
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/652049f2-61ec-3baa-99eb-2c279f5d8b4f.roa
File: 652049f2-61ec-3baa-99eb-2c279f5d8b4f.roa (raw, json)
Hash identifier: NT75ZyNI/k5T6nHSFUWdrnBXBTvC8J1ve00Qhy5YMZ4=
Subject key identifier: 18:9B:E5:02:9C:CD:FA:0E:48:71:B8:F6:2A:6D:A3:3C:0D:EB:3C:3A
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584DCAFB20638BDCF756FF1EAD00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/652049f2-61ec-3baa-99eb-2c279f5d8b4f.roa
Signing time: Mon 11 May 2026 01:00:24 +0000
ROA not before: Mon 11 May 2026 01:00:24 +0000
ROA not after: Sun 09 Aug 2026 01:00:24 +0000
asID: 30036
IP address blocks: 2604:2e8c:3c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ca:fb:20:63:8b:dc:f7:56:ff:1e:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: May 11 01:00:24 2026 GMT
Not After : Aug 9 01:00:24 2026 GMT
Subject: CN=345bba12-ace7-48fb-929c-a9b959946c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3d:b2:6d:8d:9d:b2:49:c8:8f:0e:a1:08:b0:
50:76:f9:9e:48:7b:3a:49:87:97:e9:14:42:eb:3c:
f8:62:a7:d8:fe:dd:ae:af:ab:85:a0:f4:eb:c6:bd:
5e:e2:01:c4:ec:0a:6a:c6:9e:a9:91:54:2b:33:74:
60:cc:15:7e:7b:60:f6:e0:04:7c:f9:72:99:e2:ef:
e2:77:5b:d3:b6:ce:7f:e1:d9:91:68:74:7e:a9:34:
bb:74:de:50:90:6b:44:33:33:43:61:3a:1d:de:56:
6a:92:4b:08:71:13:5d:36:dd:82:78:71:ef:4b:84:
94:66:0c:6c:24:23:7d:39:57:86:92:e5:63:98:a4:
80:7c:bb:56:83:04:f9:30:05:e8:4c:86:1a:c5:d1:
b5:c3:3d:3b:ff:8b:16:3c:1a:56:47:91:f8:e2:45:
80:dd:5e:f4:da:28:73:c1:99:80:53:6c:a3:ae:c8:
47:54:ae:57:4e:4f:6f:94:ee:17:ac:d2:69:0f:4f:
a7:bb:1f:9a:cf:05:b5:0a:01:e1:eb:d3:dc:05:bc:
40:cd:c4:2c:86:93:0c:cf:12:cd:4c:03:36:dc:b2:
4e:30:e2:d9:23:94:e1:a0:24:be:28:49:7f:af:dc:
a6:06:03:56:ce:b0:34:ba:05:1e:fb:12:ca:d4:95:
5e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9B:E5:02:9C:CD:FA:0E:48:71:B8:F6:2A:6D:A3:3C:0D:EB:3C:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/652049f2-61ec-3baa-99eb-2c279f5d8b4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8c:3c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:aa:c4:63:d6:56:41:5f:86:e9:96:f0:f2:c0:34:f7:5c:12:
2f:c4:e6:cc:7d:9b:c2:d2:0b:e9:a5:a1:34:57:2a:51:a5:dd:
6f:1f:2f:44:79:d4:bc:1e:78:c2:34:64:bd:11:22:fc:62:e5:
f9:98:df:aa:02:36:8f:31:c4:66:7a:f7:dc:83:e6:b5:74:96:
df:fd:ef:d7:fc:9c:7b:51:dc:71:e9:99:a3:54:ce:dd:f5:58:
11:42:1a:18:46:9b:fa:4f:bd:46:f8:14:f7:6a:34:54:fa:d9:
51:9e:cb:f2:df:30:04:eb:8e:29:35:64:7f:c6:b8:fe:00:ac:
8a:86:09:32:24:70:d1:6c:82:08:e5:41:ba:3f:b4:a9:1e:83:
88:17:79:66:b1:58:23:e2:58:83:57:f1:fe:45:1b:5c:1c:5e:
8f:93:07:ea:a6:f7:b0:8d:98:25:bb:af:7c:a0:ba:54:33:9d:
60:33:9b:b8:82:00:c5:c7:71:47:cc:03:62:fd:45:a0:9f:6a:
59:05:0a:76:f0:40:fc:c8:98:c9:78:d2:64:0d:28:c4:13:1e:
1e:5e:35:8f:47:fa:41:73:7d:5b:eb:f6:c2:0e:1f:dc:f7:3d:
4b:f5:01:17:4b:6b:30:d4:e6:75:c0:e4:0c:80:01:f1:b2:07:
e7:ff:c8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:24:53 2026 by rpki-client