
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cc30649c-b251-3139-b62a-29c20d83ee27.roa
File: cc30649c-b251-3139-b62a-29c20d83ee27.roa (raw, json)
Hash identifier: Zyl0W3psCI77KDpx9N4YbLmeUxDujXoQV4f/L44zoBM=
Subject key identifier: C1:F1:64:BF:B6:86:A1:99:FB:D6:88:AC:01:B8:07:8E:18:A9:2F:E9
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D386A3CCBB1DCE89DEECAA3A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cc30649c-b251-3139-b62a-29c20d83ee27.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 30036
IP address blocks: 2604:2e8d:c000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:3c:cb:b1:dc:e8:9d:ee:ca:a3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=d72445e9-d962-4850-b60a-65fc4376cdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:43:8a:4d:c5:10:33:19:a8:61:87:35:20:
21:3e:91:7a:f7:06:90:4f:93:9c:6d:42:25:e6:47:
b0:8c:67:c0:80:64:ad:32:58:9c:cb:e3:87:37:c2:
09:78:e0:3d:71:23:54:09:8c:d4:1a:ac:f6:96:7a:
e9:fa:23:f8:c7:7d:d9:6d:0c:2e:45:91:cb:59:cb:
0d:89:ef:71:ff:c3:62:fc:05:6b:39:e8:ff:3b:3d:
1f:d9:1c:de:2e:43:1c:71:85:22:18:21:f8:0e:ad:
45:f4:c3:60:86:88:37:da:e2:ab:01:3b:29:ba:1f:
99:f8:82:16:a1:67:ef:7a:0b:9a:d5:d1:33:37:08:
1a:fc:cc:d7:b3:97:7e:0e:a6:31:75:c0:52:e9:2f:
c8:0c:1e:70:d6:58:c4:b1:34:32:ff:cc:b2:30:b4:
ac:e6:d3:7a:f2:77:f8:d9:81:0e:22:1e:c4:bf:b5:
db:7c:b9:64:75:27:dd:56:f8:cc:51:96:50:12:a9:
8c:b2:26:49:13:42:63:48:47:9b:1c:25:dd:d2:c5:
bd:97:38:df:6b:1c:c6:04:bb:74:88:3c:fe:26:40:
6c:ae:4e:56:9d:a1:2c:6d:17:68:d2:62:70:2d:52:
f1:ef:bc:50:ba:87:4a:67:bc:3b:95:82:6a:e9:d5:
c8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F1:64:BF:B6:86:A1:99:FB:D6:88:AC:01:B8:07:8E:18:A9:2F:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cc30649c-b251-3139-b62a-29c20d83ee27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8d:c000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:a9:ab:77:50:82:12:52:6c:d3:41:0b:87:35:c5:8f:f9:e4:
55:90:0f:89:6b:76:15:0f:f2:45:ad:0e:a7:bf:c0:23:92:79:
e0:f4:0f:40:f9:66:f9:5f:71:f2:a3:6f:cc:61:e5:84:8d:23:
f3:a6:b7:51:c7:8b:f4:01:21:23:b8:ce:9b:80:07:e6:b7:67:
9e:69:1f:f0:e9:26:92:31:eb:ba:e7:73:b4:45:74:a2:fa:ef:
c4:e7:23:84:32:eb:25:92:39:b2:c0:b2:5c:1e:57:d2:98:52:
d1:33:18:34:13:37:9a:b1:88:00:83:ae:36:4a:99:da:d0:94:
a1:2c:65:8a:60:56:98:30:58:3f:92:12:ac:88:d8:aa:93:22:
4a:d2:1d:9d:9f:88:a7:fd:21:61:3c:83:9b:95:20:a7:d8:4b:
af:23:91:5c:b7:cd:62:c0:78:68:1b:16:7d:b0:7e:fa:6c:5b:
1a:47:ac:57:c7:f9:ea:46:45:85:ae:42:6b:ef:d5:0d:bb:16:
86:0d:60:91:71:bb:20:74:6e:4d:4d:d7:bc:a8:c5:fa:81:8f:
5e:d5:d2:e5:69:1c:5c:c8:64:33:e2:8d:41:61:04:85:e0:72:
76:fa:29:a2:41:77:21:c1:90:26:0d:4e:ae:f5:e0:de:e9:45:
0e:63:98:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:44:04 2026 by rpki-client