
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8bb2c50-df52-3e31-9c9e-a84b635551b5.roa
File: b8bb2c50-df52-3e31-9c9e-a84b635551b5.roa (raw, json)
Hash identifier: QId881+bNP/Zbm8vK9bYqn70I4VvTcmIfekQJ6PCfDM=
Subject key identifier: D5:76:9D:2C:22:90:19:34:9E:67:25:B7:AF:73:4E:1F:AC:1C:FA:44
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D24DF65D93019778940042AC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8bb2c50-df52-3e31-9c9e-a84b635551b5.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 19905
IP address blocks: 2604:2e87:5c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:65:d9:30:19:77:89:40:04:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=5f794f5b-bc29-47ec-b48f-db2b8973ac89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:54:f2:f8:74:82:51:92:4a:12:a6:42:d9:
48:50:41:47:e5:ed:ea:17:3f:8a:62:40:d3:50:7f:
32:89:86:27:2e:07:04:ac:c0:8f:b0:4b:79:fd:44:
84:11:54:3e:34:31:f6:ca:94:a0:d2:3c:9b:9b:7c:
41:b4:b4:a8:55:b0:7c:4e:61:18:39:79:cf:5c:1b:
63:d5:07:41:b8:fc:a8:a0:71:46:e2:cf:aa:89:0b:
9b:5d:2f:e7:1f:ae:95:24:32:f0:2a:b2:06:a2:64:
bf:a1:e3:50:4c:ef:28:53:79:26:f2:f6:e3:e4:cb:
de:67:f7:17:6f:19:27:af:3b:d4:7c:5e:9b:3c:26:
0f:14:32:54:07:3d:c4:c2:2a:86:6f:b9:a1:3c:71:
2e:f1:3c:8e:38:ed:88:f6:c3:1b:0d:f8:79:73:05:
f1:54:44:b1:fa:30:0e:ee:21:d1:d0:41:9d:fb:de:
01:e5:75:a2:0c:c0:23:39:29:ee:b3:96:ce:3f:ab:
8c:f1:32:c0:cc:45:eb:c0:57:1a:be:db:80:c6:7f:
11:99:71:e8:3a:de:a9:57:c2:70:c9:65:1c:f5:09:
bd:0e:ae:9e:71:a6:6c:a5:db:c8:20:de:7b:7f:ce:
ed:8d:87:14:d6:eb:c7:37:38:f5:c3:78:99:2d:f8:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:76:9D:2C:22:90:19:34:9E:67:25:B7:AF:73:4E:1F:AC:1C:FA:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8bb2c50-df52-3e31-9c9e-a84b635551b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e87:5c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:e4:8e:ed:fa:bd:2c:75:0c:43:7e:f6:87:d2:f8:60:66:9c:
bc:75:e9:3b:b0:35:14:68:42:a6:5f:05:9d:04:af:d7:83:98:
55:8c:19:32:8c:8e:bf:b5:38:f0:ba:e3:2c:f0:77:c2:d0:fe:
08:04:19:ef:08:06:0c:64:60:66:6e:64:bb:ef:19:a8:54:1a:
54:6d:eb:39:b7:33:2d:6f:86:62:85:8a:36:c6:ef:33:b9:ba:
b2:94:04:65:7a:c4:42:7a:60:90:ff:f2:72:85:d9:07:1f:cc:
b7:a3:b4:81:df:2a:16:f9:29:f2:57:cc:dc:be:89:a4:a2:7e:
6f:cb:cd:46:a1:69:22:ca:2d:e1:85:30:b7:11:30:ab:28:ac:
ea:6c:79:5d:61:df:24:b3:d0:9d:34:7c:93:d9:c5:71:f8:0c:
9a:04:f3:07:e9:a5:83:1d:92:b8:cb:4e:b0:b1:d8:c7:f5:86:
0e:7b:70:09:90:d7:a0:db:42:e7:d1:2f:39:31:82:cf:28:be:
6c:62:66:94:cb:cf:28:20:54:a0:74:39:b3:ed:de:90:8b:e1:
8c:f0:0e:a4:f2:d6:f3:73:5e:5b:f4:c6:98:b0:21:3c:63:fe:
d6:f8:13:75:2d:12:52:a4:96:31:cb:32:ee:d8:a8:10:90:28:
cb:b1:47:c8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k32XZMBl3iUAEKsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
NWY3OTRmNWItYmMyOS00N2VjLWI0OGYtZGIyYjg5NzNhYzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlBU8vh0glGSShKmQtlIUEFH5e3qFz+KYkDT
UH8yiYYnLgcErMCPsEt5/USEEVQ+NDH2ypSg0jybm3xBtLSoVbB8TmEYOXnPXBtj
1QdBuPyooHFG4s+qiQubXS/nH66VJDLwKrIGomS/oeNQTO8oU3km8vbj5MveZ/cX
bxknrzvUfF6bPCYPFDJUBz3EwiqGb7mhPHEu8TyOOO2I9sMbDfh5cwXxVESx+jAO
7iHR0EGd+94B5XWiDMAjOSnus5bOP6uM8TLAzEXrwFcavtuAxn8RmXHoOt6pV8Jw
yWUc9Qm9Dq6ecaZspdvIIN57f87tjYcU1uvHNzj1w3iZLfh2hwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNV2nSwikBk0nmclt69zTh+sHPpEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjhiYjJjNTAtZGY1Mi0z
ZTMxLTljOWUtYTg0YjYzNTU1MWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh1ww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAB+SO7fq9LHUMQ372h9L4YGacvHXpO7A1FGhCpl8FnQSv14OYVYwZ
MoyOv7U48LrjLPB3wtD+CAQZ7wgGDGRgZm5ku+8ZqFQaVG3rObczLW+GYoWKNsbv
M7m6spQEZXrEQnpgkP/ycoXZBx/Mt6O0gd8qFvkp8lfM3L6JpKJ+b8vNRqFpIsot
4YUwtxEwqyis6mx5XWHfJLPQnTR8k9nFcfgMmgTzB+mlgx2SuMtOsLHYx/WGDntw
CZDXoNtC59EvOTGCzyi+bGJmlMvPKCBUoHQ5s+3ekIvhjPAOpPLW83NeW/TGmLAh
PGP+1vgTdS0SUqSWMcsy7tioEJAoy7FHyA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:46:13 2026 by rpki-client