
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d885db0-78f9-354c-8cf1-040c707c8d9e.roa
File: 9d885db0-78f9-354c-8cf1-040c707c8d9e.roa (raw, json)
Hash identifier: 1+Ub3xG2qenKORnEjvH+l99QIkgWLF5G3YRKim6cY54=
Subject key identifier: 19:6E:3D:31:CE:9A:91:F5:8D:28:23:A8:8F:9D:BD:E3:00:FF:C9:B1
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584F093D14EEF246346A385F3180
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d885db0-78f9-354c-8cf1-040c707c8d9e.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 30036
IP address blocks: 2604:2e87:9c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3d:14:ee:f2:46:34:6a:38:5f:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=ecbb98aa-5057-444b-b480-8a23b13bc7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:61:5a:7b:57:70:64:fc:9b:a4:86:f6:c4:d3:
9a:27:07:af:bb:fd:5c:15:3b:ea:8c:ed:f6:93:2f:
a3:a8:a3:31:d4:cb:36:2e:ca:2d:72:39:55:dc:82:
aa:17:b7:98:df:ac:93:7d:c3:66:40:df:8b:57:39:
db:c1:45:da:73:17:f3:84:56:fa:17:37:3e:7c:6a:
83:ff:8e:24:d2:e7:8c:20:fe:fe:93:3b:a9:49:b9:
c2:eb:83:97:ae:11:30:c9:56:6c:40:63:00:77:7e:
40:c2:b3:0d:3b:d8:2c:e1:b2:fc:63:ce:82:fa:03:
73:5f:9a:19:1e:49:43:7a:c3:16:db:7b:f6:c6:0c:
1f:46:0e:4c:1f:5b:27:29:df:63:8f:22:ec:b5:99:
9d:a5:d2:84:86:7c:f1:2c:c6:4c:82:e8:0b:9d:cc:
4b:67:51:96:c6:51:84:de:71:27:72:10:92:91:32:
46:4f:14:e2:79:5b:26:57:b6:4a:8b:23:63:c3:dc:
63:a4:a8:8b:ae:24:55:be:0b:cb:79:c1:b5:f5:12:
f3:ed:86:c1:7b:ce:70:20:eb:50:6b:e3:23:25:f4:
94:97:13:1a:49:49:f2:0b:eb:00:f6:5c:db:33:6e:
67:88:23:e0:1b:9e:4e:95:33:3c:13:8b:42:98:60:
f9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6E:3D:31:CE:9A:91:F5:8D:28:23:A8:8F:9D:BD:E3:00:FF:C9:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d885db0-78f9-354c-8cf1-040c707c8d9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e87:9c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:d8:71:af:cf:5e:c0:48:0c:f6:8a:3b:0d:dd:ee:ed:bd:ec:
4f:a5:f8:ed:e1:b7:d9:19:0a:c7:56:4e:cb:4e:0b:17:20:27:
dc:7a:c4:a9:75:37:e5:8d:d7:f8:2d:a0:43:c0:5c:ee:82:74:
0f:b6:50:b2:df:75:2e:c8:01:cd:94:07:77:09:d2:b1:e3:64:
77:b6:56:95:18:5f:04:d0:58:3d:18:a6:32:d8:01:23:6c:3f:
83:02:6a:34:48:37:54:3a:09:28:b4:84:af:a2:22:91:ac:b2:
b7:59:12:cf:b8:bf:2b:0f:48:61:4a:3a:d1:fa:28:7a:cf:83:
59:30:4d:a0:a0:20:0a:64:39:15:a5:96:0e:d2:5b:d5:04:2b:
fe:c7:7d:1c:ed:a6:d8:1c:c8:1d:1d:80:6e:00:81:0b:31:49:
b6:67:73:2e:c3:7a:67:6a:dd:f0:1c:39:50:bd:ab:12:39:ce:
01:39:78:1b:02:a9:f5:99:c2:08:78:b2:a3:c7:44:f7:d4:41:
03:c6:24:04:69:2f:f8:54:c5:a9:e1:65:b5:a6:a0:6e:05:67:
62:d5:74:77:a1:1d:fd:45:ae:3a:81:55:fa:2d:8a:ed:e4:d3:
43:29:79:82:4a:1f:13:14:88:98:66:50:d8:75:a2:7e:35:58:
31:31:7d:67
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8JPRTu8kY0ajhfMYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
ZWNiYjk4YWEtNTA1Ny00NDRiLWI0ODAtOGEyM2IxM2JjN2Y2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomFae1dwZPybpIb2xNOaJwevu/1cFTvqjO32
ky+jqKMx1Ms2LsotcjlV3IKqF7eY36yTfcNmQN+LVznbwUXacxfzhFb6Fzc+fGqD
/44k0ueMIP7+kzupSbnC64OXrhEwyVZsQGMAd35AwrMNO9gs4bL8Y86C+gNzX5oZ
HklDesMW23v2xgwfRg5MH1snKd9jjyLstZmdpdKEhnzxLMZMgugLncxLZ1GWxlGE
3nEnchCSkTJGTxTieVsmV7ZKiyNjw9xjpKiLriRVvgvLecG19RLz7YbBe85wIOtQ
a+MjJfSUlxMaSUnyC+sA9lzbM25niCPgG55OlTM8E4tCmGD5TwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBluPTHOmpH1jSgjqI+dveMA/8mxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWQ4ODVkYjAtNzhmOS0z
NTRjLThjZjEtMDQwYzcwN2M4ZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh5ww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEARdhxr89ewEgM9oo7Dd3u7b3sT6X47eG32RkKx1ZOy04LFyAn3HrE
qXU35Y3X+C2gQ8Bc7oJ0D7ZQst91LsgBzZQHdwnSseNkd7ZWlRhfBNBYPRimMtgB
I2w/gwJqNEg3VDoJKLSEr6Iikayyt1kSz7i/Kw9IYUo60fooes+DWTBNoKAgCmQ5
FaWWDtJb1QQr/sd9HO2m2BzIHR2AbgCBCzFJtmdzLsN6Z2rd8Bw5UL2rEjnOATl4
GwKp9ZnCCHiyo8dE99RBA8YkBGkv+FTFqeFltaagbgVnYtV0d6Ed/UWuOoFV+i2K
7eTTQyl5gkofExSImGZQ2HWifjVYMTF9Zw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 14:57:57 2026 by rpki-client