
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/397d521b-1684-3ce6-b4d0-06ddc83d88e7.roa
File: 397d521b-1684-3ce6-b4d0-06ddc83d88e7.roa (raw, json)
Hash identifier: O4mAkjd4LWqCgPFKM79TfflbnS/sZnWVVRhYN+b4K5w=
Subject key identifier: F6:69:B5:16:B4:4D:7A:6B:8F:87:96:39:82:F5:B3:7C:09:8F:73:F4
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D39CF94F496E79BF2650B3F40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/397d521b-1684-3ce6-b4d0-06ddc83d88e7.roa
Signing time: Fri 20 Mar 2026 01:00:32 +0000
ROA not before: Fri 20 Mar 2026 01:00:32 +0000
ROA not after: Thu 18 Jun 2026 01:00:32 +0000
asID: 19905
IP address blocks: 2604:2e8d:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:39:cf:94:f4:96:e7:9b:f2:65:0b:3f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 20 01:00:32 2026 GMT
Not After : Jun 18 01:00:32 2026 GMT
Subject: CN=dea6c7a1-8c3c-419a-856e-65f6efccac0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:7b:6e:f1:c0:1f:3c:01:89:41:b5:8a:43:
be:cd:b0:62:5b:97:0b:6b:be:46:a8:ec:da:98:d2:
6d:b2:44:4f:4d:ea:db:98:4f:3c:40:d6:08:ab:3f:
9f:f4:c6:f0:ca:5f:27:3f:16:ea:3f:22:e7:de:47:
8f:51:51:10:cf:cc:c3:a5:2f:e7:88:f2:dd:0e:c6:
13:23:ad:b4:eb:b0:24:1e:3f:af:b9:28:78:91:d4:
97:61:7b:e8:53:7c:8b:6a:3b:0b:55:bc:20:72:07:
61:86:b1:bf:63:56:1e:ea:20:a0:e3:cf:23:61:93:
29:e3:9b:53:9c:ba:69:4a:2d:33:5d:20:d3:41:c4:
cb:7a:ce:62:d6:ab:18:03:eb:ac:1c:c9:bb:8c:ba:
80:9b:2d:55:c3:ec:38:48:8d:56:d3:ab:e7:7e:49:
a6:54:7c:d4:0b:5c:3b:43:9c:81:f9:79:36:ad:9e:
2c:ac:fd:e6:ee:cc:df:33:e5:40:81:18:e0:c3:4e:
ac:45:ba:d4:24:ed:8a:3d:ae:7d:b7:31:b7:70:fc:
13:f2:52:02:e0:6e:ea:d0:93:63:ef:ca:54:fd:bc:
0b:53:1f:4c:57:80:b5:85:cd:ab:d5:ff:80:c1:ed:
e6:74:3b:31:92:0a:6f:62:1b:5b:68:b2:11:95:55:
b1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:69:B5:16:B4:4D:7A:6B:8F:87:96:39:82:F5:B3:7C:09:8F:73:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/397d521b-1684-3ce6-b4d0-06ddc83d88e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8d:400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:6a:0d:7f:f4:39:d5:33:ce:57:5d:cf:aa:fc:85:a7:72:a2:
3a:bd:0f:d1:5f:7c:2e:12:c7:a7:42:d4:8d:61:93:06:9e:7c:
0a:1b:a0:44:39:ca:29:0f:b6:35:09:3a:ae:7a:da:d1:17:81:
e7:af:d5:07:0e:6f:c4:0e:21:07:d9:43:6c:20:b5:7f:19:0c:
7e:61:bc:b9:15:ea:49:76:f2:5f:c7:b9:5d:66:dd:84:25:a9:
5a:b1:96:60:be:81:68:fe:d9:fc:73:50:98:2f:bb:4d:0a:ff:
14:26:02:40:9f:28:c9:11:73:69:b2:d7:51:74:6f:71:32:67:
7f:be:15:9d:bc:7c:08:bf:b5:8c:40:e1:40:75:32:77:43:cc:
3e:35:b2:9b:80:f6:ac:13:7c:b9:a1:af:90:ad:5e:6f:32:b1:
96:89:72:13:11:c7:0b:4a:cb:8d:2c:92:9c:e3:5b:a3:2a:6e:
bc:59:70:e1:ac:fa:51:ca:51:fd:b3:6f:19:e7:6d:c8:3e:4a:
c2:c9:21:80:a8:09:80:7c:fd:63:ae:af:8c:f1:df:0c:d0:e3:
ce:77:60:d0:65:ac:a2:72:38:40:4a:67:c4:1c:11:cf:15:9a:
4e:86:10:16:e0:e3:c7:2c:cf:a0:3c:19:79:26:43:37:89:f5:
78:e0:c1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:11:44 2026 by rpki-client