
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9e5918d-966b-3aca-87cc-4453ccc23cd6.roa
File: d9e5918d-966b-3aca-87cc-4453ccc23cd6.roa (raw, json)
Hash identifier: B8MjYHAj1oc9buGuk9Mk69ZkxW0dlXLTrFFim6/ytdA=
Subject key identifier: 07:62:C9:0D:49:5A:42:0F:51:0C:E7:FE:75:7D:3A:BE:F4:8E:4E:A4
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D27AA28E4328E3741D542CCA0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9e5918d-966b-3aca-87cc-4453ccc23cd6.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 2604:2e88:d800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:28:e4:32:8e:37:41:d5:42:cc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=650e22ca-87e3-4437-94e6-02ec1b7645af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:ec:40:a7:e5:67:52:15:60:34:f7:92:49:
99:e6:61:e8:05:e9:e8:f2:65:31:e8:2f:89:a7:b0:
9c:19:fb:10:20:e4:68:f7:65:54:45:d2:aa:67:6b:
de:85:ea:88:d4:2d:4c:ab:b9:3d:0f:6a:78:cd:e7:
2c:e0:53:f0:4b:fa:07:38:3c:7f:82:b7:62:1d:51:
e0:fe:66:1c:64:ca:16:e8:e7:d1:cc:9e:17:01:59:
8b:9c:d1:99:8e:92:36:fd:2e:9f:a4:da:b1:6a:ad:
6e:c0:d2:bc:41:03:42:56:d7:62:03:3a:98:c2:80:
86:cb:5b:2e:78:cd:78:de:90:c7:13:21:89:5e:07:
ce:21:dd:4d:91:5e:4a:73:63:5c:2f:33:e3:0b:e8:
43:21:9b:c0:3a:50:b9:db:d3:24:8b:00:6c:c7:53:
8d:d0:fc:98:fb:95:48:63:fd:8b:9b:98:e8:81:d5:
0f:25:28:ff:08:8b:56:70:70:97:13:c8:cd:fc:46:
a5:4d:58:b0:bf:48:de:cb:d8:ec:a4:a1:cb:eb:57:
4d:22:dd:b2:42:44:09:82:00:37:dc:04:a9:6f:c9:
0d:79:0b:a6:8d:f2:74:08:01:66:b6:78:2c:9e:02:
93:54:38:7b:88:94:45:7b:c6:62:df:0d:20:78:51:
e8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:62:C9:0D:49:5A:42:0F:51:0C:E7:FE:75:7D:3A:BE:F4:8E:4E:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9e5918d-966b-3aca-87cc-4453ccc23cd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e88:d800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:2a:21:50:0b:62:7d:56:42:34:c1:d6:f1:b5:57:e5:9c:77:
a5:16:6d:42:f3:29:e5:d2:58:bb:35:a0:0b:83:5e:70:00:79:
fe:c6:59:52:e9:f6:f6:d8:77:37:b4:6c:d1:17:b9:6b:26:b1:
41:7e:29:48:75:55:70:7d:e7:02:d2:f8:0e:be:01:69:35:3f:
d9:e3:c2:c1:a1:67:7d:80:ba:df:a1:46:d8:ba:4e:ef:29:ea:
9e:29:5d:bd:54:6e:d9:b3:1c:37:10:c1:ac:6b:9b:fe:75:e5:
27:10:a4:93:ee:aa:82:49:10:0e:03:ed:4f:de:50:25:f8:44:
7f:7a:d2:53:dd:2f:20:3a:f4:ae:6b:06:c7:28:a5:b7:fd:7c:
22:fd:85:11:e2:ae:de:e5:2d:4b:e3:95:9d:46:ce:e6:10:d7:
25:81:29:1a:be:bd:98:6a:55:49:ab:fd:36:6f:41:1d:bb:d2:
7c:c1:92:55:1a:d6:1e:7d:9c:d7:f4:86:37:c4:46:47:7a:5c:
1e:17:41:34:d2:2a:06:c1:6b:e3:fc:b8:74:3e:dc:b2:52:66:
bc:9d:c0:1e:5c:e0:d0:5a:c3:34:ad:05:b3:97:a6:ec:8c:6b:
96:fa:ee:de:09:44:67:a8:4c:ef:82:65:29:f0:e3:b5:9c:99:
12:e9:3b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:43:35 2026 by rpki-client