
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/432f4ef6-7d4a-3b66-8fdf-271e527a884f.roa
File: 432f4ef6-7d4a-3b66-8fdf-271e527a884f.roa (raw, json)
Hash identifier: fZsNbwSy85WEQEHZAU/YAtV2ik5IXxyvO+klsTgst/o=
Subject key identifier: 7A:DB:E0:BD:6B:42:F1:87:3D:1F:EF:36:2C:41:7C:B4:B3:75:B1:8F
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584E04361768E598F147B884A780
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/432f4ef6-7d4a-3b66-8fdf-271e527a884f.roa
Signing time: Sun 31 May 2026 13:00:10 +0000
ROA not before: Sun 31 May 2026 13:00:10 +0000
ROA not after: Sat 29 Aug 2026 13:00:10 +0000
asID: 30036
IP address blocks: 2604:2e89:4000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:04:36:17:68:e5:98:f1:47:b8:84:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: May 31 13:00:10 2026 GMT
Not After : Aug 29 13:00:10 2026 GMT
Subject: CN=33181421-f55d-4b85-8a96-e795e7b432f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:8d:53:0c:01:4b:72:76:c1:32:af:b1:d4:
2f:48:20:10:09:69:7e:16:26:3b:bf:73:c9:1f:44:
0c:36:47:05:42:dc:aa:cc:5a:22:82:80:8f:cc:c7:
d1:9e:95:36:89:7a:92:d8:0d:f9:3c:c3:c6:ff:bf:
fd:59:80:08:4d:5a:ef:fb:6a:b8:73:2e:07:49:1f:
9e:c3:1f:4c:1a:94:12:89:68:e3:33:88:b9:26:79:
9d:60:aa:ba:9f:c6:c9:d9:ca:3f:3e:f0:dd:bd:d7:
98:de:42:b6:52:23:55:d5:1d:eb:eb:3c:d2:1a:41:
aa:34:b0:ce:98:6e:24:50:02:d9:e1:92:00:c9:b3:
af:be:b3:4e:24:5a:68:b8:96:a5:dd:78:4e:5b:9c:
19:3d:1f:52:67:70:66:e1:ca:d3:57:63:0c:0b:2e:
0e:fe:ad:eb:1b:04:32:1f:b2:8f:8d:67:60:2b:62:
fb:cc:7f:9b:78:64:9a:3d:09:66:bd:4c:ce:9d:f7:
21:b3:18:d1:c0:92:de:22:04:f6:c6:3e:01:4d:27:
77:3e:b6:79:11:31:0c:cd:69:68:e1:48:f2:e2:ff:
68:68:52:1f:3f:d3:e6:19:e7:09:ac:06:ec:d9:c9:
15:85:6d:e8:f1:83:17:63:b6:95:2d:85:b7:fe:0c:
3d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DB:E0:BD:6B:42:F1:87:3D:1F:EF:36:2C:41:7C:B4:B3:75:B1:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/432f4ef6-7d4a-3b66-8fdf-271e527a884f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e89:4000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:33:60:ff:d3:aa:72:b2:d5:70:ef:2f:64:1c:89:f6:76:7c:
60:18:c1:d6:a2:dc:6c:52:2f:81:05:a7:82:01:36:87:45:29:
86:8b:9a:41:fb:1d:d2:30:2c:c5:b8:d3:8d:e4:8a:32:00:db:
16:ec:54:f4:71:55:3c:10:59:ca:87:32:2f:df:38:d1:7d:72:
f2:a8:62:40:e5:d1:51:7b:c8:77:ff:81:74:36:3d:97:77:2e:
f6:bb:ab:28:96:57:47:a2:f0:23:33:3b:bb:85:46:9b:f0:63:
b8:d3:4f:56:51:fa:a0:3e:15:9f:cf:bd:87:e5:9a:41:b9:6f:
da:d6:1c:b8:46:b1:eb:f8:e0:13:c5:07:11:06:af:da:f6:7d:
61:0b:4f:34:be:2f:e0:4f:47:46:a0:45:24:61:a5:b2:5e:be:
4a:72:f8:13:24:cc:c9:f1:51:5e:bb:70:f6:d8:9d:37:8f:f3:
d9:09:41:5f:94:e0:af:8a:c9:1e:05:f4:c8:7f:1a:79:7f:28:
6b:c4:af:b6:03:09:18:21:18:b0:a9:43:23:98:49:d1:2e:7a:
a3:ea:82:f0:96:7a:a3:b4:d7:44:c8:e4:5e:81:1d:61:d0:d3:
0c:3a:6f:75:82:4d:68:98:a7:f4:a1:69:0c:5b:92:14:8a:7c:
af:c8:d0:ac
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4ENhdo5ZjxR7iEp4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
MzMxODE0MjEtZjU1ZC00Yjg1LThhOTYtZTc5NWU3YjQzMmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ2NUwwBS3J2wTKvsdQvSCAQCWl+FiY7v3PJ
H0QMNkcFQtyqzFoigoCPzMfRnpU2iXqS2A35PMPG/7/9WYAITVrv+2q4cy4HSR+e
wx9MGpQSiWjjM4i5JnmdYKq6n8bJ2co/PvDdvdeY3kK2UiNV1R3r6zzSGkGqNLDO
mG4kUALZ4ZIAybOvvrNOJFpouJal3XhOW5wZPR9SZ3Bm4crTV2MMCy4O/q3rGwQy
H7KPjWdgK2L7zH+beGSaPQlmvUzOnfchsxjRwJLeIgT2xj4BTSd3PrZ5ETEMzWlo
4Ujy4v9oaFIfP9PmGecJrAbs2ckVhW3o8YMXY7aVLYW3/gw9+wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHrb4L1rQvGHPR/vNixBfLSzdbGPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDMyZjRlZjYtN2Q0YS0z
YjY2LThmZGYtMjcxZTUyN2E4ODRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiUAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASjNg/9OqcrLVcO8vZByJ9nZ8YBjB1qLcbFIvgQWnggE2h0Uphoua
Qfsd0jAsxbjTjeSKMgDbFuxU9HFVPBBZyocyL9840X1y8qhiQOXRUXvId/+BdDY9
l3cu9rurKJZXR6LwIzM7u4VGm/BjuNNPVlH6oD4Vn8+9h+WaQblv2tYcuEax6/jg
E8UHEQav2vZ9YQtPNL4v4E9HRqBFJGGlsl6+SnL4EyTMyfFRXrtw9tidN4/z2QlB
X5Tgr4rJHgX0yH8aeX8oa8SvtgMJGCEYsKlDI5hJ0S56o+qC8JZ6o7TXRMjkXoEd
YdDTDDpvdYJNaJin9KFpDFuSFIp8r8jQrA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:47:40 2026 by rpki-client