
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/533733c4-c1ec-3505-a45e-1d154b969824.roa
File: 533733c4-c1ec-3505-a45e-1d154b969824.roa (raw, json)
Hash identifier: T03czlPs8ZXSq6ONItzDPQ167UlbTLw3icIBzzvGFO8=
Subject key identifier: 9A:13:BA:CB:67:1C:C4:F3:CC:55:6D:67:7B:7A:57:E8:46:E9:5C:C0
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584DA81591811A360F39040A3000
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/533733c4-c1ec-3505-a45e-1d154b969824.roa
Signing time: Tue 28 Apr 2026 13:00:30 +0000
ROA not before: Tue 28 Apr 2026 13:00:30 +0000
ROA not after: Mon 27 Jul 2026 13:00:30 +0000
asID: 30036
IP address blocks: 2604:2e8f:d400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 10 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a8:15:91:81:1a:36:0f:39:04:0a:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Apr 28 13:00:30 2026 GMT
Not After : Jul 27 13:00:30 2026 GMT
Subject: CN=5c60b14a-8a71-45b7-8e05-b46059050902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:af:ed:45:b1:6f:60:0d:c2:88:27:e3:1a:0b:
d8:5b:00:00:83:5f:ce:a3:cc:d5:ac:c0:29:eb:a3:
8f:85:a7:2b:1f:a9:56:be:4e:1d:4e:8b:b6:12:04:
b8:79:13:d7:d2:7c:c0:c1:2e:8e:bb:6e:f1:d2:73:
ed:30:58:63:0b:b2:a0:27:59:d5:40:7e:7c:ad:96:
0e:33:f7:66:f1:e0:2f:c5:f2:91:c7:dc:a5:98:89:
24:87:e7:9f:6b:d7:e6:22:88:37:a4:dd:93:59:75:
bd:eb:51:6b:88:da:7d:27:4c:af:3f:a5:f0:41:03:
27:6d:24:c6:5b:c4:d5:b8:d1:b4:1b:69:55:12:31:
49:40:73:bc:36:cd:35:27:7e:b8:6b:8d:59:5b:5e:
92:c9:2e:8c:fc:7c:b1:52:f5:5d:55:60:05:3a:6e:
ca:fb:10:a1:cb:60:16:d8:53:6e:8f:b4:f9:8f:8c:
2c:b9:8f:83:ba:3a:3e:d4:87:56:b9:7b:61:50:e8:
21:8f:9f:a1:05:22:83:97:24:f6:94:ed:5f:cb:08:
23:d1:08:7f:71:8c:16:cd:bc:f5:48:e2:4a:79:5c:
42:14:f3:59:2d:d7:13:3e:59:af:52:73:0b:18:86:
36:a6:58:64:f1:5d:1f:4a:c5:24:9e:1f:c3:d9:1a:
0b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:13:BA:CB:67:1C:C4:F3:CC:55:6D:67:7B:7A:57:E8:46:E9:5C:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/533733c4-c1ec-3505-a45e-1d154b969824.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8f:d400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:2e:c9:31:a2:f8:9a:b9:0e:12:bc:e3:e1:a3:94:42:dc:0d:
3b:a8:b6:25:c9:20:f2:7f:50:1f:08:a9:fb:c5:ea:29:3f:bd:
97:b0:72:54:1a:7c:a3:45:1a:5c:74:37:b2:12:4c:ce:ba:e1:
53:cb:4a:b0:d7:f2:93:14:82:84:cd:ae:25:e4:25:cf:c4:f5:
b6:0b:60:69:c9:1c:4a:7e:8b:8d:bf:2b:1e:1a:5c:76:96:98:
04:81:b9:11:30:be:ca:3b:70:37:63:c4:df:3d:0a:6a:2f:1e:
5c:aa:b6:b8:59:38:73:f6:04:44:cf:14:38:79:01:d7:70:78:
df:c7:f8:1d:58:ac:78:18:30:58:73:63:36:1c:2e:1a:bd:ea:
40:83:e9:5e:05:fe:da:97:1b:4a:8c:89:bd:79:f4:5a:cb:5a:
a0:6a:b3:2b:4f:e0:4a:9d:bc:45:db:22:5a:b0:67:41:6f:c5:
8e:ec:2b:11:db:4b:12:d5:ae:21:67:75:fc:37:aa:99:57:6f:
8f:8b:0c:fa:00:28:7b:b9:15:00:2b:8d:34:c0:9b:9d:97:47:
0e:53:ca:29:8b:c8:f0:74:09:df:87:32:7c:98:ab:82:24:67:
51:b1:08:8b:94:3d:8c:fd:1e:37:94:2e:d7:5c:2f:be:51:3e:
cb:ca:af:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 18:27:13 2026 by rpki-client