
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf00ff42-1d72-33fe-afc2-42837b116524.roa
File: bf00ff42-1d72-33fe-afc2-42837b116524.roa (raw, json)
Hash identifier: SMdIX8IJWBPOPIQ/zWblO3LfOrP/qXVZv9cTwYG5T0c=
Subject key identifier: 5F:3D:78:2C:26:B8:62:E1:DF:68:A4:52:68:00:01:E0:8A:19:2F:26
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584E059B50CE1CD87884BE2A7580
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf00ff42-1d72-33fe-afc2-42837b116524.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 30036
IP address blocks: 2604:2e8c:9400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:50:ce:1c:d8:78:84:be:2a:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=71a7aad2-d84b-41cf-aaca-51fc1f61479e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:e4:9c:7f:23:dc:9f:40:4d:b4:de:6b:f0:
46:9d:08:af:f9:93:30:07:90:04:fd:e4:c7:08:c0:
67:66:dd:29:65:64:57:d9:e4:14:d9:3d:4f:b8:6e:
23:7e:d9:4a:b9:c3:cc:e9:73:68:44:59:bd:c2:0a:
d8:dc:f6:89:41:78:38:74:23:70:ee:f8:11:e3:15:
d1:3d:3a:d6:27:22:7d:fe:59:dd:22:01:cb:32:13:
cd:53:70:4c:3e:c3:c5:11:e4:6a:63:88:26:07:cd:
01:db:94:16:53:51:fb:32:47:12:d3:44:c0:46:92:
10:e5:3e:cc:03:54:74:d1:50:ee:20:ce:73:0f:3e:
92:b8:68:89:d8:04:c2:da:3a:e6:b2:15:cd:6b:11:
98:91:9a:b0:75:9e:47:06:c4:fb:c1:cb:6b:04:03:
0b:27:ea:4e:6b:3b:f2:68:82:62:25:eb:7e:06:17:
da:d7:29:4e:b4:8e:8e:4f:19:7a:aa:ff:22:fc:96:
d4:2f:c0:31:dd:6d:d9:5b:af:6a:44:54:38:b9:fc:
e5:e1:cc:72:c7:4b:11:e1:10:67:79:90:ba:7e:a1:
22:ee:f8:77:6a:78:64:61:ae:a5:53:d2:0b:80:a9:
4b:ff:06:b3:37:e2:c0:11:15:77:ff:86:d6:75:3d:
d6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3D:78:2C:26:B8:62:E1:DF:68:A4:52:68:00:01:E0:8A:19:2F:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf00ff42-1d72-33fe-afc2-42837b116524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8c:9400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:5e:c7:c2:da:0d:1a:3a:d1:9d:c7:5a:71:05:e5:00:35:73:
01:47:eb:8d:df:b2:89:aa:70:fd:be:ca:02:67:60:0d:c7:58:
b7:e2:d9:f0:62:63:3e:f8:92:34:a8:ad:0d:eb:a5:60:81:33:
13:55:7d:f4:c8:3e:dd:1d:32:7d:79:a9:ae:bd:dc:af:79:61:
9c:c3:9f:16:bb:41:21:51:ca:56:22:1a:68:50:d9:59:b7:c0:
34:09:81:90:e9:fc:a5:b9:57:55:75:c4:c1:ce:bd:ad:d1:80:
bd:10:4f:04:a9:09:08:46:0d:2d:58:85:12:63:e6:47:95:4a:
b4:9f:f0:17:24:9f:69:fc:98:97:0f:ae:80:b6:c7:92:45:99:
0d:ec:29:d9:33:97:56:41:fa:d8:ec:1e:f3:4f:06:9d:9d:dc:
10:e7:df:be:e6:dc:e0:76:4e:73:6e:68:28:8f:81:d8:22:76:
95:23:4f:4c:25:cf:a0:f0:7b:21:4d:e0:e7:f8:3a:42:7d:9e:
01:46:99:2c:dd:a9:1d:c9:11:38:4a:3b:a6:6e:67:37:00:25:
9b:46:64:ac:eb:ea:7d:aa:8c:95:97:64:87:85:bf:c7:49:eb:
bd:94:9e:2a:59:85:c0:35:f7:d5:8d:c2:d8:a9:93:79:c7:d0:
22:f7:b0:62
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4Fm1DOHNh4hL4qdYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
NzFhN2FhZDItZDg0Yi00MWNmLWFhY2EtNTFmYzFmNjE0NzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucbknH8j3J9ATbTea/BGnQiv+ZMwB5AE/eTH
CMBnZt0pZWRX2eQU2T1PuG4jftlKucPM6XNoRFm9wgrY3PaJQXg4dCNw7vgR4xXR
PTrWJyJ9/lndIgHLMhPNU3BMPsPFEeRqY4gmB80B25QWU1H7MkcS00TARpIQ5T7M
A1R00VDuIM5zDz6SuGiJ2ATC2jrmshXNaxGYkZqwdZ5HBsT7wctrBAMLJ+pOazvy
aIJiJet+Bhfa1ylOtI6OTxl6qv8i/JbUL8Ax3W3ZW69qRFQ4ufzl4cxyx0sR4RBn
eZC6fqEi7vh3anhkYa6lU9ILgKlL/wazN+LAERV3/4bWdT3WCwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFF89eCwmuGLh32ikUmgAAeCKGS8mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmYwMGZmNDItMWQ3Mi0z
M2ZlLWFmYzItNDI4MzdiMTE2NTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujJQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWV7HwtoNGjrRncdacQXlADVzAUfrjd+yiapw/b7KAmdgDcdYt+LZ
8GJjPviSNKitDeulYIEzE1V99Mg+3R0yfXmprr3cr3lhnMOfFrtBIVHKViIaaFDZ
WbfANAmBkOn8pblXVXXEwc69rdGAvRBPBKkJCEYNLViFEmPmR5VKtJ/wFySfafyY
lw+ugLbHkkWZDewp2TOXVkH62Owe808GnZ3cEOffvubc4HZOc25oKI+B2CJ2lSNP
TCXPoPB7IU3g5/g6Qn2eAUaZLN2pHckROEo7pm5nNwAlm0ZkrOvqfaqMlZdkh4W/
x0nrvZSeKlmFwDX31Y3C2KmTecfQIvewYg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:35:48 2026 by rpki-client