
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11a586c8-5bff-36fe-842e-e0d88bd14507.roa
File: 11a586c8-5bff-36fe-842e-e0d88bd14507.roa (raw, json)
Hash identifier: TkjazZuabgyjoLGLWQ8ahziokM6o11TCikXTP8i3YIo=
Subject key identifier: 0B:42:61:E0:E2:A6:E9:27:76:90:20:E0:A5:49:9B:C7:86:D0:2B:AF
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584E043603E56599653F672BEC00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11a586c8-5bff-36fe-842e-e0d88bd14507.roa
Signing time: Sun 31 May 2026 13:00:10 +0000
ROA not before: Sun 31 May 2026 13:00:10 +0000
ROA not after: Sat 29 Aug 2026 13:00:10 +0000
asID: 30036
IP address blocks: 2604:2e89:5800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:04:36:03:e5:65:99:65:3f:67:2b:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: May 31 13:00:10 2026 GMT
Not After : Aug 29 13:00:10 2026 GMT
Subject: CN=fe9cea96-1ff7-4cf0-93db-54f6b8104f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:fc:a6:dc:f9:7b:07:c6:79:ea:f0:82:3b:
65:e0:a8:a6:e4:51:74:3c:86:b4:e9:f8:b6:53:7e:
92:74:c0:11:69:22:ad:9a:6f:03:2d:19:c4:77:6b:
01:3f:58:41:a1:af:96:05:d6:2d:5b:a1:f6:56:01:
06:db:0d:e3:e0:44:81:bc:26:66:cf:7f:62:e7:50:
d7:ab:87:c9:26:97:55:55:06:ed:1f:96:2b:6d:01:
4d:94:cc:1e:12:dc:23:08:a6:b6:44:e2:78:6e:fb:
47:42:32:15:f7:86:90:d1:57:c5:9f:5d:e5:0a:0a:
9b:34:7e:3b:d0:89:f6:9c:89:71:7c:86:a2:76:7d:
80:4c:89:53:3c:4e:bf:7d:f0:9b:73:6a:f7:40:b3:
d1:38:5f:54:ae:5c:0c:71:0e:43:66:7d:f6:85:22:
0e:de:07:fb:8e:94:03:ef:0b:32:0f:39:45:80:d0:
a6:f4:9d:1d:1b:94:96:1d:86:d0:f0:fe:e7:06:8a:
fb:64:18:23:4d:bf:10:90:09:a2:16:48:4e:ae:46:
a2:60:6c:ea:8b:2b:48:7d:ff:34:ac:95:12:d5:aa:
e8:49:c0:6a:7d:7b:64:f4:5b:f8:63:7c:d0:88:56:
5a:4d:71:b1:bf:3e:b6:e5:60:88:dd:fe:af:a5:49:
a8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:42:61:E0:E2:A6:E9:27:76:90:20:E0:A5:49:9B:C7:86:D0:2B:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11a586c8-5bff-36fe-842e-e0d88bd14507.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:5800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:c6:ba:3d:02:4b:94:97:ae:44:ca:20:47:ae:00:39:56:4f:
c9:f3:69:3a:9e:1a:49:16:ae:b3:54:07:53:04:71:fc:38:9f:
14:ed:5a:f0:e9:fa:c4:13:1a:e5:f5:c2:fd:08:5c:36:8d:7b:
a5:c4:6a:f2:4d:91:c7:a8:d3:d9:aa:51:80:68:d4:6b:31:25:
fe:8e:6a:f6:4b:83:7d:ff:e7:84:3d:bf:90:98:d7:8c:46:17:
51:d2:95:1f:93:70:7e:63:08:88:a4:f2:65:16:7b:f6:a9:d4:
d9:60:5e:8f:50:4a:61:06:6a:22:06:50:f9:3e:88:1c:c4:ea:
db:07:c9:f1:da:47:c1:15:e8:07:ae:d7:6b:96:bd:b4:50:d6:
29:c0:d5:28:22:04:5a:75:1d:4e:c6:fb:13:c0:da:93:69:d2:
4e:78:6a:06:fe:24:9f:1f:5e:e1:9a:f8:dd:e3:2a:0a:c6:9c:
a0:0f:8a:a1:2a:bf:30:84:91:1f:3e:4c:f8:ed:1a:98:bc:22:
d3:42:b3:09:57:91:a4:51:67:a7:4e:8a:74:68:37:39:d2:03:
f2:fe:bf:90:77:06:05:48:b7:7d:5d:27:cf:30:76:c5:7d:6b:
9e:45:c6:bf:3a:62:d4:04:c4:e8:cd:df:f6:cb:54:b1:77:63:
97:97:06:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:23:41 2026 by rpki-client