
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d2dd2308-61c7-3735-966c-7e9f930fbd3a.roa
File: d2dd2308-61c7-3735-966c-7e9f930fbd3a.roa (raw, json)
Hash identifier: fxWdLfUvSxXnTwbudS06J4KHf2Hv1KVR9XT9kjnLj8E=
Subject key identifier: 28:EB:41:6F:98:AD:4E:98:6C:AF:A9:EB:D6:9B:29:80:BA:DA:76:E8
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584F1037A379BD5A23E473BD9C00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d2dd2308-61c7-3735-966c-7e9f930fbd3a.roa
Signing time: Fri 04 Sep 2026 13:00:12 +0000
ROA not before: Fri 04 Sep 2026 13:00:12 +0000
ROA not after: Thu 03 Dec 2026 14:00:12 +0000
asID: 19905
IP address blocks: 2604:2e87:b800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:10:37:a3:79:bd:5a:23:e4:73:bd:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Sep 4 13:00:12 2026 GMT
Not After : Dec 3 14:00:12 2026 GMT
Subject: CN=58471eaf-ca7e-4155-b470-3afc93b3ba23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:dc:91:84:9e:13:b8:1f:88:26:44:27:ec:
03:79:c8:41:9e:7d:34:0b:03:ee:2c:dd:d6:65:e0:
40:24:e6:c6:58:14:6e:99:88:8d:66:6b:89:91:dc:
ef:c4:a0:65:cf:56:33:a7:a8:29:b5:17:7d:91:61:
fa:85:fd:71:6a:41:91:69:7a:5b:07:a3:b1:f5:73:
07:a4:97:7a:fa:e3:2f:34:85:42:11:e2:63:d5:de:
45:72:de:c9:8f:af:4b:fc:7a:47:67:3b:0e:9d:5d:
c5:8f:a1:47:a0:ec:1c:12:dd:db:8f:c5:ca:82:cc:
43:45:54:1f:d0:68:7b:54:40:6a:b4:86:04:58:22:
3b:24:86:25:87:7d:54:4c:35:58:10:c2:2c:20:b2:
bb:be:da:03:a1:a5:99:4d:d0:ce:a8:27:56:77:a5:
24:ec:77:61:bf:a9:3d:a9:c6:4d:d9:42:74:b8:8f:
e4:95:a6:6f:31:65:ca:2f:d4:d9:6b:55:6d:2b:ad:
66:e3:08:0e:89:75:43:7f:d2:d0:5e:98:b0:4c:c4:
12:86:14:a8:d5:d2:4a:92:a6:f3:9c:9f:e1:20:d0:
9b:37:61:b3:0f:a3:3d:ce:74:2b:a4:fa:98:32:a2:
fc:0e:2a:97:68:de:6d:65:34:c5:06:36:74:3b:b0:
7d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EB:41:6F:98:AD:4E:98:6C:AF:A9:EB:D6:9B:29:80:BA:DA:76:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d2dd2308-61c7-3735-966c-7e9f930fbd3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e87:b800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:69:98:f6:07:2c:a3:f8:09:4c:97:cb:31:54:f6:30:7b:d2:
8e:07:99:a0:e1:f8:7a:1b:04:b8:49:2d:6b:a0:0a:d3:86:c8:
42:b1:6c:80:9e:84:fe:48:05:0f:a2:3d:94:bd:05:eb:e7:24:
90:be:8d:06:08:59:d5:d7:dc:17:ad:ab:7b:d7:39:df:f8:54:
61:2f:4a:df:7a:20:12:63:a9:ab:5d:7b:36:f5:62:36:d9:59:
81:39:5b:15:5b:18:9a:38:5a:01:c6:03:d4:90:ea:40:e8:03:
c3:54:ae:81:0d:fa:3d:21:f0:00:b1:23:57:a7:b2:2e:fa:aa:
07:b8:80:d6:6d:f7:f0:24:dd:f4:2f:e5:f8:07:4b:73:ca:92:
be:26:71:32:17:ff:32:56:19:a0:69:b6:cb:2d:a6:fd:2c:60:
9c:fc:bf:10:e1:41:f6:50:01:34:f9:7d:7c:11:0a:d7:5e:ef:
c2:9b:32:4e:2f:f4:fc:bb:e7:c7:db:4a:d2:08:67:40:46:d4:
87:ae:9e:2f:50:7e:4a:b3:89:bf:89:2f:a7:ec:1e:19:42:e8:
de:28:bd:7f:04:22:2a:c4:cb:a8:c7:6c:20:5e:f3:5f:1a:6b:
f0:0c:02:8a:52:24:e3:c4:ca:d4:61:50:a4:cb:b7:15:e6:d8:
b0:c4:1e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:05:28 2026 by rpki-client