
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6b66477f-cb0a-34b7-aacd-a04e267cc478.roa
File: 6b66477f-cb0a-34b7-aacd-a04e267cc478.roa (raw, json)
Hash identifier: K7vlaE7Y7urn8092AbcddXQuhLLtLQRq+52ZV/HOYBA=
Subject key identifier: CA:60:B3:FE:CE:E7:8F:CA:32:22:FB:AE:71:AD:6F:41:BC:89:C2:3C
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584CA32CFBCDFC46E725A4534D60
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6b66477f-cb0a-34b7-aacd-a04e267cc478.roa
Signing time: Sun 25 Jan 2026 02:00:31 +0000
ROA not before: Sun 25 Jan 2026 02:00:31 +0000
ROA not after: Sat 25 Apr 2026 01:00:31 +0000
asID: 30036
IP address blocks: 2604:2e8f:ac00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a3:2c:fb:cd:fc:46:e7:25:a4:53:4d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 25 02:00:31 2026 GMT
Not After : Apr 25 01:00:31 2026 GMT
Subject: CN=86875e18-1b96-450f-a081-8401e49f691e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:56:ca:20:c3:7c:f7:6d:85:21:12:d5:4a:01:
ad:a3:f2:a4:b2:ed:c2:b0:61:3a:9d:47:e7:22:3c:
a7:f0:37:b9:d9:08:9d:48:70:5d:e5:cc:f9:9d:6f:
27:55:83:3d:16:8a:7e:b2:cf:95:fd:b7:62:46:c3:
f6:77:bc:84:c2:25:0a:9f:97:40:ae:08:20:66:41:
0e:f6:0a:dc:ff:bb:35:db:db:ee:2b:e6:4c:bb:68:
01:5b:78:69:a8:a7:5f:e7:59:6e:9e:a0:49:93:74:
a4:85:4b:a6:06:ec:06:6d:6d:4c:40:0b:61:0d:9c:
d9:f2:0f:32:ac:e8:72:01:d6:e2:d6:4b:61:77:ba:
c3:d9:32:8e:74:54:23:07:87:f6:2d:ed:14:1a:d5:
a7:20:01:21:a7:6f:3e:ec:2d:b7:09:de:0c:59:e5:
b8:42:ff:8c:66:0f:0b:aa:c2:fa:c7:87:ae:41:22:
51:1a:14:c5:1c:68:fc:88:a7:01:8c:5f:d0:15:21:
56:a1:64:1e:bb:a7:48:9a:97:bf:73:a0:8b:c6:59:
a4:26:bb:66:88:8a:f4:8d:c8:9f:08:70:04:2d:44:
59:55:dd:cd:d6:69:57:e8:40:17:d9:d9:2c:2f:f2:
f1:59:1a:1a:48:b3:19:9f:a4:3b:52:69:55:99:a3:
48:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:60:B3:FE:CE:E7:8F:CA:32:22:FB:AE:71:AD:6F:41:BC:89:C2:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6b66477f-cb0a-34b7-aacd-a04e267cc478.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8f:ac00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:3c:8f:01:97:97:76:9a:4d:d1:aa:b2:3d:07:b9:25:31:57:
a9:df:b0:4c:11:66:64:9d:e4:c5:4a:48:66:e7:0b:86:02:28:
b8:21:2c:a5:92:75:08:fa:2c:30:46:47:35:8b:5d:95:8f:7d:
55:19:f4:ea:96:b4:27:97:cf:ea:63:53:65:bc:92:8d:d9:73:
b8:3e:23:e3:c8:1f:df:63:b8:0c:8f:0d:43:68:93:76:8c:04:
71:84:9c:50:f6:ff:d3:2a:b0:db:28:e3:96:c3:a5:bd:4e:9c:
00:14:0c:fe:62:a9:a2:3c:91:e1:3e:25:c0:fb:80:06:81:9e:
aa:e8:84:49:d4:d0:ce:50:a2:d5:f6:2d:ec:78:3e:bb:03:ca:
4c:88:22:4f:86:a1:a9:6d:0f:e7:a9:f8:1f:17:70:39:74:ce:
bb:8e:0e:1d:ae:bf:af:b4:fe:69:bb:83:c3:43:f3:7e:5f:47:
3a:05:dc:cf:36:1f:6a:88:8b:9b:95:f5:ad:cf:3f:c2:62:dc:
fc:f7:ba:8f:a9:a7:0e:20:f1:94:b5:15:9d:4c:5e:c0:f1:63:
b2:22:11:8b:a8:d3:0f:0b:93:3f:0c:ef:07:31:01:f2:5a:77:
50:a2:a6:d6:fc:df:73:a5:1a:a8:a4:61:4b:51:b2:2c:87:2d:
07:73:52:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:46 2026 by rpki-client