
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9b970d4e-cc06-30a7-a188-46e717b7337e.roa
File: 9b970d4e-cc06-30a7-a188-46e717b7337e.roa (raw, json)
Hash identifier: uTFg1PIjbdViy6cGpFTYruBtXb+wXk6u4XSdZwsZfPE=
Subject key identifier: 56:92:3E:98:6E:67:81:67:E0:3B:5B:99:0E:AA:FD:92:AC:3A:97:59
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D75D52253EC28858606A8DA00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9b970d4e-cc06-30a7-a188-46e717b7337e.roa
Signing time: Fri 10 Apr 2026 13:00:31 +0000
ROA not before: Fri 10 Apr 2026 13:00:31 +0000
ROA not after: Thu 09 Jul 2026 13:00:31 +0000
asID: 30036
IP address blocks: 2604:2e8d:3400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:75:d5:22:53:ec:28:85:86:06:a8:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Apr 10 13:00:31 2026 GMT
Not After : Jul 9 13:00:31 2026 GMT
Subject: CN=b2a8ea28-d6ca-4826-a1c1-56210f778844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d3:2e:a8:69:68:7a:e3:bc:fb:88:cb:ad:ad:
9d:a9:42:5b:5b:34:ca:bb:a6:fa:43:1b:98:88:97:
dd:89:fb:80:63:8e:31:0c:bf:cf:09:c5:c0:69:de:
df:01:23:71:ec:af:b6:df:a8:45:77:b0:28:21:b3:
8b:21:fc:21:60:00:54:57:04:c8:92:bc:f0:1a:c0:
55:bc:66:99:23:a7:9b:e2:a5:19:7d:c6:53:09:15:
4b:9c:6e:4b:b5:87:b2:4f:b1:c2:31:e4:59:83:73:
a5:8e:34:df:e0:b3:76:12:db:b8:6a:18:4e:6f:a3:
c9:e6:5e:d9:ac:98:3d:b4:4d:e7:d2:9d:39:94:73:
37:f8:3f:68:20:5b:49:ac:b7:fd:b1:0c:fd:05:30:
dc:37:b1:a7:68:1b:10:e8:fc:80:b6:e6:70:12:76:
9e:8a:e2:11:a2:c7:c0:42:ed:e5:22:83:84:81:01:
97:5e:35:f0:5f:53:77:0c:ac:e5:62:1d:63:53:2b:
6d:f7:90:51:75:16:11:ae:22:1b:ca:8c:76:69:80:
c3:0a:f1:c0:4d:67:0b:6f:06:a5:86:96:82:a2:d2:
97:2a:2e:93:cd:da:70:86:85:33:62:44:8d:4d:fb:
61:d3:49:51:0c:e3:87:26:ec:da:c0:5f:a2:4e:b3:
0f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:92:3E:98:6E:67:81:67:E0:3B:5B:99:0E:AA:FD:92:AC:3A:97:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9b970d4e-cc06-30a7-a188-46e717b7337e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8d:3400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:4b:9f:17:c8:82:7e:22:5a:e7:a8:7b:f7:a8:1d:40:aa:b5:
6a:b0:a5:56:38:1d:ef:ea:7b:f2:87:dc:c9:ea:3f:30:c8:d0:
2b:4f:cb:9d:f0:41:1d:3b:78:a4:69:88:e1:d5:1e:10:13:ad:
46:9c:b0:a7:76:73:c2:b5:21:98:04:7e:70:a1:16:45:d4:a7:
24:9c:85:e6:6d:f7:38:8e:05:bd:14:71:1f:70:4f:4c:27:6e:
fd:66:4e:00:a8:37:77:46:5e:03:05:2a:c6:fd:32:9f:3f:93:
39:bd:b7:11:d6:17:63:d3:73:5c:43:6e:f8:78:4c:5d:92:0d:
c3:93:a8:20:f1:37:8f:6c:cd:69:fe:02:03:68:49:60:f2:9f:
75:53:04:73:5e:f2:95:34:33:36:5d:15:fc:bb:97:ae:5d:d0:
58:11:4d:41:b0:a4:63:f7:6c:f3:33:80:0b:dc:29:92:e6:3c:
80:cb:32:b4:dc:46:b8:d3:34:59:84:37:58:31:4b:62:12:72:
0d:95:a7:e8:1d:0c:c8:15:6d:db:8c:0f:6e:6e:ea:3f:82:6c:
2a:38:b5:48:d5:fe:a0:af:9b:ed:0d:2f:0b:f9:56:20:bd:1f:
45:69:96:e4:89:05:49:be:84:a5:e7:6a:10:45:08:da:0e:78:
bd:7d:51:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:11:11 2026 by rpki-client