:AD:41:B9
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584F497443509F9DFAC9FF460660
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cbfe86d9-6fc9-3c47-8b42-2422ad59647e.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 30036
IP address blocks: 2604:2e88:2400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:43:50:9f:9d:fa:c9:ff:46:06:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=dc2a4072-9b37-41bc-98bc-6fa5cbfba03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:26:97:b5:b4:98:51:52:31:9a:aa:71:d6:
eb:66:f6:0a:a0:41:db:5d:40:65:dc:95:e4:fa:59:
82:9b:e3:2f:a6:3e:b0:d2:74:2e:d2:60:31:e6:e6:
2d:29:d1:a0:aa:77:13:9e:ac:31:b3:e7:6c:9c:ef:
a5:9d:c3:00:9b:42:32:20:4d:07:96:1e:64:a8:a9:
8f:84:07:8c:7a:89:8b:91:6d:1b:35:da:b5:7e:07:
39:51:16:80:ce:f3:cf:c6:37:43:ce:cd:43:4e:af:
05:dd:a5:72:7e:70:ee:6b:c6:65:40:c7:55:c9:2f:
ee:a0:df:c1:e3:14:b6:b7:d3:e8:95:38:46:63:96:
20:65:69:43:f9:84:0e:a6:22:68:a2:dd:3f:c6:13:
35:61:4d:dd:d8:b8:6f:ce:6e:ea:ec:27:a8:cf:f3:
73:73:2e:f5:01:4b:08:cb:49:59:14:dc:f1:e0:2b:
6c:27:9a:54:8f:92:3d:ed:d9:16:fb:24:05:30:1f:
c6:5b:3d:d0:ed:3f:1b:15:fb:83:f0:9d:2f:6c:8f:
02:11:7d:44:55:b9:a4:96:95:44:ca:0c:33:78:79:
5c:8e:5c:19:4f:fd:ad:3b:5d:ae:b3:81:35:2f:e9:
27:9c:e8:2e:06:42:29:9a:90:60:da:09:5b:95:fa:
db:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0D:58:17:A2:A1:49:D9:84:B4:E7:9E:AD:C7:7C:4A:25:AD:41:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cbfe86d9-6fc9-3c47-8b42-2422ad59647e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e88:2400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:dc:83:d1:7d:b3:91:60:66:8e:96:cf:0d:09:0c:12:76:c5:
a1:d9:84:0f:75:9e:e3:38:11:91:cf:b4:d9:42:e3:87:6b:1f:
fc:2b:6d:e2:8c:bf:85:01:54:13:2d:15:27:52:94:8b:d3:a8:
1c:b3:54:05:06:e5:9f:7e:6e:ce:19:f6:04:3d:3f:10:74:a4:
90:76:f7:0d:9f:51:c6:4b:1c:cc:eb:e6:f5:d2:e5:0f:c6:a7:
0a:22:b1:31:13:99:9e:3c:1d:10:cc:fa:53:1f:ed:f7:6e:05:
f0:f9:88:11:c5:ca:64:7b:71:b2:ca:c0:0d:99:9f:ce:45:47:
62:4a:fd:11:6d:5e:f2:10:60:16:9a:0e:7a:55:9a:f8:f5:3e:
43:b5:fc:30:c1:10:5e:1d:1f:a0:a3:10:e8:86:6d:af:16:4c:
15:b6:39:8d:f0:0c:83:36:55:89:0e:c9:42:58:d5:86:cf:6b:
50:96:20:eb:5d:ab:8c:a4:31:4a:44:66:12:a7:6f:21:d1:73:
f2:f2:f3:0a:48:6a:7b:69:c1:c9:ef:29:68:4e:b5:ef:0c:2a:
14:85:24:44:22:2e:91:c3:28:32:3e:89:af:74:c8:90:df:e3:
b7:35:02:9a:9a:1b:42:c8:e4:96:49:ab:df:3c:8e:8e:7f:d7:
92:66:06:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:26:26 2026 by rpki-client