
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9684e0d8-ac2d-35ad-bb42-588011e2b912.roa
File: 9684e0d8-ac2d-35ad-bb42-588011e2b912.roa (raw, json)
Hash identifier: gS9+cKS2stIX3ZFnMK56jHW4rD4YCeih0J9P4e0skTw=
Subject key identifier: 48:EC:C8:43:F3:17:EB:09:85:C8:32:A8:6C:22:C3:C3:2B:FA:34:AE
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584DA3E556AC5FE4791D3D2F9780
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9684e0d8-ac2d-35ad-bb42-588011e2b912.roa
Signing time: Mon 27 Apr 2026 01:00:24 +0000
ROA not before: Mon 27 Apr 2026 01:00:24 +0000
ROA not after: Sun 26 Jul 2026 01:00:24 +0000
asID: 19905
IP address blocks: 2604:2e89:8800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 10 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a3:e5:56:ac:5f:e4:79:1d:3d:2f:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Apr 27 01:00:24 2026 GMT
Not After : Jul 26 01:00:24 2026 GMT
Subject: CN=e02ebde6-f4e1-46db-9fff-6e8b0fcf2173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:e1:a1:97:70:59:59:a0:e5:51:46:87:5d:
d3:bf:1a:0a:ea:16:73:77:04:e8:bf:56:aa:23:71:
b4:75:93:fb:2f:bb:26:b6:bb:2f:0c:e6:b2:27:b4:
73:8b:e4:1a:44:48:1c:a1:43:9f:69:b5:2d:2a:9b:
5e:79:86:71:e1:11:57:33:1b:1e:f3:fa:49:e0:9e:
ba:e0:c4:c6:29:e9:80:7a:b2:1b:e7:a1:5b:86:a9:
9c:57:0e:88:fa:46:cd:14:a0:df:19:d4:cb:50:90:
c7:c3:2b:d8:24:37:3b:2b:d3:3b:c3:9d:24:d4:14:
dc:ab:f6:08:99:ea:e9:e0:88:f9:fa:4d:b3:6f:ee:
52:d0:75:8a:67:97:8c:fc:09:6a:97:69:7e:ea:86:
ca:85:53:70:9f:a1:c9:a3:81:24:35:32:6b:2e:6d:
e3:d5:2f:33:53:d8:de:33:fa:1f:0a:b0:43:0e:41:
d6:ae:d4:ae:5c:ef:5c:9c:ab:bd:fe:8b:de:f5:8e:
6b:e7:ba:ef:97:2b:92:9a:79:ea:6d:6d:14:4a:17:
d0:6b:61:d4:83:af:2b:88:ab:cf:65:1e:bd:69:b9:
94:dd:f6:73:ed:ff:43:6d:74:47:92:a3:05:59:2a:
bc:75:49:7a:b9:d3:6c:11:a7:ba:77:a7:56:46:1b:
56:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EC:C8:43:F3:17:EB:09:85:C8:32:A8:6C:22:C3:C3:2B:FA:34:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9684e0d8-ac2d-35ad-bb42-588011e2b912.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:8800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:85:29:67:69:e3:19:fb:e7:4d:36:12:7c:05:08:c1:58:f2:
e4:a9:6f:39:a9:29:64:2b:12:2d:20:37:73:a5:d1:91:60:b0:
08:86:2a:af:76:93:27:44:ec:df:a1:47:56:72:58:2e:9a:78:
34:53:3e:8c:6c:cf:06:97:50:c3:2e:7e:02:42:4e:e4:04:e7:
a5:6b:47:7f:83:04:b0:07:1d:48:f2:6a:71:52:49:a8:92:ef:
63:c4:e4:04:78:ce:7b:8c:31:03:82:d1:ba:ad:41:e3:49:4d:
43:5d:c3:67:3b:15:9e:45:69:c3:69:af:f5:4a:d3:e1:8d:30:
92:bd:db:00:54:1b:d3:be:dd:67:70:38:55:b9:49:83:08:dc:
c9:10:2c:3a:b2:a2:3a:b4:2a:e5:ed:06:10:20:14:60:54:e7:
9b:15:65:e7:b4:38:c0:65:05:a5:e4:73:2f:a8:6e:00:75:a3:
20:55:44:d7:fa:57:aa:06:c5:8b:44:e5:04:a6:bd:67:e6:23:
72:f8:73:11:af:4e:bc:58:74:a9:21:c2:4f:7c:e5:91:bc:46:
fc:89:a5:24:69:02:54:9c:48:c3:44:17:c3:73:29:b5:28:cd:
a2:57:7a:9f:24:cf:33:7c:66:af:a7:9f:54:38:51:60:dd:5e:
28:90:ad:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 20:27:29 2026 by rpki-client