
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/38fdca3c-b8e9-3031-9757-154c2b7d75ec.roa
File: 38fdca3c-b8e9-3031-9757-154c2b7d75ec.roa (raw, json)
Hash identifier: 0joic0lQ5YElVAJuoZieFDpLUG41MEB2QBwaukRluXg=
Subject key identifier: 18:3F:F8:62:46:EC:90:A6:9F:17:88:AE:71:DD:7A:AF:FA:BC:2E:95
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D24E12C22281859EA52EF6980
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/38fdca3c-b8e9-3031-9757-154c2b7d75ec.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 2604:2e8e:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e1:2c:22:28:18:59:ea:52:ef:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=a43df99c-22d4-40ef-a33e-21a31fc8abfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:bc:36:83:e6:86:57:51:2f:d6:97:98:11:
3b:93:21:01:25:55:86:89:87:57:70:b0:bc:9a:92:
53:f5:a6:39:a4:43:fa:c3:ad:0d:57:b3:f5:12:06:
f9:99:6f:72:33:d8:2e:ff:88:3d:fb:57:12:35:da:
6a:01:24:4d:a9:8c:cb:79:9b:1e:90:a8:09:07:8f:
88:1e:28:84:cd:3e:e9:d3:fe:06:17:5f:53:b6:a6:
6f:a2:a9:d7:0c:2d:3b:20:f5:f9:bb:db:39:7a:ef:
47:8c:79:b3:34:00:a5:dc:81:84:04:73:0a:81:33:
be:70:4e:02:06:60:65:43:f3:a0:46:7a:e4:18:19:
ee:48:c5:a1:5d:3d:64:a6:0c:be:7f:e5:7b:20:5d:
be:5a:d9:c6:61:bd:ae:54:8a:b1:73:70:a1:5e:15:
1e:77:4d:85:20:41:6c:2d:4d:67:4a:ce:85:ee:d3:
9d:e5:dc:bb:92:24:f1:d6:5c:82:a1:cb:3f:3c:c3:
82:b8:1b:e8:c9:54:a4:df:47:19:4b:b1:ed:f1:4d:
64:c8:16:0f:54:b8:7c:08:9b:b2:5b:b2:1a:7a:20:
83:bd:b4:f1:e0:7a:0c:41:4d:6f:cc:5e:47:da:01:
b7:aa:70:7e:af:20:3b:72:57:c5:d7:da:f2:b0:81:
9d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3F:F8:62:46:EC:90:A6:9F:17:88:AE:71:DD:7A:AF:FA:BC:2E:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/38fdca3c-b8e9-3031-9757-154c2b7d75ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8e:400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:9e:9a:ee:d6:e2:76:dd:ea:4c:f1:f0:89:76:f0:6e:81:23:
02:24:69:a2:17:6a:d2:ef:db:b1:de:5e:7d:dc:80:af:fa:12:
cc:35:92:ba:de:d2:e4:06:d1:95:de:be:1e:5b:97:d6:69:55:
64:9e:9c:cd:d5:ed:8c:13:78:41:8d:b9:f4:44:0b:9f:92:d5:
6e:df:87:7b:a4:e7:f2:d9:35:66:af:91:53:f1:ad:b4:dd:ff:
d8:af:bd:64:dc:3d:9b:41:e3:64:4b:33:3c:2c:f4:13:e2:63:
29:3f:d5:9b:33:07:dd:35:76:ec:4b:aa:88:40:47:a4:5a:55:
6c:52:55:cb:12:d7:fa:95:da:46:5e:e9:74:f6:eb:44:c4:52:
4c:92:02:09:81:fb:6d:05:56:96:11:12:da:3e:64:9c:2e:d4:
7d:e4:fe:5a:cf:46:2b:cb:14:cd:48:ce:8c:5d:5c:05:ba:24:
a2:7a:50:82:be:92:b6:38:20:63:1b:9d:4d:05:e5:37:d0:37:
73:86:7f:38:13:e5:98:b8:27:96:7a:ab:ef:3d:94:c7:a9:ef:
d3:9e:05:ce:ce:70:5e:84:22:1c:1c:44:74:f5:19:09:4f:d8:
0a:64:e2:be:f0:c4:15:86:7c:d3:5d:77:ca:13:52:23:42:91:
68:60:5b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:59:29 2026 by rpki-client