
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/add0c7e7-5b7e-39e4-8438-78159023ff85.roa
File: add0c7e7-5b7e-39e4-8438-78159023ff85.roa (raw, json)
Hash identifier: wh53ijT4jgP0NZJpNqFuxDD7ld41piUMa6ilb0Pp0yk=
Subject key identifier: E0:8E:C9:B2:AD:5B:82:A8:D8:D2:75:80:81:9F:BE:B0:EF:E4:8E:9D
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D24E134E670106D2DC48E0A80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/add0c7e7-5b7e-39e4-8438-78159023ff85.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 2604:2e8b:a400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e1:34:e6:70:10:6d:2d:c4:8e:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=d1357f1c-e7f8-4340-818d-900d17094adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e5:f9:a2:67:39:7e:ba:e2:4f:68:f4:e3:e2:
d4:41:e0:cc:a5:09:50:0a:9e:0a:81:9f:51:68:36:
0d:c2:0c:22:c8:c6:db:9d:42:f2:43:c4:39:72:10:
43:b0:6f:07:2f:70:43:a0:d4:f7:1b:d0:29:d5:e4:
3f:98:02:5f:db:61:5c:0e:30:76:dc:fe:60:78:b9:
7b:b4:f3:8a:52:e7:4b:18:ac:1d:00:f6:8c:2f:98:
6c:50:af:c3:f5:cd:60:cc:09:4e:75:4c:ff:fa:6b:
2c:67:fa:35:24:8b:80:be:89:3d:cb:59:e6:c2:eb:
31:35:02:49:18:f2:bf:88:c4:14:66:a6:db:a4:b1:
60:96:07:1d:8c:52:68:1c:20:d1:05:84:e5:60:a3:
15:02:8c:04:d8:3d:3f:8c:e6:77:bf:bc:d6:78:54:
c1:e5:20:27:72:5c:0b:42:8b:84:23:fc:d5:07:3a:
09:41:9c:60:d9:3c:c3:92:36:97:c4:4f:8b:43:e1:
2a:8b:03:c8:4a:69:3b:35:6f:08:d3:10:d9:eb:1e:
02:5b:ff:ff:56:94:a6:3b:d1:9b:47:93:f6:4a:92:
86:b5:3a:55:d7:db:87:26:1e:a8:e3:25:d9:04:c4:
35:48:12:75:b0:b2:3f:73:71:8d:9c:3b:b8:22:bb:
7e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8E:C9:B2:AD:5B:82:A8:D8:D2:75:80:81:9F:BE:B0:EF:E4:8E:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/add0c7e7-5b7e-39e4-8438-78159023ff85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8b:a400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:06:6b:f8:07:94:ae:1e:97:d4:1e:1f:b2:65:d6:34:a0:eb:
fc:07:d1:5c:64:1e:bd:44:7b:29:84:14:db:9c:65:ef:9a:80:
0b:76:b3:08:6d:6a:e3:bd:36:dc:11:67:16:2f:40:2a:83:2e:
86:4a:0e:7e:da:b2:e5:02:d3:cb:bf:29:af:f1:c9:bd:27:47:
d4:70:0c:97:d3:17:29:a2:1f:ff:12:65:3d:e8:1a:6c:fb:54:
72:a3:94:ef:0e:30:dd:fc:70:b6:3b:d8:3f:8d:6e:74:4b:a6:
2a:c8:e3:fd:ab:99:ca:e2:ed:08:76:aa:b0:05:9e:51:2d:f0:
92:f5:0f:1b:0a:66:91:87:88:89:e4:ef:9e:51:36:ee:1c:cf:
cc:1e:60:05:f4:61:04:dc:ea:af:4b:1d:d2:89:46:f3:ad:10:
f9:c9:e3:92:b6:f5:ab:ba:d6:df:ab:27:1c:54:76:1b:28:e0:
a0:3e:d1:6f:16:ed:69:64:05:b9:95:bd:4c:30:2d:4a:5a:ae:
b3:bc:cb:76:f8:d2:30:06:f5:fe:23:96:73:01:e5:68:7d:5b:
ac:41:07:90:a8:c3:56:9e:47:d9:62:5e:91:8c:5f:a6:3d:62:
01:34:27:d7:59:33:62:54:6d:b1:a7:4e:56:4b:af:06:96:c1:
99:f6:31:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:23:40 2026 by rpki-client