
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/27c2e407-7e93-36cd-b733-e9fa2dfca76d.roa
File: 27c2e407-7e93-36cd-b733-e9fa2dfca76d.roa (raw, json)
Hash identifier: Cf3JxfvV71gT8HfJyCxkpFc9xVa9S/7vNZSJj0oA/tw=
Subject key identifier: 4A:87:BD:B9:B3:37:16:5F:85:9D:33:84:F2:FD:A5:09:4A:8F:8A:78
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D47C5052D1024D1F3A3AB8600
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/27c2e407-7e93-36cd-b733-e9fa2dfca76d.roa
Signing time: Wed 25 Mar 2026 01:00:32 +0000
ROA not before: Wed 25 Mar 2026 01:00:32 +0000
ROA not after: Tue 23 Jun 2026 01:00:32 +0000
asID: 30036
IP address blocks: 2604:2e87:1c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:47:c5:05:2d:10:24:d1:f3:a3:ab:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 25 01:00:32 2026 GMT
Not After : Jun 23 01:00:32 2026 GMT
Subject: CN=7fe4cbd9-887e-47b5-bdf8-86b997dd6d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a0:c2:49:1e:6a:cf:fb:24:96:4b:fd:33:e1:
1e:dc:68:4b:55:28:1c:92:86:87:49:cc:7d:f6:c9:
6c:a9:0a:da:93:05:20:32:b1:69:d0:4e:d2:6f:d8:
44:e2:e8:aa:73:6c:e5:2e:b6:b3:86:bb:43:71:19:
85:a5:98:5c:e0:a5:a6:db:22:5b:ae:5f:bb:7d:76:
6a:03:38:17:a3:54:7f:f0:66:15:1f:c5:0d:a7:af:
8b:7b:05:61:99:8a:ee:54:14:f1:77:62:05:7e:3f:
8b:cf:f9:6e:01:b1:ec:31:84:e8:67:d8:df:c4:14:
37:ab:9b:02:3a:93:6d:4e:48:6a:16:64:b5:9a:b7:
32:60:8c:35:b8:91:57:6f:d1:fd:34:43:c2:67:bf:
bf:09:03:16:21:93:72:c3:92:ee:63:a9:6c:3e:66:
04:c3:21:d1:92:83:0f:3c:20:a2:96:30:06:ef:b2:
56:e7:52:10:42:6a:61:79:87:2b:ad:ec:b9:10:cf:
18:a4:36:9b:bf:ea:99:88:44:7e:04:e7:3b:3e:9b:
53:af:ab:77:91:c7:20:16:86:5f:b4:0b:e9:c2:8b:
1e:f1:e7:ec:98:29:a9:a1:6f:86:45:9b:94:52:4b:
45:55:51:cf:b2:d8:41:0b:8f:3f:a1:30:da:18:b1:
a9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:87:BD:B9:B3:37:16:5F:85:9D:33:84:F2:FD:A5:09:4A:8F:8A:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/27c2e407-7e93-36cd-b733-e9fa2dfca76d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e87:1c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:1f:36:bd:3b:26:25:1d:12:2e:dc:a0:13:61:bb:a9:cb:4b:
fb:b3:91:34:ca:84:bd:bd:b1:b5:e3:c3:05:a7:d9:84:9e:30:
ba:e6:a5:e6:0b:6b:d0:ad:9e:66:a3:12:74:28:18:43:4e:32:
76:51:4c:6c:8a:b3:a8:69:cb:24:e0:93:e3:d1:d4:a0:80:f4:
3b:3e:f2:b2:da:57:cd:86:ac:13:eb:7f:ae:6b:0e:05:fc:8e:
c5:5a:32:90:1d:43:f9:15:ad:2a:19:68:cd:2f:a4:23:7d:21:
66:20:ed:bb:79:1c:66:2a:5d:da:e0:77:08:09:bd:81:f7:4f:
a9:f4:73:eb:89:61:2f:31:50:2a:a0:8a:7c:da:93:b6:35:ab:
7a:f0:56:3e:6d:31:66:29:8c:49:c3:67:71:fc:27:dd:69:b1:
8b:f1:5a:21:3a:b9:25:4d:32:dd:35:14:82:d2:a9:73:dd:d3:
36:88:c6:99:50:7e:af:59:29:11:a6:6a:f8:5e:e0:4d:7a:01:
4b:3d:9a:16:e5:c5:13:e0:72:da:f0:c5:16:ca:b6:83:6d:9d:
44:fb:62:1b:11:29:45:05:ee:b2:11:fe:14:fa:b7:77:00:37:
74:4b:48:55:54:af:21:db:bb:8a:3f:77:3c:78:8b:65:1f:5a:
14:28:09:a4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1HxQUtECTR86OrhgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk
N2ZlNGNiZDktODg3ZS00N2I1LWJkZjgtODZiOTk3ZGQ2ZDJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaDCSR5qz/sklkv9M+Ee3GhLVSgckoaHScx9
9slsqQrakwUgMrFp0E7Sb9hE4uiqc2zlLrazhrtDcRmFpZhc4KWm2yJbrl+7fXZq
AzgXo1R/8GYVH8UNp6+LewVhmYruVBTxd2IFfj+Lz/luAbHsMYToZ9jfxBQ3q5sC
OpNtTkhqFmS1mrcyYIw1uJFXb9H9NEPCZ7+/CQMWIZNyw5LuY6lsPmYEwyHRkoMP
PCCiljAG77JW51IQQmpheYcrrey5EM8YpDabv+qZiER+BOc7PptTr6t3kccgFoZf
tAvpwose8efsmCmpoW+GRZuUUktFVVHPsthBC48/oTDaGLGpewIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEqHvbmzNxZfhZ0zhPL9pQlKj4p4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjdjMmU0MDctN2U5My0z
NmNkLWI3MzMtZTlmYTJkZmNhNzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhxww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAfB82vTsmJR0SLtygE2G7qctL+7ORNMqEvb2xtePDBafZhJ4wuual
5gtr0K2eZqMSdCgYQ04ydlFMbIqzqGnLJOCT49HUoID0Oz7ystpXzYasE+t/rmsO
BfyOxVoykB1D+RWtKhlozS+kI30hZiDtu3kcZipd2uB3CAm9gfdPqfRz64lhLzFQ
KqCKfNqTtjWrevBWPm0xZimMScNncfwn3Wmxi/FaITq5JU0y3TUUgtKpc93TNojG
mVB+r1kpEaZq+F7gTXoBSz2aFuXFE+By2vDFFsq2g22dRPtiGxEpRQXushH+FPq3
dwA3dEtIVVSvIdu7ij93PHiLZR9aFCgJpA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:37:41 2026 by rpki-client