
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3fceaef-605b-38cd-8395-f045db18defc.roa
File: a3fceaef-605b-38cd-8395-f045db18defc.roa (raw, json)
Hash identifier: q6vHZXI2WYSRa6dv3GzF1cjzHDSwnNcs78ZNm3n9zmg=
Subject key identifier: 7F:01:72:80:6E:27:88:4D:B4:B6:6F:A7:ED:1D:5A:13:7D:B0:8A:FE
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D932568E92DC996CD48978CC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3fceaef-605b-38cd-8395-f045db18defc.roa
Signing time: Tue 21 Apr 2026 01:00:24 +0000
ROA not before: Tue 21 Apr 2026 01:00:24 +0000
ROA not after: Mon 20 Jul 2026 01:00:24 +0000
asID: 30036
IP address blocks: 2604:2e8f:1400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 10 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:93:25:68:e9:2d:c9:96:cd:48:97:8c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Apr 21 01:00:24 2026 GMT
Not After : Jul 20 01:00:24 2026 GMT
Subject: CN=2e099e79-055e-4d3d-8687-8fed310cbb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:60:f4:0f:f7:9a:f6:8c:10:8c:e3:52:90:f2:
c6:af:eb:95:1a:32:d9:d9:82:49:8a:26:19:9c:a6:
1c:1f:b5:00:c2:65:12:7d:9c:d0:af:26:7f:3d:98:
3c:96:03:90:48:7a:c3:c7:59:65:d4:77:c0:ae:7c:
2d:34:21:5f:f8:8e:bb:e1:9a:3b:23:c5:b4:dd:7e:
5d:db:70:83:b6:7b:3b:3b:47:98:18:b2:6c:a3:b7:
91:d3:1d:a8:6b:2c:e2:58:b2:4d:52:2a:1c:50:60:
12:06:28:a0:d2:e1:f8:23:6f:59:f3:6f:e0:e4:53:
c2:c6:c7:8e:55:09:c4:91:ab:99:86:e6:4e:13:63:
8d:22:93:72:aa:0e:62:95:f6:ce:e4:79:9f:3d:c3:
03:7e:7c:71:db:ac:02:be:3a:c1:1a:73:4a:cc:c3:
bb:24:46:7a:83:7e:02:c1:49:68:5b:d9:db:e8:b7:
df:4a:78:a8:20:9e:18:a0:28:28:ea:1f:b0:3f:48:
e0:44:a1:99:0c:67:88:b2:98:31:42:67:d2:90:4e:
95:e5:8a:00:bd:37:41:4b:8a:ee:b7:91:0c:01:2c:
d4:8e:02:d5:17:5c:cf:7a:c1:5a:89:3a:be:a0:84:
34:90:81:80:55:43:12:67:97:6a:f0:d4:3a:71:4c:
54:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:01:72:80:6E:27:88:4D:B4:B6:6F:A7:ED:1D:5A:13:7D:B0:8A:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3fceaef-605b-38cd-8395-f045db18defc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8f:1400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:97:b2:d0:33:99:19:63:76:8e:e4:94:5d:55:b3:3c:ec:c0:
a0:4f:6d:19:fa:26:6a:5d:71:ed:04:e5:ec:3e:a7:fa:5c:a2:
c5:84:be:e6:77:ba:29:a1:6b:fc:0c:10:5b:8b:6f:96:b1:1d:
f5:29:7a:9d:67:82:18:9f:e9:e4:c5:9d:7b:a0:45:5c:07:25:
36:85:4a:18:e9:60:a8:e9:2c:a6:b3:b5:e9:5c:77:55:03:83:
6c:55:84:4f:67:8c:66:3c:45:67:f0:5d:d1:ff:7d:ab:e0:10:
04:bd:40:df:d0:af:a0:b5:b7:3c:3f:f2:b5:f9:de:cf:4f:49:
98:11:cd:fc:9d:f0:40:08:21:3f:7c:15:06:bd:66:4f:22:46:
97:53:0e:38:22:fa:4d:01:f3:66:f2:5a:4a:fa:62:93:6f:e9:
70:32:39:b0:a0:93:fb:6c:3e:2b:71:e7:f4:e0:16:3e:b5:42:
75:2a:a7:b8:fc:2d:06:a8:69:b6:49:44:e7:4a:69:a6:b8:b5:
18:bb:ae:83:ca:24:59:bc:08:27:da:c3:69:df:48:aa:e8:55:
ad:7e:67:ad:4e:1c:39:05:92:7b:01:d1:d7:00:eb:1f:7f:be:
d6:f2:a1:d2:6a:f7:4e:c2:29:b4:78:f4:6d:ce:44:6d:24:d3:
65:cd:df:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 18:26:47 2026 by rpki-client