
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a41da2d8-6d56-3524-b868-acd5274597fb.roa
File: a41da2d8-6d56-3524-b868-acd5274597fb.roa (raw, json)
Hash identifier: 9sYrR9Ny9rnjJrwaw3WNzw5GwuZ+E8L/AwP4fXHbFlM=
Subject key identifier: 54:74:EE:D5:46:CF:D1:AC:5D:BB:69:3D:B7:75:6C:52:13:BD:77:DE
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D75D52D7E698E4ED8420EB980
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a41da2d8-6d56-3524-b868-acd5274597fb.roa
Signing time: Fri 10 Apr 2026 13:00:31 +0000
ROA not before: Fri 10 Apr 2026 13:00:31 +0000
ROA not after: Thu 09 Jul 2026 13:00:31 +0000
asID: 30036
IP address blocks: 2604:2e80::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:75:d5:2d:7e:69:8e:4e:d8:42:0e:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Apr 10 13:00:31 2026 GMT
Not After : Jul 9 13:00:31 2026 GMT
Subject: CN=20cdbfc4-90d3-4ab8-becd-1364d4930d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:48:ec:56:83:3e:92:f0:51:2d:72:47:bf:
64:f8:2f:42:db:2e:d1:98:56:bf:08:95:cf:1d:92:
46:ab:61:10:ae:7a:0e:7d:25:34:28:62:ab:7d:f6:
0c:e1:bb:ea:66:8d:8e:52:3b:b5:c6:d4:73:28:de:
3b:b4:07:5f:34:b9:0f:9e:9b:95:0b:34:0b:8c:35:
1a:ac:5a:28:00:06:b7:cd:23:b8:38:47:85:11:c3:
11:2b:51:5a:dd:ff:e1:9b:df:7f:30:86:d3:37:ed:
e3:6e:5e:58:ce:2f:68:ed:db:8a:7f:af:e9:d2:55:
d4:9f:df:04:00:81:1c:29:7d:fc:9d:08:c9:e7:e5:
ac:96:35:7d:0b:d0:e3:2e:21:7e:04:cc:4f:5c:da:
3b:d9:8e:b4:95:e5:a1:50:66:de:96:88:6e:f7:b6:
fe:84:3f:fc:f0:14:49:d6:9b:12:65:4c:0e:a3:be:
4e:d5:6a:1c:78:2f:61:85:07:fa:a7:8c:88:52:2b:
b8:00:70:2b:db:a5:dd:b2:20:53:80:68:0a:b6:5e:
fa:a1:d6:13:77:82:61:85:7a:b5:bc:cc:0d:36:04:
3c:99:3e:11:4b:5c:43:9a:07:24:4b:59:54:4c:ba:
26:d6:f1:f0:86:d8:74:1e:b3:bd:5b:eb:dd:53:d5:
24:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:74:EE:D5:46:CF:D1:AC:5D:BB:69:3D:B7:75:6C:52:13:BD:77:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a41da2d8-6d56-3524-b868-acd5274597fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e80::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:29:cf:49:ef:42:0f:d1:f5:c7:ee:c5:c3:3f:54:f8:f4:5b:
0d:e4:d0:48:0f:45:54:d2:56:42:8a:27:06:4f:ca:0a:6d:14:
13:f0:6a:b7:67:c0:4e:3a:2f:54:69:c2:f7:2e:e4:e2:70:2d:
b9:9a:8e:bc:8b:97:db:32:f5:1d:d9:53:e7:21:6e:ef:16:50:
96:c6:d7:ad:a9:88:7a:ee:44:4c:19:20:6b:a7:e0:b2:02:88:
43:c2:fc:00:16:f2:26:cd:1f:07:d8:b3:15:c3:4a:6d:dc:a8:
09:34:71:0b:66:c3:21:09:d9:fb:5c:de:f3:ab:7f:2a:30:b8:
23:22:14:a5:a2:be:4c:f7:a6:61:98:ee:64:cf:11:45:0e:14:
af:b5:57:87:68:b5:f1:cd:70:d4:d9:f8:9e:41:89:56:84:c8:
87:c6:ae:7c:8a:38:69:78:6c:58:19:59:d6:e6:4e:f0:91:fa:
90:2b:da:c4:fe:83:32:e6:e5:6c:8c:2b:32:8f:b9:bc:f9:68:
6a:83:f7:95:13:32:4f:66:49:a3:82:b8:c8:35:f9:e3:9a:f3:
cc:93:d8:ef:6c:d8:c9:31:de:e0:8a:7c:f6:8a:67:16:a6:b1:
b4:a6:a9:a0:92:7f:72:54:f5:4a:94:fd:65:f8:7f:02:8d:0d:
c8:05:3b:da
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE111S1+aY5O2EIOuYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk
MjBjZGJmYzQtOTBkMy00YWI4LWJlY2QtMTM2NGQ0OTMwZDc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx99I7FaDPpLwUS1yR79k+C9C2y7RmFa/CJXP
HZJGq2EQrnoOfSU0KGKrffYM4bvqZo2OUju1xtRzKN47tAdfNLkPnpuVCzQLjDUa
rFooAAa3zSO4OEeFEcMRK1Fa3f/hm99/MIbTN+3jbl5Yzi9o7duKf6/p0lXUn98E
AIEcKX38nQjJ5+WsljV9C9DjLiF+BMxPXNo72Y60leWhUGbelohu97b+hD/88BRJ
1psSZUwOo75O1WoceC9hhQf6p4yIUiu4AHAr26XdsiBTgGgKtl76odYTd4JhhXq1
vMwNNgQ8mT4RS1xDmgckS1lUTLom1vHwhth0HrO9W+vdU9UkAwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFR07tVGz9GsXbtpPbd1bFITvXfeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTQxZGEyZDgtNmQ1Ni0z
NTI0LWI4NjgtYWNkNTI3NDU5N2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQugAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAeCnPSe9CD9H1x+7Fwz9U+PRbDeTQSA9FVNJWQoonBk/KCm0UE/Bq
t2fATjovVGnC9y7k4nAtuZqOvIuX2zL1HdlT5yFu7xZQlsbXramIeu5ETBkga6fg
sgKIQ8L8ABbyJs0fB9izFcNKbdyoCTRxC2bDIQnZ+1ze86t/KjC4IyIUpaK+TPem
YZjuZM8RRQ4Ur7VXh2i18c1w1Nn4nkGJVoTIh8aufIo4aXhsWBlZ1uZO8JH6kCva
xP6DMublbIwrMo+5vPloaoP3lRMyT2ZJo4K4yDX545rzzJPY72zYyTHe4Ip89opn
FqaxtKapoJJ/clT1SpT9Zfh/Ao0NyAU72g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:10 2026 by rpki-client