
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/854aae78-9b36-314e-ae54-9f59a9b962b6.roa
File: 854aae78-9b36-314e-ae54-9f59a9b962b6.roa (raw, json)
Hash identifier: Ixy2xEB1W0KLB9dVvul6qe7MeoWn2Duaa351bax/Ewc=
Subject key identifier: CA:2D:61:05:14:0E:EE:15:02:13:5B:7F:DA:9F:AF:66:45:69:0A:95
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D55BCBC7B38EF100AA1231E80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/854aae78-9b36-314e-ae54-9f59a9b962b6.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 19905
IP address blocks: 2604:2e8f:f800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:bc:7b:38:ef:10:0a:a1:23:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=a1aad0c1-cde0-4f28-a356-6ca06c19cee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e0:88:f6:de:10:94:e2:27:9a:55:b5:d3:d7:
8b:91:bb:d2:a7:67:8d:3c:17:30:1f:95:cf:12:ac:
67:de:b6:c7:62:da:b4:44:d7:a4:75:ae:c3:34:e8:
a8:03:44:db:1a:e9:b1:c2:e8:c4:ea:f1:d1:7a:15:
4f:dc:5f:65:e9:f8:5b:ac:4e:89:ae:cc:b3:76:2e:
df:f8:11:16:53:d1:96:82:ae:9a:ee:14:08:cb:1c:
c7:e2:c5:a3:9c:40:c0:e3:81:cc:fb:20:d7:05:83:
45:ac:59:93:ec:69:b1:c8:be:25:02:b3:7c:45:17:
4b:01:26:8b:7f:b4:20:ac:62:2e:93:c1:33:0e:47:
4a:3e:4f:7a:95:59:21:ef:56:00:ab:00:0c:30:19:
b1:71:30:c1:6a:eb:ff:0d:3a:29:09:7c:e8:d5:8a:
f2:4a:f6:d5:33:87:9c:99:92:32:6b:79:03:4a:c9:
3e:bb:24:a9:26:0e:39:d3:45:75:90:36:8c:69:cd:
f1:65:ea:7c:23:22:20:ff:60:46:3d:4c:2f:b4:ff:
8b:0a:a4:28:75:85:40:6d:fc:ca:ef:20:17:d5:e7:
65:16:ab:6d:0f:20:39:99:df:1a:4d:de:bc:5b:28:
84:60:ff:4f:72:a8:57:44:9a:16:d0:d8:2c:8f:8c:
7b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2D:61:05:14:0E:EE:15:02:13:5B:7F:DA:9F:AF:66:45:69:0A:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/854aae78-9b36-314e-ae54-9f59a9b962b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8f:f800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:33:04:8a:44:f0:d7:8e:08:88:3c:ec:fb:1b:9d:fe:c8:3c:
1e:65:e2:88:fb:57:b1:e6:42:ee:0b:33:db:5e:06:6b:3c:c6:
6d:10:91:cf:50:6b:2d:ba:60:02:94:86:1d:22:cf:22:60:f3:
d2:1e:26:26:b7:58:a3:c9:1c:72:55:64:b6:86:8b:2e:01:90:
4c:bc:a2:94:a3:0d:67:d3:fb:97:ad:5d:f3:e8:27:98:15:e0:
7e:11:ca:ed:47:c8:38:56:d3:7b:a2:02:c2:a0:ea:68:85:bb:
68:d8:89:10:00:ed:df:d1:f0:55:0d:93:8c:62:dc:5a:06:a0:
c6:46:4e:27:a8:df:f0:98:bc:29:b9:55:45:ce:68:92:0d:3b:
4d:b0:bb:c2:9d:de:e6:59:6f:bc:c9:72:9e:9d:c6:09:c8:68:
40:53:25:f1:5e:4d:cd:07:4a:03:9e:c7:bf:2b:89:94:34:7c:
10:e6:c2:43:9d:a6:5a:65:d5:87:2f:cc:2b:46:f7:8c:7e:15:
88:13:b3:46:05:5f:ce:f5:58:3b:ea:50:7a:0a:24:20:53:2f:
35:40:b9:9e:9e:66:f6:bf:c3:a0:45:97:12:c2:7f:8f:9e:5f:
43:18:e7:f0:54:87:cd:8d:5e:af:7b:da:78:78:22:fd:58:f9:
fd:48:1a:4b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1VvLx7OO8QCqEjHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
YTFhYWQwYzEtY2RlMC00ZjI4LWEzNTYtNmNhMDZjMTljZWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+CI9t4QlOInmlW109eLkbvSp2eNPBcwH5XP
Eqxn3rbHYtq0RNekda7DNOioA0TbGumxwujE6vHRehVP3F9l6fhbrE6Jrsyzdi7f
+BEWU9GWgq6a7hQIyxzH4sWjnEDA44HM+yDXBYNFrFmT7GmxyL4lArN8RRdLASaL
f7QgrGIuk8EzDkdKPk96lVkh71YAqwAMMBmxcTDBauv/DTopCXzo1YrySvbVM4ec
mZIya3kDSsk+uySpJg4500V1kDaMac3xZep8IyIg/2BGPUwvtP+LCqQodYVAbfzK
7yAX1edlFqttDyA5md8aTd68WyiEYP9PcqhXRJoW0Ngsj4x70QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMotYQUUDu4VAhNbf9qfr2ZFaQqVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODU0YWFlNzgtOWIzNi0z
MTRlLWFlNTQtOWY1OWE5Yjk2MmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj/gw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEACTMEikTw144IiDzs+xud/sg8HmXiiPtXseZC7gsz214GazzGbRCR
z1BrLbpgApSGHSLPImDz0h4mJrdYo8kcclVktoaLLgGQTLyilKMNZ9P7l61d8+gn
mBXgfhHK7UfIOFbTe6ICwqDqaIW7aNiJEADt39HwVQ2TjGLcWgagxkZOJ6jf8Ji8
KblVRc5okg07TbC7wp3e5llvvMlynp3GCchoQFMl8V5NzQdKA57HvyuJlDR8EObC
Q52mWmXVhy/MK0b3jH4ViBOzRgVfzvVYO+pQegokIFMvNUC5np5m9r/DoEWXEsJ/
j55fQxjn8FSHzY1er3vaeHgi/Vj5/UgaSw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:00:27 2026 by rpki-client