
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa
File: db85abb9-cd34-312f-a6a2-78db24e05c0b.roa (raw, json)
Hash identifier: Af3nprThC2eIjBb64KVQQ5qqzRZ6t+ZcTpQpkFs99VU=
Subject key identifier: 8A:84:3F:3C:79:32:80:DA:66:15:9F:76:DA:D3:E6:64:1E:74:BC:23
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584E059C76B6786772ABED326A00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 30036
IP address blocks: 2604:2e8a:8c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:76:b6:78:67:72:ab:ed:32:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=702648ee-60ba-4444-9766-d06f70b8b6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:f3:29:d1:e6:fd:d1:b5:bd:b6:e1:e2:02:
d8:c9:a6:79:bb:17:a3:fe:4b:80:74:7a:cc:fd:fb:
c5:23:59:da:34:88:c1:61:9f:db:15:34:c5:be:fc:
f9:d1:6f:6d:56:05:7d:8d:16:2f:f1:6a:26:0f:81:
35:95:80:93:32:0b:62:87:30:81:dc:bc:8a:e1:d3:
b5:2d:ab:a9:ac:e6:d8:26:08:88:a1:27:ce:ce:a9:
00:fb:be:64:8e:6b:82:4c:5b:a3:65:b4:e9:b2:77:
9e:5b:04:22:a0:ea:d1:13:0e:ec:e6:64:48:17:20:
8f:2a:d1:e3:d5:d9:0a:5e:47:b3:0d:5b:55:60:1b:
9f:14:aa:f4:23:3f:43:87:74:1f:c1:57:92:a7:96:
d3:e5:8a:55:21:cf:8e:39:db:45:f2:de:89:3e:ea:
61:22:33:e1:cf:c3:cc:4a:ca:09:86:65:8b:36:51:
93:77:aa:8f:ed:95:ce:87:8f:f4:45:e8:19:b5:c0:
30:63:d3:3a:e0:1c:39:b8:8a:2f:8d:6a:62:bd:51:
6a:9a:da:a8:f1:10:d0:2e:22:84:72:f2:17:c8:4d:
a0:5e:0f:6a:65:64:08:dd:70:64:2f:fb:4a:3a:57:
09:6e:d9:67:d2:28:8d:59:34:5a:54:12:eb:98:8e:
e4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:84:3F:3C:79:32:80:DA:66:15:9F:76:DA:D3:E6:64:1E:74:BC:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8a:8c00::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:1e:b5:01:23:2b:b3:29:89:6f:61:5e:73:fa:9e:bf:f6:59:
80:d0:f9:23:51:82:91:7f:ba:3d:57:19:1e:3f:a3:3a:a6:51:
09:7e:72:06:07:24:16:b2:ee:b2:ef:8e:26:ab:e2:ad:38:c2:
85:7c:6e:16:83:76:c2:ae:3b:9d:7d:77:58:16:33:5d:0d:8d:
f0:64:00:64:bf:80:99:cd:44:be:27:5a:e2:27:3b:49:02:1e:
73:b8:8a:71:c5:a8:64:e4:44:76:0c:1b:3e:5a:9e:b7:b5:96:
5b:a8:06:ff:c0:3e:3e:ca:c0:85:42:5a:1b:5c:f9:7f:c8:ce:
39:50:d4:ef:d8:b7:ca:47:a0:26:a1:7f:4b:1a:b9:b7:f0:7d:
93:b2:cb:d6:0c:03:a9:99:47:f7:f0:c5:26:4c:47:ea:14:e4:
f3:07:e3:44:da:11:15:9a:ca:4f:c1:82:94:7d:1f:44:3a:46:
66:82:f2:f3:fb:74:3b:0f:ba:9b:f7:01:8b:c8:d1:7a:5a:30:
7f:2f:9d:44:ba:df:15:a1:ef:9c:91:1d:f6:ab:55:7d:7e:4f:
62:79:69:aa:28:bf:5e:8d:14:b1:32:23:26:ee:88:3c:11:44:
71:46:88:a9:0b:44:94:3f:36:94:21:1e:24:82:36:b4:64:31:
3d:19:53:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:38:44 2026 by rpki-client