
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b117c306-52b7-3468-abd9-0f8481488358.roa
File: b117c306-52b7-3468-abd9-0f8481488358.roa (raw, json)
Hash identifier: Oho5UqRg1zdzXcHWspi9GP9zjM5DUpc+zZvPLXiDuTo=
Subject key identifier: 22:04:1D:82:79:B6:71:C0:94:58:99:8D:5A:90:88:E2:19:A5:2D:DA
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D3F6502D44939366EDE7C8400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b117c306-52b7-3468-abd9-0f8481488358.roa
Signing time: Sun 22 Mar 2026 01:00:32 +0000
ROA not before: Sun 22 Mar 2026 01:00:32 +0000
ROA not after: Sat 20 Jun 2026 01:00:32 +0000
asID: 19905
IP address blocks: 2604:2e87:7400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3f:65:02:d4:49:39:36:6e:de:7c:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 22 01:00:32 2026 GMT
Not After : Jun 20 01:00:32 2026 GMT
Subject: CN=aae2e365-ba67-4688-a71c-502096e849ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a4:eb:86:c5:1c:36:cb:94:ec:cb:e0:5c:c3:
ec:3a:40:6c:46:8b:d1:37:30:5d:83:d9:74:6e:10:
b8:e4:46:ec:87:9d:07:92:12:79:3b:fc:12:a1:f4:
64:b8:08:e2:84:34:df:f3:90:51:c3:bb:d1:90:fa:
6a:cb:e1:f8:76:d6:4b:72:16:6e:ed:dd:32:82:41:
5f:df:1d:08:b9:02:fc:69:44:60:16:09:bf:b5:31:
57:c0:64:2b:ad:07:8b:20:ba:31:1b:a6:9c:2a:9e:
75:b7:db:c6:83:c5:3f:c0:79:b6:c7:f6:36:54:62:
4a:8c:70:89:18:a2:30:83:16:d2:90:10:ae:f1:44:
bc:71:cc:13:31:4f:60:f4:c1:c5:2f:1b:e3:5e:6f:
a8:40:07:89:f0:23:3c:86:f0:3d:68:97:34:90:e9:
01:b0:89:8e:51:5b:ad:43:4c:bf:99:5b:07:cb:ff:
12:1d:48:9d:6a:36:3a:d5:a1:bc:e3:96:77:70:7c:
94:f8:71:ee:b2:21:19:d1:69:e2:6a:d1:88:e3:93:
9e:3d:a9:94:d8:c5:ed:f0:97:f8:0f:12:81:79:85:
a1:c7:c8:d2:32:84:44:ea:46:5a:eb:fc:05:87:b7:
9a:cc:de:7b:8b:47:3f:b6:19:7c:95:69:92:23:0b:
72:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:04:1D:82:79:B6:71:C0:94:58:99:8D:5A:90:88:E2:19:A5:2D:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b117c306-52b7-3468-abd9-0f8481488358.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e87:7400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:04:01:08:12:cc:18:4f:c2:63:d8:4a:04:f4:96:4e:61:86:
3e:11:bd:bd:2f:df:8d:eb:04:fc:26:ed:3e:2d:5e:d9:8d:70:
d1:c1:11:f0:c5:d1:2d:1f:40:1f:c8:08:fb:15:fa:b0:2b:56:
8d:1a:1b:06:01:8d:71:10:bc:58:a3:ad:4c:06:5c:0b:d0:bb:
39:9f:2d:bf:df:4e:44:f4:62:d7:a9:17:b7:d1:63:e4:87:fa:
0c:92:0f:95:40:8d:76:8c:64:9e:5b:a4:e9:b3:1c:19:45:ea:
b4:98:f6:78:1b:1f:45:66:6a:44:6f:09:ee:ea:79:55:02:c1:
b9:98:7b:f2:ed:39:6f:ab:6e:9d:ac:39:3e:26:5e:f4:a0:49:
6c:6a:b1:38:09:3e:8d:d1:1a:a7:7a:bf:d8:0a:57:1a:2b:e4:
71:f7:ce:58:58:a9:d7:5d:f3:29:e0:b3:5e:ee:7f:ad:af:33:
d3:f4:2f:bd:04:63:e5:17:2a:dd:8c:ee:b3:32:6a:fa:64:08:
04:18:59:7f:49:45:49:bf:05:cf:d1:8d:d9:16:93:aa:61:6a:
ad:8d:e7:3f:ac:fb:1c:ae:ec:0d:aa:e0:6e:82:51:11:0a:28:
3b:d8:43:ee:56:18:f2:c2:18:d8:0d:73:6b:fe:2f:41:f7:3c:
83:02:a1:a2
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0/ZQLUSTk2bt58hAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk
YWFlMmUzNjUtYmE2Ny00Njg4LWE3MWMtNTAyMDk2ZTg0OWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaTrhsUcNsuU7MvgXMPsOkBsRovRNzBdg9l0
bhC45Ebsh50HkhJ5O/wSofRkuAjihDTf85BRw7vRkPpqy+H4dtZLchZu7d0ygkFf
3x0IuQL8aURgFgm/tTFXwGQrrQeLILoxG6acKp51t9vGg8U/wHm2x/Y2VGJKjHCJ
GKIwgxbSkBCu8US8ccwTMU9g9MHFLxvjXm+oQAeJ8CM8hvA9aJc0kOkBsImOUVut
Q0y/mVsHy/8SHUidajY61aG845Z3cHyU+HHusiEZ0WniatGI45OePamU2MXt8Jf4
DxKBeYWhx8jSMoRE6kZa6/wFh7eazN57i0c/thl8lWmSIwtyCwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCIEHYJ5tnHAlFiZjVqQiOIZpS3aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjExN2MzMDYtNTJiNy0z
NDY4LWFiZDktMGY4NDgxNDg4MzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh3Qw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAYwQBCBLMGE/CY9hKBPSWTmGGPhG9vS/fjesE/CbtPi1e2Y1w0cER
8MXRLR9AH8gI+xX6sCtWjRobBgGNcRC8WKOtTAZcC9C7OZ8tv99ORPRi16kXt9Fj
5If6DJIPlUCNdoxknluk6bMcGUXqtJj2eBsfRWZqRG8J7up5VQLBuZh78u05b6tu
naw5PiZe9KBJbGqxOAk+jdEap3q/2ApXGivkcffOWFip113zKeCzXu5/ra8z0/Qv
vQRj5Rcq3YzuszJq+mQIBBhZf0lFSb8Fz9GN2RaTqmFqrY3nP6z7HK7sDargboJR
EQooO9hD7lYY8sIY2A1za/4vQfc8gwKhog==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:46:56 2026 by rpki-client