
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43b6bf3b-f97d-34f7-bae3-e4f7f4e8eb8a.roa
File: 43b6bf3b-f97d-34f7-bae3-e4f7f4e8eb8a.roa (raw, json)
Hash identifier: eIUZkkqxYT403Fm8pfZ3oIznb0H/ZTCcqsEBfkzQDto=
Subject key identifier: BF:89:E7:B8:3B:78:7F:65:58:1F:75:29:55:B9:28:DC:D0:76:45:17
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584DADAAEDF93B85050A097BA1C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43b6bf3b-f97d-34f7-bae3-e4f7f4e8eb8a.roa
Signing time: Thu 30 Apr 2026 13:00:31 +0000
ROA not before: Thu 30 Apr 2026 13:00:31 +0000
ROA not after: Wed 29 Jul 2026 13:00:31 +0000
asID: 30036
IP address blocks: 2604:2e8d:5800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 10 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ad:aa:ed:f9:3b:85:05:0a:09:7b:a1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Apr 30 13:00:31 2026 GMT
Not After : Jul 29 13:00:31 2026 GMT
Subject: CN=f3a0240d-9661-4d13-9ae6-57c867acb7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2b:0a:6f:65:af:fc:1f:10:5f:23:a9:e2:e2:
d3:05:dc:7f:0e:b2:b5:8b:47:fd:6c:69:f4:7a:51:
09:7d:c9:ce:46:88:98:69:a2:ca:dd:38:94:ad:18:
55:95:c6:0d:44:b0:c7:3a:6c:5e:9f:7e:52:e6:e0:
ed:90:6d:71:bf:70:f0:bf:44:9e:a7:df:d8:a9:e7:
f9:a0:94:3e:2f:96:17:29:7a:ce:04:34:78:28:46:
88:52:ea:27:0b:23:ba:ef:94:58:db:59:5c:1f:6c:
b3:93:15:52:42:7f:43:1c:75:b3:e3:e7:6c:89:4b:
38:90:8d:11:d0:6d:4e:da:32:d2:ac:ae:40:b3:b0:
5a:6d:87:dc:c0:11:0c:91:43:f9:32:50:b6:1b:e2:
87:d5:87:91:10:3b:49:20:38:15:38:35:73:c5:12:
86:79:6f:f2:e0:b9:04:6b:4c:e7:96:2d:63:1b:b8:
43:93:2d:07:b6:a0:d3:43:52:b6:24:e2:f0:f0:67:
ec:b3:65:4b:0e:5d:08:e3:51:c1:ad:f1:52:fc:d3:
18:e2:82:c9:fa:9c:46:f3:15:a5:19:7b:73:6f:0d:
42:c3:12:7c:96:34:f1:4c:df:74:bc:64:5b:ea:20:
d1:c1:31:33:b2:36:10:9b:02:9a:60:8d:87:d3:46:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:89:E7:B8:3B:78:7F:65:58:1F:75:29:55:B9:28:DC:D0:76:45:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43b6bf3b-f97d-34f7-bae3-e4f7f4e8eb8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8d:5800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:33:b4:83:8d:c1:85:a8:66:df:ad:b4:04:6e:95:cc:a3:e0:
8d:86:3b:92:cf:77:6d:26:d9:21:c2:00:f3:56:6c:2a:f8:58:
3c:be:f6:55:86:ad:87:e0:cc:92:30:39:f0:a1:fc:a7:e3:ec:
62:b1:8e:a0:62:94:7e:fa:85:70:b2:66:77:11:3d:4d:0e:b2:
a5:04:b7:82:bf:9f:a7:73:40:ed:35:22:95:4e:a9:82:35:ce:
df:99:35:e7:31:39:e2:cb:30:b6:38:ff:85:95:f0:fa:ff:fa:
29:6e:53:c5:85:14:43:f7:09:a2:1f:82:ff:13:60:4f:19:20:
65:c0:4d:16:b5:eb:ed:89:0e:80:c5:d5:91:11:5c:88:f9:c5:
84:d9:d6:db:3d:38:87:10:d4:6c:de:ca:5d:f8:e5:21:ca:cb:
c3:52:6a:f1:ba:cd:60:b9:ca:f1:63:ca:47:27:25:8b:e8:52:
52:4a:44:df:c0:1e:91:03:5b:90:e7:b6:8f:53:87:15:74:d3:
4b:88:79:76:d3:3a:21:b9:92:6d:dc:33:db:33:cb:ca:fd:44:
2b:55:43:d7:95:72:b1:71:4f:94:20:af:f0:c5:bc:53:46:8b:
35:c1:c8:6f:be:36:b7:52:63:f9:33:3c:f9:bb:41:d5:6f:84:
38:95:14:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 19:27:45 2026 by rpki-client