
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6c51d7d9-950a-39ec-858d-fa9905beea5b.roa
File: 6c51d7d9-950a-39ec-858d-fa9905beea5b.roa (raw, json)
Hash identifier: nBI7URcdheZT27AKyw36QiI+BpGdzLfGzQQaBBdCB7s=
Subject key identifier: DE:96:A8:1C:12:52:D9:0B:A8:71:F4:7A:05:5B:13:8E:53:43:E3:72
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D285B139FDBD35E4419B235B0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6c51d7d9-950a-39ec-858d-fa9905beea5b.roa
Signing time: Fri 13 Mar 2026 18:57:25 +0000
ROA not before: Fri 13 Mar 2026 18:57:25 +0000
ROA not after: Thu 11 Jun 2026 18:57:25 +0000
asID: 30036
IP address blocks: 2604:2e8f:4000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:28:5b:13:9f:db:d3:5e:44:19:b2:35:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 13 18:57:25 2026 GMT
Not After : Jun 11 18:57:25 2026 GMT
Subject: CN=1d96a560-0dbf-47ed-980d-aac80de52f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:2a:f4:3d:6d:95:a5:f3:52:61:c2:af:05:
cc:1b:4b:68:1a:ad:f3:1b:83:f4:11:ec:23:2e:cc:
38:5e:0d:92:49:fe:a3:9a:1e:9d:85:e3:29:d5:4d:
41:b2:8e:b9:5e:0c:67:02:0b:43:d8:32:c0:f2:98:
73:9b:06:6d:70:70:f4:17:a4:bc:52:08:a1:6e:bf:
63:ae:bd:f7:19:d6:00:a5:13:14:27:3f:c4:ec:d9:
5c:28:61:c8:76:c8:c8:39:ca:a3:9f:9b:a0:b9:5d:
1a:30:b2:b5:aa:e2:e1:70:37:0d:08:a6:8a:ab:7a:
f3:29:af:4c:53:4a:88:4e:91:76:d6:e8:8c:2a:ae:
d5:b6:fe:5f:23:b4:f3:4b:96:35:b1:82:77:a4:f8:
b1:cf:47:59:d1:32:97:13:0b:1f:00:bd:cd:cb:9a:
36:0f:ed:d1:00:40:16:51:dd:94:f8:82:49:4d:f6:
d6:c0:6f:1d:23:f8:80:39:b7:5a:9c:98:90:c3:fa:
ea:1f:6f:24:7a:b3:9c:79:54:10:25:ad:3f:e6:05:
4a:8b:a2:dc:38:f0:0f:c7:d2:a3:a6:45:ea:3b:92:
0e:d9:0e:5b:01:fa:3d:1e:03:b9:ba:95:50:a0:14:
c4:ae:26:55:44:5b:68:62:23:79:d1:94:31:6e:17:
03:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:96:A8:1C:12:52:D9:0B:A8:71:F4:7A:05:5B:13:8E:53:43:E3:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6c51d7d9-950a-39ec-858d-fa9905beea5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8f:4000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:cc:0c:b9:c1:a8:fc:fb:da:56:c7:01:a9:d3:c9:22:04:ab:
55:40:da:6f:8b:07:7d:d1:ad:f8:36:3b:32:6a:87:8a:69:bd:
d5:05:04:0c:11:9d:50:27:b3:2c:a2:5f:0a:81:e6:3d:7e:74:
28:c1:33:e7:18:95:1b:e6:8a:ad:e9:95:0f:50:cf:c9:1f:ae:
f6:e3:6b:19:be:c8:72:61:39:3c:1c:16:b4:e2:b5:4a:25:83:
70:5d:94:73:bd:94:47:ed:9c:ef:8a:29:37:5e:99:48:7a:42:
bd:a9:89:a5:13:31:0a:ba:be:c9:85:bb:31:b2:53:d4:64:64:
d0:04:4f:14:86:05:01:ae:f8:6c:3d:19:8d:2d:a1:ba:21:91:
2f:03:52:15:5a:30:53:93:72:63:f4:4a:33:bd:76:40:ac:28:
c9:71:d3:92:99:69:26:e5:91:e1:8a:c1:a2:a6:bf:56:af:1a:
27:78:16:94:7e:93:6a:cb:9e:4e:97:5d:3a:35:e6:94:ef:9c:
cd:bf:64:49:9c:c5:49:e9:04:da:b6:c0:91:55:50:5c:a6:30:
ec:a0:f3:f4:44:94:17:ad:c1:8c:8b:df:4d:d7:66:0a:c9:e0:
9a:64:c8:00:a9:a6:91:99:b2:d0:e2:c8:95:f3:e9:0c:f8:a3:
f7:31:63:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:32:13 2026 by rpki-client