
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28cc785f-6ced-3d1a-8fd1-65cfcbe0dde1.roa
File: 28cc785f-6ced-3d1a-8fd1-65cfcbe0dde1.roa (raw, json)
Hash identifier: RzEkosdBdoZOxk4pTUHGwvRg5l9IE8Y2i6hjZJhMAEY=
Subject key identifier: 04:A9:D1:C4:EC:5C:F7:6D:6F:DD:97:69:AF:ED:8C:66:44:4B:DC:0F
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584F4986DC9E5185F2B55B812080
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28cc785f-6ced-3d1a-8fd1-65cfcbe0dde1.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 30036
IP address blocks: 2604:2e8e:6800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:86:dc:9e:51:85:f2:b5:5b:81:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=aa0432dd-3e41-43c8-97cd-9aa5bc3116fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2a:20:16:f7:8e:87:e7:eb:f0:df:80:94:09:
b2:11:fa:fa:f0:99:8e:a0:62:40:55:87:42:96:4d:
13:6b:d4:31:d0:8b:05:8c:9b:32:af:ee:32:ba:7c:
31:75:0f:32:fa:a1:1a:99:be:07:93:f3:cf:7e:99:
25:89:b9:12:6b:0c:6b:7a:8b:ec:bb:08:b4:53:53:
9f:05:cc:01:5c:d8:30:3b:a9:84:e5:d3:b7:f7:bb:
c3:ba:a4:54:89:9e:8a:fb:53:e2:ef:7d:2f:5d:1e:
03:7e:26:2d:5e:8c:af:2f:f6:cb:11:c5:dd:a7:8c:
64:a7:c8:e4:e3:e1:89:71:12:6b:7b:e4:3b:57:28:
e9:72:31:de:68:54:7f:f9:11:60:ca:89:31:0c:8e:
6d:42:82:a6:15:34:30:a6:2f:64:67:27:17:ec:ce:
b6:52:b2:a5:cd:2e:14:dc:79:e9:bd:cb:eb:13:65:
f4:7b:59:78:45:79:36:1a:8e:63:9b:a7:e5:d4:4a:
ec:ea:ce:a9:8d:af:4a:8a:9b:90:3c:65:31:26:fc:
7a:8b:0b:18:b7:66:27:11:81:dd:10:f0:c0:29:6b:
14:00:8d:3c:60:4f:6f:a0:71:07:d4:7d:b9:ff:73:
35:89:98:70:06:49:0b:cb:59:7b:78:5f:aa:5f:4d:
bd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A9:D1:C4:EC:5C:F7:6D:6F:DD:97:69:AF:ED:8C:66:44:4B:DC:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28cc785f-6ced-3d1a-8fd1-65cfcbe0dde1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8e:6800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:43:c3:20:7f:ff:a5:7f:1a:a5:7e:ba:c1:bf:26:5e:43:fd:
7f:0b:5e:bf:0f:e4:24:c1:53:1b:88:af:9e:1d:ff:29:10:50:
11:f4:b3:b7:30:8f:40:2f:34:16:a8:4e:e4:44:f6:8c:10:89:
db:69:77:7b:7b:ab:94:af:cc:0a:02:2a:4b:44:1c:54:81:2e:
c4:44:26:04:7d:aa:fa:18:b7:04:1c:c3:25:f9:5a:20:46:c3:
c8:10:79:b9:7f:28:bc:9a:49:58:b7:b6:df:2f:6d:dd:78:c8:
a6:a2:7c:c1:be:95:ea:d3:d2:5a:31:e0:39:c4:1d:b4:8e:ed:
77:a3:0d:3d:59:5e:55:c2:6d:0d:e7:0d:88:f2:39:78:46:ae:
9d:8b:c7:c8:fb:36:aa:b9:90:ef:58:d5:a8:5f:21:61:e5:76:
a0:66:8c:38:41:b2:46:e5:2b:3e:11:42:88:c2:08:74:03:21:
5d:e6:65:44:85:f1:66:c7:8e:aa:81:32:73:02:2b:80:07:ae:
9a:e5:ad:77:22:26:18:9b:c4:56:c6:85:00:11:51:e0:99:9a:
ec:7e:f6:ec:d5:60:90:92:bb:a9:63:c1:42:fe:0c:33:9b:89:
b1:9b:87:88:52:a6:86:e6:b6:da:d7:a9:f5:c9:46:16:46:14:
2a:70:71:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:46:59 2026 by rpki-client