
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8fd78e06-d3f6-3c68-b8f3-ace146a2ad0c.roa
File: 8fd78e06-d3f6-3c68-b8f3-ace146a2ad0c.roa (raw, json)
Hash identifier: Opx7iNUleg6AN7lkhAf1f+uRJfeCzb00AuZtNAKwo8I=
Subject key identifier: CC:46:AF:E4:5B:BE:6A:4B:CF:B0:EC:EB:21:DA:66:09:A7:AD:C3:A8
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D1B1A61A78AEBFC5C3E2C2E40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8fd78e06-d3f6-3c68-b8f3-ace146a2ad0c.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 19905
IP address blocks: 2604:2e88:f400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:1a:61:a7:8a:eb:fc:5c:3e:2c:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=d900fab2-296a-4501-836c-a7837268d7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1b:d9:6d:05:7c:18:3e:ef:56:e2:f7:20:6e:
e5:88:3f:ad:4e:02:df:ef:40:54:d0:4c:41:37:42:
28:4b:26:b1:3c:40:97:81:af:26:31:2e:a1:a0:03:
02:1a:cc:77:8d:88:42:5a:ab:30:7a:3e:2b:8e:61:
c1:69:f1:fe:b5:8b:b2:01:7f:9f:a1:21:f8:0a:3e:
90:fd:34:07:ee:2a:76:13:55:8c:44:08:fd:c0:dc:
6f:1d:72:32:30:aa:e0:1a:89:9c:60:f3:b5:96:04:
16:1b:69:de:f3:1f:56:00:1a:44:ba:c6:e2:11:74:
9f:02:55:13:6b:3f:09:3f:20:8a:b2:78:8c:17:ad:
28:9c:01:53:74:52:df:a2:17:30:9d:a7:78:d9:cf:
cd:7a:90:f7:ae:0c:02:bc:a6:65:b7:42:e2:8f:12:
76:fe:57:e4:0e:07:58:14:b7:22:1e:4c:6a:05:d4:
8b:24:63:4c:93:55:26:00:de:82:e8:d6:44:03:93:
d5:db:41:39:36:ba:e4:14:db:ea:da:d6:9f:ff:84:
58:58:c7:19:3c:8c:fe:b8:40:56:45:13:bc:b6:79:
11:bd:39:9d:e6:f2:47:78:08:b4:f3:93:e2:82:c6:
49:da:9b:9b:a3:50:18:29:a5:c2:45:22:e4:51:f2:
7a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:46:AF:E4:5B:BE:6A:4B:CF:B0:EC:EB:21:DA:66:09:A7:AD:C3:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8fd78e06-d3f6-3c68-b8f3-ace146a2ad0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e88:f400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:6b:7b:04:25:dc:36:50:14:22:24:89:cc:71:1e:e3:e1:37:
47:16:30:fa:ac:04:f8:0f:70:3d:c1:76:07:1f:13:9b:2f:36:
81:7f:92:44:97:af:b9:1e:34:16:6a:d9:cc:b5:2d:b6:2d:10:
3e:e6:66:e2:0d:33:7b:63:44:44:41:db:ed:91:40:9c:dd:33:
22:07:c4:bb:50:e6:df:9d:b4:96:c9:a7:fb:6a:f6:9b:7a:4a:
89:99:b2:86:a6:4b:e3:55:e7:c6:dd:47:e8:d2:84:5d:01:ec:
cd:3f:be:51:17:20:0b:c1:f4:ab:3e:aa:f8:9f:13:58:8d:cd:
92:54:fc:a8:6d:cd:ba:54:ab:22:53:37:d8:e9:d7:3f:70:12:
eb:62:bf:5a:43:2e:78:31:ef:80:55:85:d6:c1:0f:cd:5f:5a:
15:9b:a1:ed:86:30:ee:f9:8a:d7:07:d1:e4:5a:08:5f:e5:18:
af:c9:60:18:df:c8:5f:e7:fd:5c:0f:02:2c:c4:8b:04:8b:1e:
e4:1a:64:bc:33:21:a2:16:b0:0a:7e:a1:27:50:e8:8c:a6:7d:
c4:a5:e6:9b:4c:80:5d:81:b9:0a:42:ed:f1:2b:92:a4:2b:6d:
26:fc:94:1f:b2:ad:b1:22:8c:03:70:b2:4f:04:72:a0:01:e1:
29:44:b2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:32:12 2026 by rpki-client