
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/397d521b-1684-3ce6-b4d0-06ddc83d88e7.roa
File: 397d521b-1684-3ce6-b4d0-06ddc83d88e7.roa (raw, json)
Hash identifier: wVX2zMFLa8y9yH8UoNiiNT0nKjNEYliWV5h2tpPURxA=
Subject key identifier: 71:04:88:F4:66:D6:06:FA:13:49:E2:5E:DD:4C:AC:D4:DB:E4:FA:3C
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584F5E62EEFDCEBFBA71802EDA00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/397d521b-1684-3ce6-b4d0-06ddc83d88e7.roa
Signing time: Fri 02 Oct 2026 13:00:13 +0000
ROA not before: Fri 02 Oct 2026 13:00:13 +0000
ROA not after: Thu 31 Dec 2026 14:00:13 +0000
asID: 19905
IP address blocks: 2604:2e8d:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5e:62:ee:fd:ce:bf:ba:71:80:2e:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 2 13:00:13 2026 GMT
Not After : Dec 31 14:00:13 2026 GMT
Subject: CN=c5b4b86c-8eec-40e5-a4a9-d77ca08175f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c9:8e:2e:86:e9:9b:e7:17:a4:ee:39:08:82:
a5:34:85:b7:3d:90:2f:0b:10:84:62:a1:57:c5:e6:
87:1f:81:68:20:34:41:78:b2:c6:80:7a:af:40:57:
5e:e1:07:d3:a5:0a:77:97:b9:78:82:2c:99:5a:7e:
c8:59:28:34:26:4f:af:33:48:e2:57:4e:61:ad:2b:
39:22:b3:b0:55:40:d3:5e:df:d0:a6:74:de:83:e4:
6e:80:81:09:ec:8d:aa:3c:55:c5:28:f0:9c:93:55:
aa:af:7f:8c:d8:77:4d:93:44:3b:74:86:c4:75:f0:
67:dd:66:76:22:b1:75:1a:a2:b3:29:7d:61:e1:0d:
44:89:d8:44:54:49:6d:e7:f7:ee:a1:05:69:ff:21:
84:4a:8f:e8:41:50:cb:91:ab:19:e0:75:96:f5:f8:
40:e8:55:6e:30:cc:0e:4f:38:7f:cd:60:a5:b6:c8:
4b:8b:86:26:f9:55:c3:89:a7:cf:22:71:9b:b3:82:
3c:89:e2:9b:7f:42:47:ef:e0:28:76:ac:26:1e:69:
3c:44:a3:32:b1:f8:cf:42:ff:2b:47:60:0c:48:71:
f3:71:78:12:f3:21:1d:89:c1:79:b4:3d:15:ce:5d:
2d:61:d3:6f:c2:83:4e:8f:81:0e:02:c7:2f:80:63:
d9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:04:88:F4:66:D6:06:FA:13:49:E2:5E:DD:4C:AC:D4:DB:E4:FA:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/397d521b-1684-3ce6-b4d0-06ddc83d88e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8d:400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:6c:b6:a2:d4:cb:28:7d:f5:ee:ce:39:bb:01:1d:32:1b:3e:
5f:9a:30:18:fa:60:d9:39:8b:ec:04:11:f3:45:11:b7:73:f0:
f8:5b:83:b5:4f:65:16:ee:e0:5e:70:7d:1a:a5:0b:4e:53:c0:
b3:b4:7d:a4:1b:8f:e6:69:06:ef:c2:92:8a:ae:e5:62:3b:b3:
81:f5:b5:6c:a4:0d:7e:ee:ef:e7:87:9e:76:90:b8:9b:79:86:
c0:8e:c9:28:61:3e:eb:72:de:2b:b4:12:31:41:e3:be:58:24:
92:91:64:df:66:ea:c8:3f:e1:f8:5b:de:d9:52:c3:6a:bc:5b:
db:2b:ba:8b:a8:1a:ce:da:08:02:92:6d:d4:fa:7c:86:de:04:
07:b9:7e:ad:2b:c2:52:0e:f1:cc:62:e7:42:94:1a:d7:39:aa:
8e:5c:88:ea:c2:49:6a:9a:c6:6a:b2:01:98:ad:a2:17:2e:e5:
df:ec:61:76:54:d7:ee:42:d7:f5:4f:3c:9f:fd:6b:22:f4:ea:
4d:b8:82:81:bb:98:b0:3a:36:6e:95:f9:aa:f1:2d:d9:00:ec:
33:3c:81:49:fc:f9:db:70:1a:ca:a7:ef:d6:48:74:da:52:86:
8c:d7:2e:6a:b1:78:4c:e7:a2:3c:25:61:d7:db:76:be:ae:b8:
3a:6a:24:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:23:22 2026 by rpki-client