
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f2033f1-0354-3736-81c7-6243ab600dbe.roa
File: 5f2033f1-0354-3736-81c7-6243ab600dbe.roa (raw, json)
Hash identifier: WxQc8kQ8M48RvpXRy1UXe+1mYB+zCFpbDe2g3/bW58k=
Subject key identifier: 98:FA:89:A4:CD:6D:AD:68:F5:F9:FF:3C:9D:31:E8:47:8E:CD:9A:0C
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D24DF6BA08EBC3EC79D1FBAB8
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f2033f1-0354-3736-81c7-6243ab600dbe.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 2604:2e8c:b000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:6b:a0:8e:bc:3e:c7:9d:1f:ba:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=430743c7-03c4-48e5-b396-4b66ab448911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:9b:17:14:72:a6:3c:72:3e:5f:0b:ca:ad:
6f:2d:4c:80:f4:37:25:d8:73:8a:21:f3:c7:b1:82:
37:a4:a8:dd:50:6b:27:b5:97:b7:a6:36:e2:9e:26:
a9:03:da:69:95:80:12:49:c0:28:7a:31:0e:84:1a:
79:2f:4c:b4:79:fe:13:aa:57:66:3d:1a:23:4d:1c:
65:78:72:6d:00:55:dd:ab:51:c6:50:c7:c8:82:04:
d8:87:29:be:62:cf:a2:39:2a:14:f2:17:b5:7f:dc:
e9:25:e0:a9:5d:3c:2d:24:6d:9f:e2:c9:fe:45:bd:
86:d5:bd:e1:5d:ae:85:11:c2:41:9d:4c:04:b3:eb:
65:ff:0f:78:96:f6:12:68:2b:84:31:76:39:92:d8:
ea:4b:2e:38:4a:78:b8:34:24:1a:7c:b6:b0:9c:5e:
d6:42:b6:d8:20:1a:bf:43:eb:a0:63:bc:1c:bb:c3:
e3:8d:0e:18:a3:52:89:1f:25:18:a9:43:73:3e:47:
53:49:e2:93:1a:f9:66:77:52:ee:f6:45:dc:1c:d2:
c4:4a:77:6a:a8:1d:b0:ee:38:fa:cc:da:87:d3:aa:
78:b7:9b:63:a3:83:d4:4d:65:80:8a:20:46:92:ae:
fb:e0:ff:98:f5:0b:d9:27:0d:86:b4:11:60:43:67:
17:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FA:89:A4:CD:6D:AD:68:F5:F9:FF:3C:9D:31:E8:47:8E:CD:9A:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f2033f1-0354-3736-81c7-6243ab600dbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8c:b000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:71:2f:be:9b:70:38:9c:c5:65:c4:c6:60:e0:f2:7b:e7:20:
6e:96:4f:40:f0:5c:06:38:6f:f4:8d:70:4e:09:7c:77:55:33:
bb:eb:52:d4:89:60:e2:3a:b3:df:61:fb:d7:1f:fc:e4:00:86:
66:9a:84:15:8b:01:4f:ae:52:86:4b:3f:51:01:e5:63:b4:b6:
19:87:d0:ce:41:0c:b1:56:21:71:eb:8a:0f:75:aa:18:c3:05:
d1:c7:63:a8:52:79:dc:df:7c:26:e8:d8:df:48:4a:c7:1e:71:
34:b4:c9:c2:68:2d:68:85:4f:62:58:69:a9:7e:4a:44:e9:5f:
ce:63:97:b6:a6:71:45:2b:66:79:2d:48:9a:b2:5f:6a:b8:a8:
22:fb:3f:f2:40:1c:c5:5f:a1:d2:2d:e8:76:3c:83:15:13:a7:
99:6b:f8:b6:c7:ef:ab:06:90:68:52:db:16:67:54:3e:f3:a2:
cc:fb:42:8a:16:cc:b0:bc:74:55:a4:20:d2:2d:55:f9:c0:51:
84:4f:f4:b3:83:ee:04:76:2c:bd:2f:12:d8:e3:5a:e9:84:49:
24:0e:28:ea:c1:ae:6a:91:1b:ce:05:c7:86:92:73:60:89:ce:
ce:8c:50:af:07:5c:69:ed:47:4f:27:49:0e:93:10:8a:64:a9:
be:d8:33:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:07:23 2026 by rpki-client