
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a9861e10-12fb-31b1-8255-a44eb067802d.roa
File: a9861e10-12fb-31b1-8255-a44eb067802d.roa (raw, json)
Hash identifier: GRFPUn0jC+sOyotR1QKyvhKdodfuiDwCzBL80jVvMOw=
Subject key identifier: 30:8B:0D:22:25:91:9D:6E:0B:55:F4:C0:1E:74:9B:28:FC:D4:D2:01
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584F708828AF391F925EF6993800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a9861e10-12fb-31b1-8255-a44eb067802d.roa
Signing time: Fri 09 Oct 2026 01:00:12 +0000
ROA not before: Fri 09 Oct 2026 01:00:12 +0000
ROA not after: Thu 07 Jan 2027 02:00:12 +0000
asID: 19905
IP address blocks: 2604:2e88:4400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:70:88:28:af:39:1f:92:5e:f6:99:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 9 01:00:12 2026 GMT
Not After : Jan 7 02:00:12 2027 GMT
Subject: CN=c02ff2e7-92f4-4156-8802-552c3a7d5464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:ea:cf:e5:0c:78:06:e5:ad:df:ff:2e:ee:
31:1d:4b:23:96:56:db:3f:ed:9a:42:6f:88:38:4d:
a3:9b:92:d5:1f:5e:d7:60:7d:14:21:f5:21:c7:ac:
1d:d6:ee:c5:d7:87:d8:cc:78:25:99:66:e8:74:49:
fd:31:e0:a8:41:08:68:c9:7e:ef:e9:5f:e9:bd:4d:
e6:c0:22:23:11:46:ef:60:f3:0b:26:18:ab:ff:38:
9b:fa:c6:83:f4:fb:11:8c:69:53:6b:c1:17:2c:cd:
97:ca:bb:06:4f:dd:6f:1b:dd:2a:d7:8b:e3:2d:27:
35:99:9b:5c:bc:a8:90:2e:0a:38:65:2a:97:3e:ab:
dc:80:dc:86:e2:95:c6:74:c3:fa:af:7f:da:79:ff:
3c:5d:81:8e:11:0e:91:4e:82:bb:2b:12:61:c4:60:
0e:28:26:bf:7d:fd:09:ff:89:17:a8:5f:69:37:23:
cd:eb:fc:e7:3c:0f:0d:c6:71:49:73:18:32:01:1f:
0e:4a:90:d5:a3:da:45:7a:97:94:45:7a:71:3f:1c:
3a:92:88:3f:fb:15:ea:f2:c2:2d:dc:a8:1e:ff:11:
bb:88:a4:8d:be:25:c7:9c:db:b6:f1:30:ae:bb:a2:
21:5e:be:a0:60:ac:19:61:15:c5:91:d5:8f:6b:36:
01:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8B:0D:22:25:91:9D:6E:0B:55:F4:C0:1E:74:9B:28:FC:D4:D2:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a9861e10-12fb-31b1-8255-a44eb067802d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e88:4400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:79:a6:75:1e:98:04:ff:e2:58:f5:8d:77:5e:9f:1f:2e:9a:
af:e8:c1:cf:4e:97:61:8f:4b:a9:f5:d7:90:4a:f7:1d:d6:cd:
5c:5a:1c:23:33:7d:b2:1d:67:55:3f:c5:c0:6b:95:4b:c8:4f:
9c:1b:61:5c:91:4f:fb:d5:64:75:5e:a3:0e:bf:62:bb:2c:85:
50:4d:1a:fc:30:81:9a:c6:23:01:3f:95:3b:bd:df:a5:c2:5e:
48:a1:f6:cb:66:3e:b3:33:d8:36:a0:20:83:a6:42:df:b6:8f:
c0:8d:7c:ab:a0:d9:19:36:7a:d9:74:5c:c5:a4:92:1e:67:a2:
b9:da:be:9b:6c:00:a8:4b:92:d2:b6:bd:87:2a:e6:14:ad:e0:
3c:7f:e0:00:1e:9f:3d:f6:9a:65:5f:00:69:ce:6b:53:41:31:
82:35:a3:b0:3e:a6:58:da:c2:b8:39:65:fd:3b:1b:d9:1d:e8:
9f:21:46:07:86:16:af:52:28:c7:66:6f:af:7d:0b:ed:67:4e:
e1:fc:ea:1b:ec:da:cf:4c:a4:40:e1:15:03:4a:fb:cc:85:96:
cd:c2:a9:fa:2b:a1:9b:2b:2f:79:9a:45:69:3d:c8:7e:3a:33:
08:ac:75:39:b9:a6:a5:7d:c8:31:03:2b:d0:9a:cd:33:99:f1:
f3:96:01:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:01:04 2026 by rpki-client