
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ffbf4010-c3e7-3c05-a49c-0512ccb40ae7.roa
File: ffbf4010-c3e7-3c05-a49c-0512ccb40ae7.roa (raw, json)
Hash identifier: dCbBQdmWExlqUhhqMtl28PTCTJnXD+Sjq855zD28YTs=
Subject key identifier: 7B:68:17:83:06:FB:00:01:85:4B:6C:B5:02:25:E1:8F:B7:C1:24:B6
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D24DF8F3BFFE209B7630D47C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ffbf4010-c3e7-3c05-a49c-0512ccb40ae7.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 2604:2e8a:4400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:8f:3b:ff:e2:09:b7:63:0d:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=526b0f4b-a93b-4d14-9792-68e21c4d2c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:08:85:f3:2b:cf:02:c8:a1:7d:e5:0f:03:
4b:b3:9e:79:d6:cf:b0:e8:e3:99:92:5c:b9:1d:94:
91:ee:36:6e:92:ca:35:b5:eb:ac:34:1d:7e:d9:80:
06:d3:7a:12:3e:b2:4e:0f:23:3d:d9:c1:52:5d:39:
25:ef:77:86:42:87:36:66:46:db:e2:0c:d8:0f:fc:
51:46:e3:e5:31:ce:a9:3f:b7:5e:c1:20:19:95:3a:
e3:44:e1:71:74:b5:42:a9:e6:54:88:98:36:a5:9b:
e8:08:ad:49:4c:20:cb:9b:35:ba:63:67:4f:f5:a7:
33:32:31:6f:8f:f6:9b:64:3c:8a:e3:eb:0b:6d:e1:
22:df:31:4f:5a:5e:bc:9a:78:c0:ad:0e:59:77:02:
c0:34:bf:31:7d:92:a1:0e:d8:9a:c0:ca:3f:4a:1d:
1f:89:11:c2:0a:47:f4:ba:e2:ef:25:df:ed:5d:5b:
55:df:56:0e:b2:e0:1a:34:af:04:a2:ff:b8:a6:4f:
79:0d:e8:46:7b:6e:d7:c0:c8:d2:33:79:84:e8:75:
a2:bd:32:11:b8:9a:ee:bb:84:06:02:0e:b5:e6:04:
0a:8c:29:72:7a:71:00:10:d5:50:5f:46:08:ec:80:
d3:66:db:e5:6a:b4:bc:ca:5c:dd:65:10:c5:25:99:
da:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:68:17:83:06:FB:00:01:85:4B:6C:B5:02:25:E1:8F:B7:C1:24:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ffbf4010-c3e7-3c05-a49c-0512ccb40ae7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8a:4400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:27:ae:9b:10:b7:d0:bf:d2:cf:a5:8a:3f:14:18:7e:68:9f:
3d:1a:d5:a6:d2:e2:e4:2d:e2:21:87:88:3c:34:75:5f:32:2e:
90:55:7d:1c:8b:16:07:ac:eb:64:91:e2:80:44:a3:1b:c2:5a:
98:b4:8c:3e:df:c1:74:5c:75:3d:a5:d1:3c:1e:00:9a:64:53:
fa:7f:08:93:a7:8d:34:0f:28:2f:a7:15:24:91:bd:08:83:e6:
66:f9:4d:38:ee:60:46:9f:d6:42:4d:9c:f1:b0:32:1f:38:d3:
4a:20:2e:39:ef:26:6c:f9:f6:21:ae:61:32:f4:63:8b:09:75:
11:4a:e1:60:fa:74:ec:dc:54:e1:f0:b8:68:75:47:d9:bf:a0:
c4:98:d5:9d:c5:25:0d:8b:64:71:43:bd:56:3a:20:ce:e5:d7:
bf:df:b5:73:01:45:4b:4a:a2:ab:01:d5:6a:d7:ea:05:78:bc:
b5:bb:76:d1:85:58:13:b1:fc:9b:97:d3:93:34:43:53:d4:50:
ac:f0:79:96:84:0e:e0:d2:e7:bd:f7:20:18:07:e8:ce:68:8c:
db:13:bd:5d:86:d9:02:78:e0:a9:81:0c:c9:49:c2:02:a4:6c:
08:bc:5a:4f:8d:7d:ba:a5:c1:08:27:8f:37:dd:43:e9:13:5e:
ff:8a:3c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:49:07 2026 by rpki-client