
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b82699c-e50e-3db6-8f92-30a8c9f5ac2f.roa
File: 8b82699c-e50e-3db6-8f92-30a8c9f5ac2f.roa (raw, json)
Hash identifier: Zsx8rKUrBFEhqBDJNfZxC7rH/8ZsMhD460lQZIA8BB8=
Subject key identifier: AE:95:D9:2E:02:47:92:8B:7A:2C:3C:45:9A:ED:D8:61:41:AD:D8:F9
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D237A433E10FC2C5D3B3B3580
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b82699c-e50e-3db6-8f92-30a8c9f5ac2f.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 30036
IP address blocks: 2604:2e8f:8380::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:43:3e:10:fc:2c:5d:3b:3b:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=a2058158-ae52-4886-bc0c-c12ad88c5e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:67:9c:ab:8e:50:79:fb:2d:39:2e:ff:a3:b8:
db:be:bd:03:48:96:56:6c:10:08:7c:6a:27:bf:fd:
28:af:51:aa:8d:ec:4e:85:70:bb:97:ae:a3:65:24:
32:02:38:95:94:b2:68:2a:2c:9e:39:60:38:d5:39:
6a:b9:09:cd:86:ba:8f:10:cc:f8:20:85:80:42:33:
3a:f5:02:88:ad:0e:ac:61:a0:ca:9a:d1:da:71:7e:
11:49:f8:75:4f:74:32:24:51:af:2a:8b:82:06:cc:
9e:05:c6:31:56:08:d5:d8:00:3a:97:52:08:f5:92:
78:e8:91:29:bb:fb:cd:b4:cb:99:d0:78:a7:2d:cc:
da:33:10:b9:61:a7:47:bb:fd:2a:33:dc:09:7e:b7:
d1:18:68:31:7e:97:e9:1c:f6:87:a1:47:c9:1c:25:
96:c2:a6:ff:99:09:e8:61:62:69:08:12:33:38:bb:
63:b7:2c:0c:e1:53:21:8a:ad:80:ac:3c:98:14:36:
1a:6c:c5:e4:df:f1:46:50:9e:86:61:18:9b:80:80:
c9:00:da:09:be:1f:93:3c:5c:07:5f:4e:9a:ef:c3:
ad:79:88:41:71:92:de:c9:ac:44:83:dd:eb:c8:8a:
f6:47:3d:fd:bf:47:ca:72:dc:e0:73:2a:f2:83:45:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:95:D9:2E:02:47:92:8B:7A:2C:3C:45:9A:ED:D8:61:41:AD:D8:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b82699c-e50e-3db6-8f92-30a8c9f5ac2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8f:8380::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:d3:76:ec:1c:bc:6f:c2:68:5e:52:94:94:f1:87:68:b0:38:
d9:4a:dd:34:46:6a:c4:98:ce:0b:a0:ac:7e:a1:cf:32:21:55:
be:31:28:1d:2d:07:11:c0:87:7e:a5:31:f9:62:70:c0:47:c0:
7e:b0:b2:7b:02:ca:62:03:95:17:ea:74:e7:91:44:6f:96:5b:
e4:12:00:3d:d4:67:20:ef:84:b0:54:99:5e:54:be:8b:21:10:
d1:26:ae:0a:2c:55:77:a0:cf:1a:74:cf:0d:36:95:0c:6a:22:
48:51:62:be:90:65:15:76:0d:8d:4a:69:33:fa:c4:a0:84:60:
e3:6e:a7:44:fd:37:df:71:c6:ac:1e:da:c3:93:af:17:b9:62:
fb:a1:7a:d0:a9:a9:4f:7e:90:91:47:d9:35:51:95:61:05:9b:
90:86:33:55:1d:65:d9:54:88:bd:e6:cf:11:86:2f:5f:f4:b3:
96:e4:10:6e:b9:18:49:ef:a3:37:cc:82:95:6a:a4:ac:45:2e:
d8:b7:5a:2a:f2:19:88:6e:64:93:56:f0:4b:b7:7d:3f:a6:4b:
6e:3f:97:08:73:dd:d5:a4:6c:c0:55:ed:9a:79:59:58:78:a7:
d9:c6:43:61:3e:75:8a:88:80:76:95:e5:76:36:d0:fa:a7:e4:
ae:45:39:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 06:40:48 2026 by rpki-client