
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/30490a35-c0d8-32d6-849a-a465e85d9337.roa
File: 30490a35-c0d8-32d6-849a-a465e85d9337.roa (raw, json)
Hash identifier: JGXBRQWHehtQ+9Py7qXkz9ldHsrzK2CILNDrzMAPpDg=
Subject key identifier: F3:46:3A:03:1F:D5:27:D1:EB:D8:E3:A3:E1:AF:DB:47:0F:A7:B9:1D
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584F4988FFAF778770B0EE948800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/30490a35-c0d8-32d6-849a-a465e85d9337.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 30036
IP address blocks: 2604:2e8d:8800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:88:ff:af:77:87:70:b0:ee:94:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=a52563b9-63a6-4c56-aa2d-d80b59fdee83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:ae:73:61:97:6b:dc:3a:24:0e:cb:1c:c9:
8d:e9:7a:6a:f7:3a:3c:8d:19:74:20:e3:7b:1d:d4:
18:60:f8:cc:3a:df:3d:aa:bd:43:fe:81:b5:e7:dc:
52:5d:eb:de:f8:45:67:f3:56:96:9e:6a:b0:ab:27:
c8:28:10:8b:2b:32:8f:87:11:92:6f:ce:8c:65:54:
08:0f:61:ef:0b:bc:59:c0:3c:a0:ff:32:c3:77:c3:
98:39:22:6a:1b:a9:86:f9:32:58:fb:e9:16:91:c7:
93:94:ac:5b:cc:46:3e:32:68:b3:4e:d0:57:2f:24:
9a:33:27:f6:4f:2c:2c:bc:17:65:e4:ab:20:69:74:
6d:73:8b:49:8e:59:dc:a1:b1:39:2e:5f:41:3d:fc:
4c:97:f7:a3:78:61:a2:76:f4:2e:c3:a2:21:ab:b8:
87:18:0d:df:f2:17:1b:af:1e:36:80:34:58:0e:df:
98:93:06:dd:40:11:7f:1c:4a:ec:b3:a0:76:f4:33:
0f:20:9e:4e:95:d7:3d:41:7b:50:48:29:58:0d:cb:
f4:63:da:e7:a4:60:fa:b0:54:e1:95:14:77:de:73:
5a:e8:58:4b:6b:33:60:63:ad:e2:20:83:46:51:80:
85:b2:2e:2e:5b:9c:ce:f0:8a:1b:59:03:d5:7c:75:
89:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:46:3A:03:1F:D5:27:D1:EB:D8:E3:A3:E1:AF:DB:47:0F:A7:B9:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/30490a35-c0d8-32d6-849a-a465e85d9337.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8d:8800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:27:c0:fa:02:43:b4:db:01:1b:18:3a:f8:5a:42:a2:02:89:
76:94:cc:2d:54:58:f7:f4:a5:1c:d7:e4:82:06:3a:c5:98:c2:
49:90:64:ed:1c:9c:b2:06:92:f7:78:e4:47:d7:e5:37:18:91:
ae:6e:e7:3a:c6:72:e1:f9:45:34:16:d5:dc:9d:de:07:e5:1c:
f3:f7:5d:25:a9:2c:15:57:0f:4f:71:da:5f:a9:7b:38:12:79:
dd:37:6a:c6:40:37:a6:c7:8b:13:a2:19:9c:5a:de:d6:cf:25:
ea:6d:ab:54:47:b6:f0:e7:91:9e:c8:65:32:70:a5:fa:e2:f6:
c3:97:87:34:05:c3:a0:95:79:f9:59:c6:ec:dc:aa:73:fd:53:
14:85:c8:d8:79:d6:8f:ca:72:18:d4:68:62:43:fd:9a:c5:43:
22:0c:ca:6e:10:97:2d:dd:b8:dc:eb:3b:fc:ed:f7:f6:f4:be:
c8:60:74:88:aa:35:4c:d9:d9:3f:b3:cd:2c:56:f1:9a:d7:91:
83:70:c2:e8:eb:c6:a4:68:0c:37:1f:ce:3c:2f:5e:e7:e8:8f:
dd:bc:84:60:8d:d5:33:4a:24:47:6d:fa:4a:9f:56:92:b5:f5:
a6:8e:ac:d8:cb:8a:ed:69:0b:70:ba:02:dc:5c:ea:55:80:4b:
92:39:b5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 08:48:50 2026 by rpki-client