
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b995c7-549c-38fb-bd7c-688d1fb7c72f.roa
File: 23b995c7-549c-38fb-bd7c-688d1fb7c72f.roa (raw, json)
Hash identifier: /yenwFRmIYaIjVi8i0zlmL9RweC9XTpNpDa61IMAwJ0=
Subject key identifier: 54:45:9C:2D:1A:3C:A9:2C:FD:EF:2A:8F:C3:5C:9E:24:B8:36:CC:35
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584E059C6C8E8F2189D7A45BD3C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b995c7-549c-38fb-bd7c-688d1fb7c72f.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 30036
IP address blocks: 2604:2e89:5c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:6c:8e:8f:21:89:d7:a4:5b:d3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=c80ee49d-901c-454b-bcab-af2464de3d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c4:9e:23:e6:26:cc:10:66:fc:8a:d8:08:45:
ca:4a:6b:83:07:da:cb:c5:e9:d4:74:53:47:d9:00:
53:23:75:59:0f:1a:f6:60:3b:7b:59:65:c1:ca:66:
0b:bd:c0:08:7a:3b:3d:d8:4a:3e:e6:68:06:02:a4:
13:20:6b:06:0a:32:df:b5:bb:cd:be:90:d5:7a:f0:
26:b3:8f:f1:b2:0f:a0:79:c4:12:97:1f:80:76:7a:
df:41:e1:b3:a4:70:ad:34:99:f9:ca:a3:5e:eb:06:
a5:fc:68:5d:f3:86:8f:d0:59:13:4c:3c:6a:77:ff:
4a:a5:95:a6:1a:20:93:e5:0a:9e:53:fe:e4:6b:03:
d0:e7:39:62:25:93:ed:4a:fd:66:47:e5:89:2c:ba:
ce:53:de:2d:96:f8:31:b3:b3:42:10:ee:20:df:8a:
32:e6:fc:f2:3e:9b:63:f6:d7:c9:cc:f3:d3:a9:5d:
df:f3:b5:d2:f0:c7:42:39:28:9b:39:a7:74:a4:69:
b1:87:04:22:ac:47:87:bb:78:c3:96:bf:4b:1c:43:
c0:52:0d:bf:23:4f:6e:67:41:bc:c8:3a:ef:7c:91:
5c:36:46:b0:cf:a9:06:71:ca:5c:66:9e:d6:3c:1d:
62:9d:74:5f:88:e3:9e:cb:01:53:a9:a6:e2:42:0d:
06:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:45:9C:2D:1A:3C:A9:2C:FD:EF:2A:8F:C3:5C:9E:24:B8:36:CC:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b995c7-549c-38fb-bd7c-688d1fb7c72f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:5c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:77:ef:4f:56:e3:e2:55:c0:78:98:09:64:9c:b1:05:12:1a:
75:80:11:99:2c:59:b8:26:9e:b7:c0:70:d8:b3:62:87:39:af:
eb:11:fe:19:6f:d2:41:cc:6e:a6:e2:11:71:c2:00:8b:d0:4d:
0e:ab:34:59:ba:45:f8:d2:10:75:68:7d:e4:a4:f4:6a:9e:91:
fa:4d:6d:6a:b1:cc:49:c1:f1:65:e9:d5:8d:e9:61:11:46:05:
be:0c:aa:72:1f:16:2b:6f:b6:88:05:1c:24:55:91:6e:80:93:
7d:d9:3d:09:64:58:92:1d:46:5c:df:99:4e:81:e2:15:89:f5:
31:15:ff:8d:aa:32:5e:72:d4:aa:a8:f0:74:f0:50:99:cc:8e:
14:e3:36:0c:1f:c3:e4:01:42:d1:c0:f7:00:73:9c:fd:fa:e7:
2e:20:67:85:c8:0c:d0:52:40:25:20:68:10:69:00:43:90:89:
12:d3:1f:3c:f0:4d:ab:e8:14:69:67:90:fe:ab:c8:84:8c:f4:
24:79:d3:58:f0:04:cd:00:54:5b:5d:69:86:70:3c:f8:07:03:
e5:a5:c9:61:ca:0c:8c:f0:20:76:d0:08:24:22:f2:6e:0c:a2:
dc:e4:99:c2:c4:e6:14:ad:e6:d6:1e:54:93:3e:29:b3:b7:da:
09:6c:7e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:46:25 2026 by rpki-client