
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5343cbcc-0f0d-3988-a6d5-f684bf6920a3.roa
File: 5343cbcc-0f0d-3988-a6d5-f684bf6920a3.roa (raw, json)
Hash identifier: WHMxkFq/kJRfMJ9jOISNEtR+ArAY+3da21A+3pDl8oI=
Subject key identifier: EA:13:53:5C:D0:8C:43:98:DA:F6:C5:05:DB:46:F3:76:63:5C:EB:D9
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584F498A3616395C5BDE89C937E0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5343cbcc-0f0d-3988-a6d5-f684bf6920a3.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 30036
IP address blocks: 2604:2e89:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8a:36:16:39:5c:5b:de:89:c9:37:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=376c3dc2-f79e-4fc2-9e94-928e5db37003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:10:c5:62:99:63:16:8e:0f:b1:92:cc:2e:
93:45:0f:2f:ea:7a:3c:3d:b3:48:88:97:5e:0b:c6:
05:03:ec:2e:2d:cf:3f:e7:98:e2:8c:67:6d:d3:3c:
4a:71:e4:00:dd:01:ee:44:4d:c5:8a:fd:aa:70:79:
11:f4:e0:4e:26:66:e0:2a:10:27:34:47:f5:33:58:
63:00:2e:53:de:85:81:3e:49:b3:64:c4:bc:f5:ff:
a4:43:2d:01:43:34:c9:c3:17:b3:3b:52:40:2e:e4:
3d:65:b9:27:0d:49:cb:6a:c0:51:3e:fd:3c:c9:6f:
c9:5a:2a:62:72:bc:96:1a:6d:c6:6f:5b:ba:28:7e:
24:43:72:7a:a8:d2:78:14:44:bb:53:2f:ee:5c:0f:
5a:b7:30:a6:30:73:be:fa:58:d9:0b:f9:f6:17:84:
37:4b:bf:a3:bc:4d:61:5c:c5:2e:e2:dc:06:86:6a:
dc:69:06:44:d2:8d:b7:46:d1:d4:81:00:4f:60:ee:
6d:16:90:9f:e4:52:c6:d6:22:45:5f:e2:bb:1b:d9:
5c:8f:d1:a3:91:36:b8:6b:66:d1:a1:85:53:53:61:
10:05:cc:02:55:a6:39:c5:43:7c:9b:c2:63:41:03:
05:62:78:7d:93:90:84:2c:16:4f:75:72:3b:2d:da:
5c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:13:53:5C:D0:8C:43:98:DA:F6:C5:05:DB:46:F3:76:63:5C:EB:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5343cbcc-0f0d-3988-a6d5-f684bf6920a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:ba:7c:88:43:3f:60:8b:de:35:54:24:b5:3f:9f:c9:69:75:
ec:39:db:c3:0c:b6:28:1b:4c:64:12:4d:ce:a4:56:5c:e9:2f:
b9:c1:23:9f:20:0c:bd:c4:ac:1c:3a:0b:95:ee:cc:ae:d8:de:
76:2c:eb:f5:d1:a6:14:72:85:89:b7:c0:64:00:e0:34:68:75:
df:75:2f:0c:cf:30:f9:8c:09:44:4b:3d:19:08:c2:36:3c:12:
17:05:fd:4a:34:d7:37:99:55:63:55:64:6f:49:02:11:15:74:
48:d1:e5:2d:9d:1b:5e:16:d4:b6:f9:8e:3a:52:60:30:5e:07:
07:0a:c2:cb:5a:85:d3:29:6e:cd:7e:68:5a:f3:7b:20:5a:38:
19:22:4e:d2:89:0c:36:d1:c0:07:1f:a8:c4:3d:e9:41:74:e4:
2d:0f:ec:62:30:cf:fa:30:7c:8f:ed:99:64:6f:6e:4a:d9:b1:
dc:1d:49:5f:74:92:de:9b:69:2c:3f:b5:b8:44:2f:10:0d:e3:
e8:a8:66:7f:a0:dd:f1:8e:35:b0:98:83:ff:7b:4b:79:54:ca:
56:0b:a9:78:a0:e6:67:48:ea:cc:43:72:64:1e:80:a8:e8:0f:
05:ce:d8:52:d3:10:52:3b:7f:eb:8f:97:09:f0:9f:a4:ac:b2:
92:25:aa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:07:11 2026 by rpki-client