
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ce2c6172-fcf0-3cb0-b63c-32da4a18dff8.roa
File: ce2c6172-fcf0-3cb0-b63c-32da4a18dff8.roa (raw, json)
Hash identifier: JCVPnLJiJnpaKUtrsodxjl84W3jppoI+theXgq09jDU=
Subject key identifier: 52:C1:C1:A9:5F:CE:E9:E7:A5:FA:DD:CD:F3:CE:F2:3F:A9:05:43:79
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D300AB2D5E8E1C098CDAF5E00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ce2c6172-fcf0-3cb0-b63c-32da4a18dff8.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 2604:2e87:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:b2:d5:e8:e1:c0:98:cd:af:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=b4ac49f9-bedd-4ac5-bf47-e15e106dbf0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:62:32:c8:71:f6:0e:5c:b8:66:0e:c0:8f:
60:af:df:02:36:e8:ed:07:6c:6a:66:dd:0c:09:4c:
68:84:f4:c9:d1:be:03:06:24:18:bc:2e:f9:88:00:
76:b2:4e:53:79:dc:02:16:f2:56:32:c3:ce:ec:37:
86:6a:f2:4d:18:5c:c8:58:a7:3a:7b:b5:02:25:1d:
5a:d3:4a:61:ed:89:88:65:a3:ec:83:00:ab:42:e9:
d6:1d:70:eb:ec:47:54:83:b7:00:73:ca:51:1a:4e:
74:29:84:bb:1e:a5:83:10:b4:b9:1a:e0:39:ff:5e:
eb:6c:b2:87:84:36:2d:7f:55:4c:ac:9b:8c:b4:89:
63:40:6b:b0:c4:a1:05:43:63:27:89:ca:84:f4:65:
dd:45:f5:d8:f1:65:bd:c5:d5:b2:39:73:62:84:ad:
b7:e1:ce:72:96:2e:46:85:9f:fd:29:d1:6e:05:dd:
ce:cf:01:d1:8c:aa:13:57:59:fd:07:ae:e3:1e:21:
a1:a1:71:88:e7:b9:88:2f:0e:2a:d0:3b:63:d5:4f:
63:ac:69:b9:c6:74:93:52:cf:d1:c3:da:d9:c7:00:
32:18:4c:d3:72:29:23:a3:f0:b6:3e:29:f1:5a:3f:
00:6a:9f:fc:0b:56:16:81:d7:6a:38:69:d6:db:08:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C1:C1:A9:5F:CE:E9:E7:A5:FA:DD:CD:F3:CE:F2:3F:A9:05:43:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ce2c6172-fcf0-3cb0-b63c-32da4a18dff8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e87:c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:e5:7e:6c:18:cb:6a:57:7a:37:9c:e1:5e:87:e2:fd:de:c0:
ef:47:9b:b6:d3:dd:9d:54:b0:eb:fb:cf:7e:b5:c5:c0:d8:3f:
94:ba:65:6c:8d:51:35:b2:e7:04:32:ca:a0:8a:e8:de:02:95:
d8:c2:3e:d5:0a:53:d1:5e:84:09:37:70:35:81:eb:5d:90:91:
2e:f7:21:dd:3f:96:78:17:3a:d1:4e:b1:ff:6c:58:10:13:54:
b0:b9:56:31:e7:9f:4d:d1:d0:4d:11:d3:b4:3c:d2:39:d0:31:
43:27:19:75:b6:22:52:a0:44:8f:84:b2:2a:3d:2f:ce:2b:34:
40:36:b4:2c:25:03:f8:41:c7:51:76:83:e6:72:ab:f0:1c:32:
7e:57:8d:ca:e9:54:7e:b8:82:75:ff:a6:b3:65:06:0f:19:37:
5a:bb:b7:69:71:25:c3:4f:ac:56:9a:0e:e3:de:74:24:c6:35:
74:a4:14:73:47:01:e8:89:d4:90:83:72:56:d5:88:d7:55:1f:
01:c1:27:12:8b:39:93:a5:be:4e:03:4d:04:cb:e0:d5:e7:b4:
c1:2a:62:9c:b2:74:62:6c:b1:8c:0a:62:86:35:bd:70:36:21:
90:f1:88:84:21:5a:97:47:13:38:9b:cd:1a:37:dc:00:2a:c6:
78:bb:3a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:15:08 2026 by rpki-client